d88a3097ae
- Don't limit access to admin. - Reuse the get_limit_to_project() function from v1/acl.py This requires some patches to wsme to fix the Response status (so we can set it to a 401). We don't have this yet, so I am posting an interim patch. Once we have the next version of wsme I'll fix the status_code that is returned (see the TODO comments). Change-Id: Ib39f045b3f9c4ff1f851e13d528fd117aed45c34
87 lines
2.7 KiB
Python
87 lines
2.7 KiB
Python
# -*- encoding: utf-8 -*-
|
|
#
|
|
# Copyright © 2012 New Dream Network, LLC (DreamHost)
|
|
#
|
|
# Author: Doug Hellmann <doug.hellmann@dreamhost.com>
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from oslo.config import cfg
|
|
import pecan
|
|
|
|
from ceilometer.api import acl
|
|
from ceilometer.api import config as api_config
|
|
from ceilometer.api import hooks
|
|
from ceilometer.api import middleware
|
|
from ceilometer.api.v1 import app as v1app
|
|
|
|
|
|
auth_opts = [
|
|
cfg.StrOpt('auth_strategy',
|
|
default='keystone',
|
|
help='The strategy to use for auth: noauth or keystone.'),
|
|
]
|
|
|
|
CONF = cfg.CONF
|
|
CONF.register_opts(auth_opts)
|
|
|
|
|
|
def get_pecan_config():
|
|
# Set up the pecan configuration
|
|
filename = api_config.__file__.replace('.pyc', '.py')
|
|
return pecan.configuration.conf_from_file(filename)
|
|
|
|
|
|
def setup_app(pecan_config=None, extra_hooks=None):
|
|
# FIXME: Replace DBHook with a hooks.TransactionHook
|
|
app_hooks = [hooks.ConfigHook(),
|
|
hooks.DBHook(),
|
|
hooks.PipelineHook()]
|
|
if extra_hooks:
|
|
app_hooks.extend(extra_hooks)
|
|
|
|
if not pecan_config:
|
|
pecan_config = get_pecan_config()
|
|
|
|
pecan.configuration.set_config(dict(pecan_config), overwrite=True)
|
|
|
|
app = pecan.make_app(
|
|
pecan_config.app.root,
|
|
static_root=pecan_config.app.static_root,
|
|
template_path=pecan_config.app.template_path,
|
|
logging=getattr(pecan_config, 'logging', {}),
|
|
debug=getattr(pecan_config.app, 'debug', False),
|
|
force_canonical=getattr(pecan_config.app, 'force_canonical', True),
|
|
hooks=app_hooks,
|
|
wrap_app=middleware.ParsableErrorMiddleware,
|
|
)
|
|
|
|
if pecan_config.app.enable_acl:
|
|
return acl.install(app, cfg.CONF)
|
|
|
|
return app
|
|
|
|
|
|
class VersionSelectorApplication(object):
|
|
def __init__(self):
|
|
pc = get_pecan_config()
|
|
pc.app.debug = CONF.debug
|
|
pc.app.enable_acl = (CONF.auth_strategy == 'keystone')
|
|
self.v1 = v1app.make_app(cfg.CONF, enable_acl=pc.app.enable_acl)
|
|
self.v2 = setup_app(pecan_config=pc)
|
|
|
|
def __call__(self, environ, start_response):
|
|
if environ['PATH_INFO'].startswith('/v1/'):
|
|
return self.v1(environ, start_response)
|
|
return self.v2(environ, start_response)
|