42
42
from ivle import util
45
44
from ivle.dispatch.request import Request
46
from ivle.dispatch import login
49
import plugins.console # XXX: Relies on www/ being in the Python path.
51
# XXX List of plugins, which will eventually be read in from conf
53
'ivle.webapp.admin.user#Plugin',
54
'ivle.webapp.browser#Plugin',
55
'ivle.webapp.groups#Plugin',
58
def get_routes_mapper():
45
import ivle.webapp.security
46
from ivle.webapp.base.plugins import ViewPlugin, PublicViewPlugin
47
from ivle.webapp.base.xhtml import XHTMLView, XHTMLErrorView
48
from ivle.webapp.errors import HTTPError, Unauthorized, NotFound
50
def generate_route_mapper(view_plugins, attr):
60
52
Build a Mapper object for doing URL matching using 'routes', based on the
53
given plugin registry.
63
55
m = routes.Mapper(explicit=True)
64
for pluginstr in plugins_HACK:
65
plugin_path, classname = pluginstr.split('#')
66
# Load the plugin module from somewhere in the Python path
67
# (Note that plugin_path is a fully-qualified Python module name).
68
plugin = getattr(__import__(plugin_path, fromlist=[classname]),
56
for plugin in view_plugins:
70
57
# Establish a URL pattern for each element of plugin.urls
71
for url in plugin.urls:
58
assert hasattr(plugin, 'urls'), "%r does not have any urls" % plugin
59
for url in getattr(plugin, attr):
73
61
view_class = url[1]
74
62
kwargs_dict = url[2] if len(url) >= 3 else {}
75
63
m.connect(routex, view=view_class, **kwargs_dict)
79
"""Handles a request which may be to anywhere in the site except media.
66
def handler(apachereq):
67
"""Handles an HTTP request.
80
69
Intended to be called by mod_python, as a handler.
82
req: An Apache request object.
84
# Make the request object into an IVLE request which can be passed to apps
87
req = Request(req, html.write_html_head)
89
# Pass the apachereq to error reporter, since ivle req isn't created
91
handle_unknown_exception(apachereq, *sys.exc_info())
92
# Tell Apache not to generate its own errors as well
93
return mod_python.apache.OK
95
# Run the main handler, and catch all exceptions
97
return handler_(req, apachereq)
98
except mod_python.apache.SERVER_RETURN:
99
# An apache error. We discourage these, but they might still happen.
103
handle_unknown_exception(req, *sys.exc_info())
104
# Tell Apache not to generate its own errors as well
105
return mod_python.apache.OK
107
def handler_(req, apachereq):
109
Nested handler function. May raise exceptions. The top-level handler is
110
just used to catch exceptions.
111
Takes both an IVLE request and an Apache req.
71
@param apachereq: An Apache request object.
73
# Make the request object into an IVLE request which can be given to views
74
req = Request(apachereq)
113
76
# Hack? Try and get the user login early just in case we throw an error
114
77
# (most likely 404) to stop us seeing not logged in even when we are.
115
78
if not req.publicmode:
116
req.user = login.get_user_details(req)
118
### BEGIN New plugins framework ###
119
# XXX This should be done ONCE per Python process, not per request.
121
# XXX No authentication is done here
122
req.mapper = get_routes_mapper()
79
user = ivle.webapp.security.get_user_details(req)
81
# Don't set the user if it is disabled or hasn't accepted the ToS.
82
if user and user.valid:
85
conf = ivle.config.Config()
89
req.mapper = generate_route_mapper(conf.plugin_index[PublicViewPlugin],
92
req.mapper = generate_route_mapper(conf.plugin_index[ViewPlugin],
123
95
matchdict = req.mapper.match(req.uri)
124
96
if matchdict is not None:
125
97
viewcls = matchdict['view']
127
99
# (The latter two seem to be built-in, and we don't want them).
128
100
kwargs = matchdict.copy()
129
101
del kwargs['view']
130
# Instantiate the view, which should be a BaseView class
131
view = viewcls(req, **kwargs)
136
### END New plugins framework ###
138
# Check req.app to see if it is valid. 404 if not.
139
if req.app is not None and req.app not in ivle.conf.apps.app_url:
140
req.throw_error(Request.HTTP_NOT_FOUND,
141
"There is no application called %s." % repr(req.app))
143
# Special handling for public mode - only allow the public app, call it
145
# NOTE: This will not behave correctly if the public app uses
146
# write_html_head_foot, but "serve" does not.
148
if req.app != ivle.conf.apps.public_app:
149
req.throw_error(Request.HTTP_FORBIDDEN,
150
"This application is not available on the public site.")
