IMPORTANT: myslice/manifold folder REMOVED due to conflicts with Manifold Server...

[unfold.git] / manifoldapi / manifoldproxy.py

diff --git a/manifoldapi/manifoldproxy.py b/manifoldapi/manifoldproxy.py
new file mode 100644 (file)
index 0000000..c16ffde
--- /dev/null
+++ b/manifoldapi/manifoldproxy.py
@@ -0,0 +1,95 @@
+import json
+import os.path
+
+# this is for django objects only
+#from django.core import serializers
+from django.http                import HttpResponse, HttpResponseForbidden
+
+#from manifoldapi.manifoldquery import ManifoldQuery
+from manifold.core.query        import Query
+from manifold.core.result_value import ResultValue
+from manifoldapi                import ManifoldAPI
+from manifoldresult             import ManifoldException
+from manifold.util.log          import Log
+from myslice.configengine       import ConfigEngine
+
+debug=False
+#debug=True
+
+# pretend the server only returns - empty lists to 'get' requests - this is to mimick 
+# misconfigurations or expired credentials or similar corner case situations
+debug_empty=False
+#debug_empty=True
+
+# this view is what the javascript talks to when it sends a query
+# see also
+# myslice/urls.py
+# as well as 
+# static/js/manifold.js
+def proxy (request,format):
+    """the view associated with /manifold/proxy/ 
+with the query passed using POST"""
+    
+    # expecting a POST
+    if request.method != 'POST':
+        print "manifoldproxy.api: unexpected method %s -- exiting"%request.method
+        return 
+    # we only support json for now
+    # if needed in the future we should probably cater for
+    # format_in : how is the query encoded in POST
+    # format_out: how to serve the results
+    if format != 'json':
+        print "manifoldproxy.proxy: unexpected format %s -- exiting"%format
+        return
+    try:
+        # translate incoming POST request into a query object
+        if debug: print 'manifoldproxy.proxy: request.POST',request.POST
+        manifold_query = Query()
+        #manifold_query = ManifoldQuery()
+        manifold_query.fill_from_POST(request.POST)
+        # retrieve session for request
+
+        # We allow some requests to use the ADMIN user account
+        if (manifold_query.get_from() == 'local:user' and manifold_query.get_action() == 'create') \
+                or (manifold_query.get_from() == 'local:platform' and manifold_query.get_action() == 'get'):
+            admin_user, admin_password = ConfigEngine().manifold_admin_user_password()
+            manifold_api_session_auth = {'AuthMethod': 'password', 'Username': admin_user, 'AuthString': admin_password}
+        else:
+            print request.session['manifold']
+            manifold_api_session_auth = request.session['manifold']['auth']
+
+        if debug_empty and manifold_query.action.lower()=='get':
+            json_answer=json.dumps({'code':0,'value':[]})
+            print "By-passing : debug_empty & 'get' request : returning a fake empty list"
+            return HttpResponse (json_answer, mimetype="application/json")
+                
+        # actually forward
+        manifold_api= ManifoldAPI(auth=manifold_api_session_auth)
+        if debug: print '===> manifoldproxy.proxy: sending to backend', manifold_query
+        # for the benefit of the python code, manifoldAPI raises an exception if something is wrong
+        # however in this case we want to propagate the complete manifold result to the js world
+
+        result = manifold_api.forward(manifold_query.to_dict())
+
+        # XXX TEMP HACK
+        if 'description' in result and result['description'] \
+                and isinstance(result['description'], (tuple, list, set, frozenset)):
+            result [ 'description' ] = [ ResultValue.to_html (x) for x in result['description'] ]
+
+        json_answer=json.dumps(result)
+
+        return HttpResponse (json_answer, mimetype="application/json")
+
+    except Exception,e:
+        print "** PROXY ERROR **",e
+        import traceback
+        traceback.print_exc()
+
+#################### 
+# see CSRF_FAILURE_VIEW in settings.py
+# the purpose of redefining this was to display the failure reason somehow
+# this however turns out disappointing/not very informative
+failure_answer=[ "csrf_failure" ]
+def csrf_failure(request, reason=""):
+    print "CSRF failure with reason '%s'"%reason
+    return HttpResponseForbidden (json.dumps (failure_answer), mimetype="application/json")