U
|
§N®dï6 ã @ sn d Z ddlZddlZddlmZ ddlmZ ddlmZm Z ddl
|
m Z m Z e e¡ZdZdZd Zd
|
Zd Zd Zd ZdZdZdZdddddddgZddddd d d d d d!d"d#g Zd$Z e e d%¡Z e d&ed&dd'dd'd(d(d)d(d(d* Z!d+d, Z"d-d. Z#d/d0 Z$d1d2 Z%d3d4 Z&d5d6 Z'd7d8 Z(d9d: Z)d;d< Z*d=d> Z+d?d@ Z,dMdAdBZ-dCdD Z.dNdEdFZ/dGdH Z0dIdJ Z1dKdL Z2dS )Oz¶
|
core
|
~~~~
|
Core functionality shared between the extension and the decorator.
|
|
:copyright: (c) 2016 by Cory Dolphin.
|
:license: MIT, see LICENSE for more details.
|
é N)ÚIterable)Ú timedelta)ÚrequestÚ current_app)ÚHeadersÚ MultiDictzAccess-Control-Allow-Originz Access-Control-Allow-Methodsz Access-Control-Allow-Headersz Access-Control-Expose-Headersz Access-Control-Allow-CredentialszAccess-Control-Max-Agez$Access-Control-Allow-Private-Networkz Access-Control-Request-Methodz Access-Control-Request-Headersz&Access-Control-Request-Private-NetworkÚGETÚHEADÚPOSTÚOPTIONSÚPUTÚPATCHÚDELETEZ CORS_ORIGINSZ CORS_METHODSZCORS_ALLOW_HEADERSZCORS_EXPOSE_HEADERSZCORS_SUPPORTS_CREDENTIALSZ CORS_MAX_AGEZCORS_SEND_WILDCARDZCORS_AUTOMATIC_OPTIONSZCORS_VARY_HEADERZCORS_RESOURCESZCORS_INTERCEPT_EXCEPTIONSZCORS_ALWAYS_SENDZ_FLASK_CORS_EVALUATEDÚ Ú*FTz/*) ÚoriginsÚmethodsÚ allow_headersÚexpose_headersÚsupports_credentialsÚmax_ageÚ send_wildcardZautomatic_optionsÚ vary_headerÚ resourcesZintercept_exceptionsÚ always_sendc C s t | tr2dd | ¡ D } dd }t| |ddS t | trJt| i fgS t | trbdd | D S t | trzt| i fgS tdd S ) Nc S s g | ]\}}t ||fqS © ©Úre_fix©Ú.0ÚkÚvr r úFd:\z\workplace\vscode\pyvenv\venv\Lib\site-packages\flask_cors/core.pyÚ
|
<listcomp>B s z#parse_resources.<locals>.<listcomp>c S s | \}}t t|S ©N)ÚlenÚget_regexp_pattern)ÚpairÚ maybe_regexÚ_r r r" Úpattern_lengthG s z'parse_resources.<locals>.pattern_lengthT)ÚkeyÚreversec S s g | ]}t |i fqS r r )r Úrr r r" r# S s z(Unexpected value for resources argument.) Ú
|
isinstanceÚdictÚitemsÚsortedÚstrr r Ú RegexObjectÚ
|
ValueError)r r* r r r" Úparse_resources> s
|
þ
|
|
|
r5 c C s* z| j W S tk
|
r$ t| Y S X dS )zè
|
Helper that returns regexp pattern from given value.