151
app = ivle.conf.apps.app_url[ivle.conf.apps.public_app]
152
apps.call_app(app.dir, req)
155
# app is the App object for the chosen app
157
app = ivle.conf.apps.app_url[ivle.conf.apps.default_app]
159
app = ivle.conf.apps.app_url[req.app]
161
# Check if app requires auth. If so, perform authentication and login.
162
# This will either return a User object, None, or perform a redirect
163
# which we will not catch here.
165
req.user = login.login(req)
166
logged_in = req.user is not None
168
req.user = login.get_user_details(req)
172
# Keep the user's session alive by writing to the session object.
173
# req.get_session().save()
174
# Well, it's a fine idea, but it creates considerable grief in the
175
# concurrent update department, so instead, we'll just make the
176
# sessions not time out.
177
req.get_session().unlock()
179
# If user did not specify an app, HTTP redirect to default app and
182
req.throw_redirect(util.make_path(ivle.conf.apps.default_app))
184
# Set the default title to the app's tab name, if any. Otherwise URL
186
if app.name is not None:
103
# Instantiate the view, which should be a BaseView class
104
view = viewcls(req, **kwargs)
106
# Check that the request (mainly the user) is permitted to access
108
if not view.authorize(req):
113
# A view explicitly raised an HTTP error. Respect it.
116
# Try to find a custom error view.
117
if hasattr(viewcls, 'get_error_view'):
118
errviewcls = viewcls.get_error_view(e)
120
errviewcls = XHTMLView.get_error_view(e)
123
errview = errviewcls(req, e)
131
except mod_python.apache.SERVER_RETURN:
132
# A mod_python-specific Apache error.
133
# XXX: We need to raise these because req.throw_error() uses them.
134
# Remove this after Google Code issue 117 is fixed.
137
# A non-HTTPError appeared. We have an unknown exception. Panic.
138
handle_unknown_exception(req, *sys.exc_info())
191
# Call the specified app with the request object
192
apps.call_app(app.dir, req)
194
# if not logged in, login.login will have written the login box.
195
# Just clean up and exit.
197
# MAKE SURE we write the HTTP (and possibly HTML) header. This
198
# wouldn't happen if nothing else ever got written, so we have to make
200
req.ensure_headers_written()
202
# When done, write out the HTML footer if the app has requested it
203
if req.write_html_head_foot:
204
# Show the console if required
205
if logged_in and app.useconsole:
206
plugins.console.present(req, windowpane=True)
207
html.write_html_foot(req)
209
# Note: Apache will not write custom HTML error messages here.
210
# Use req.throw_error to do that.
144
XHTMLErrorView(req, NotFound()).render(req)
213
147
def handle_unknown_exception(req, exc_type, exc_value, exc_traceback):
269
logging.debug('Logging Unhandled Exception')
271
# We handle 3 types of error.
272
# IVLEErrors with 4xx response codes (client error).
273
# IVLEErrors with 5xx response codes (handled server error).
274
# Other exceptions (unhandled server error).
275
# IVLEErrors should not have other response codes than 4xx or 5xx
276
# (eg. throw_redirect should have been used for 3xx codes).
277
# Therefore, that is treated as an unhandled error.
279
if (exc_type == util.IVLEError and httpcode >= 400
280
and httpcode <= 499):
281
# IVLEErrors with 4xx response codes are client errors.
282
# Therefore, these have a "nice" response (we even coat it in the IVLE
285
req.write_html_head_foot = True
286
req.write_javascript_settings = False
287
req.write('<div id="ivle_padding">\n')
190
# A "bad" error message. We shouldn't get here unless IVLE
191
# misbehaves (which is currently very easy, if things aren't set up
193
# Write the traceback.
194
# If this is a non-4xx IVLEError, get the message and httpcode and
195
# make the error message a bit nicer (but still include the
197
# We also need to special-case IVLEJailError, as we can get another
198
# almost-exception out of it.
200
codename, msg = None, None
202
if exc_type is util.IVLEJailError:
203
msg = exc_value.type_str + ": " + exc_value.message
204
tb = 'Exception information extracted from IVLEJailError:\n'
205
tb += urllib.unquote(exc_value.info)
289
208
codename, msg = req.get_http_codename(httpcode)
290
209
except AttributeError:
291
codename, msg = None, None
292
# Override the default message with the supplied one,
294
if exc_value.message is not None:
295
msg = exc_value.message
296
if codename is not None:
297
req.write("<h1>Error: %s</h1>\n" % cgi.escape(codename))
299
req.write("<h1>Error</h1>\n")
301
req.write("<p>%s</p>\n" % cgi.escape(msg))
303
req.write("<p>An unknown error occured.</p>\n")
306
logging.info(str(msg))
308
req.write("<p>(HTTP error code %d)</p>\n" % httpcode)
310
req.write("<p>Warning: Could not open Error Log: '%s'</p>\n"
311
%cgi.escape(logfile))
312
req.write('</div>\n')
313
html.write_html_foot(req)
315
# A "bad" error message. We shouldn't get here unless IVLE
316
# misbehaves (which is currently very easy, if things aren't set up
318
# Write the traceback.
319
# If this is a non-4xx IVLEError, get the message and httpcode and
320
# make the error message a bit nicer (but still include the
322
# We also need to special-case IVLEJailError, as we can get another
323
# almost-exception out of it.
325
codename, msg = None, None
327
if exc_type is util.IVLEJailError:
328
msg = exc_value.type_str + ": " + exc_value.message
329
tb = 'Exception information extracted from IVLEJailError:\n'
330
tb += urllib.unquote(exc_value.info)
333
codename, msg = req.get_http_codename(httpcode)
334
except AttributeError:
336
# Override the default message with the supplied one,
338
if hasattr(exc_value, 'message') and exc_value.message is not None:
339
msg = exc_value.message
340
# Prepend the exception type
341
if exc_type != util.IVLEError:
342
msg = exc_type.__name__ + ": " + msg
344
tb = ''.join(traceback.format_exception(exc_type, exc_value,
348
logging.error('%s\n%s'%(str(msg), tb))
349
# Error messages are only displayed is the user is NOT a student,
350
# or if there has been a problem logging the error message
351
show_errors = (not publicmode) and ((login and \
352
str(role) != "student") or logfail)
353
req.write("""<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
212
tb = ''.join(traceback.format_exception(exc_type, exc_value,
215
logging.error('%s\n%s'%(str(msg), tb))
217
# Error messages are only displayed is the user is NOT a student,
218
# or if there has been a problem logging the error message
219
show_errors = (not publicmode) and ((login and req.user.admin) or logfail)
220
req.write("""<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
354
221
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
355
222
<html xmlns="http://www.w3.org/1999/xhtml">
356
223
<head><title>IVLE Internal Server Error</title></head>
358
225
<h1>IVLE Internal Server Error""")
360
if (codename is not None
361
and httpcode != mod_python.apache.HTTP_INTERNAL_SERVER_ERROR):
362
req.write(": %s" % cgi.escape(codename))
227
if codename is not None and \
228
httpcode != mod_python.apache.HTTP_INTERNAL_SERVER_ERROR:
229
req.write(": %s" % cgi.escape(codename))
365
232
<p>An error has occured which is the fault of the IVLE developers or
366
administration. The developers have been notified.</p>
370
req.write("<p>%s</p>\n" % cgi.escape(msg))
371
if httpcode is not None:
372
req.write("<p>(HTTP error code %d)</p>\n" % httpcode)
374
<p>Please report this to <a href="mailto:%s">%s</a> (the system
375
administrator). Include the following information:</p>
376
""" % (cgi.escape(admin_email), cgi.escape(admin_email)))
378
req.write("<pre>\n%s\n</pre>\n"%cgi.escape(tb))
380
req.write("<p>Warning: Could not open Error Log: '%s'</p>\n"
381
%cgi.escape(logfile))
382
req.write("</body></html>")
236
req.write("Please report this issue to the server administrators, "
237
"along with the following information.")
239
req.write("Details have been logged for further examination.")
244
req.write("<p>%s</p>\n" % cgi.escape(msg))
245
if httpcode is not None:
246
req.write("<p>(HTTP error code %d)</p>\n" % httpcode)
247
req.write("<h2>Debugging information</h2>")
249
req.write("<pre>\n%s\n</pre>\n"%cgi.escape(tb))
250
req.write("</body></html>")