|
|
:param regexp: regular expression to stringify
|
:type regexp: _sre.SRE_Pattern or str
|
:returns: string representation of given regexp pattern
|
:rtype: str
|
N)ÚpatternÚAttributeErrorr2 )Úregexpr r r" r& ^ s r& c C s´ | d¡}d|k}|rjt d|¡ |r@| d¡r@t d¡ dgS t||rZt d¡ |gS t d¡ d S nF| d ¡r¢|r| d
|
¡rd S dgS q°td d |D S nt d ¡ d S d S )Nr ú.*z&CORS request received with 'Origin' %sr z=Allowed origins are set to '*'. Sending wildcard CORS header.r z:The request's Origin header matches. Sending CORS headers.zBThe request's Origin header does not match any of allowed origins.r r c S s g | ]}t |s|qS r )Úprobably_regex)r Úor r r" r# s z$get_cors_origins.<locals>.<listcomp>zThe request did not contain an 'Origin' header. This means the browser or client did not request CORS, ensure the Origin Header is set.)ÚgetÚLOGÚdebugÚ try_match_anyr1 )ÚoptionsÚrequest_originr Zwildcardr r r" Úget_cors_originsm s(
|
|
|
|
|
|
|
|
rB c s< |r8dd | d¡D }t fdd|}d t|¡S d S )Nc S s g | ] }| ¡ qS r )Ústrip)r Úhr r r" r# s z%get_allow_headers.<locals>.<listcomp>ú,c s t | d¡S )Nr )r? r< )rD ©r@ r r" Ú<lambda>£ ó z#get_allow_headers.<locals>.<lambda>ú, )ÚsplitÚfilterÚjoinr1 )r@ Zacl_request_headersÚrequest_headersZmatching_headersr rF r" Úget_allow_headers s
|
þrN c C sL t | | d¡}t }|s |S |D ]}| t|¡ q"| d¡|t< | d¡rTd|t< t|krr| t¡dkrrd|t< |dkrØ| t d¡
|
¡ }|rÎ|| d¡krÎt | | t ¡|t < | d¡|t< | d¡|t< n
|
t d ¡ | d
|
¡r6|t d krònDt| d ¡d ks*t|d ks*ttt| d ¡r6| dd¡ tdd | ¡ D S )NZOriginr r Útruer r r r ztThe request's Access-Control-Request-Method header does not match allowed methods. CORS headers will not be applied.r r r é ZVaryc s s | ]\}}|r||fV qd S r$ r r r r r" Ú <genexpr>Ý s z#get_cors_headers.<locals>.<genexpr>)rB r< r ÚaddÚ
|
ACL_ORIGINÚACL_EXPOSE_HEADERSÚACL_CREDENTIALSÚ"ACL_REQUEST_HEADER_PRIVATE_NETWORKÚ ACL_RESPONSE_PRIVATE_NETWORKÚACL_REQUEST_METHODÚupperrN ÚACL_REQUEST_HEADERSÚACL_ALLOW_HEADERSÚ ACL_MAX_AGEÚ ACL_METHODSr= Úinfor% ÚanyÚmapr: r0 )r@ rM Úrequest_methodZorigins_to_setÚheadersÚoriginZacl_request_methodr r r" Úget_cors_headers¬ s<
|
ÿ
|
|
ÿþ rd c C s t | trt d¡ | S t| jts<t| jts<t| j| _t|t jt j
|
}t dt |¡ | ¡ D ]\}}| j ||¡ qd| S )zÁ
|
Performs the actual evaluation of Flask-CORS options and actually
|
modifies the response object.
|
|
This function is used both in the decorator and the after_request
|
callback
|
z*CORS have been already evaluated, skippingzSettings CORS headers: %s)ÚhasattrÚFLASK_CORS_EVALUATEDr= r> r. rb r r rd r Úmethodr2 r0 rR )Úrespr@ Zheaders_to_setr r! r r r" Úset_cors_headersà s
|
|
|
|
ÿ ri c
|
s@ t trdS ddddddddd d
|
g
|
}t fd d |D S d S ) NTr ú\ú]ú?ú$ú^ú[ú(ú)c 3 s | ]}| kV qd S r$ r )r Úc©r( r r" rQ s z!probably_regex.<locals>.<genexpr>)r. r3 r_ )r( Zcommon_regex_charsr rs r" r: þ s
|
r: c C s | dkr dS | S )z
|
Replace the invalid regex r'*' with the valid, wildcard regex r'/.*' to
|
enable the CORS app extension to have a more user friendly api.
|
r r9 r )Úregr r r" r s r c s t fdd|D S )Nc 3 s | ]}t |V qd S r$ )Ú try_match)r r6 ©Úinstr r" rQ s z try_match_any.<locals>.<genexpr>)r_ )rw Úpatternsr rv r" r? s r? c C sd t |trt || ¡S t|r0tj|| tjdS z| ¡ | ¡ kW S tk
|
r^ | |k Y S X dS )zASafely attempts to match a pattern or string to a request origin.)ÚflagsN)r. r3 ÚreÚmatchr: Ú
|
IGNORECASEÚlowerr7 )rA r( r r r" ru s
|
ru c G s6 t ¡ }| t| ¡ |r.|D ]}| |¡ q t|S )zÂ
|
Compute CORS options for an application by combining the DEFAULT_OPTIONS,
|
the app's configuration-specified options and any dictionaries passed. The
|
last specified option wins.
|
)ÚDEFAULT_OPTIONSÚcopyÚupdateÚget_app_kwarg_dictÚserialize_options)Ú appInstanceZdictsr@ Údr r r" Úget_cors_options s r
c s& | pt }t|di fddtD S )z;Returns the dictionary of CORS specific app configurations.Úconfigc s2 i | ]*} |¡d k r| ¡ dd¡ |¡qS )NZcors_r )r< r} Úreplace)r r ©Z
|
app_configr r" Ú
|
<dictcomp>6 s þ z&get_app_kwarg_dict.<locals>.<dictcomp>)r ÚgetattrÚCONFIG_OPTIONS)r Zappr r r" r / s
|
|
þr c C sD | dkr dS t | ts8t | tr8d dd t| D ¡S t| S dS )zø
|
A more flexible str function which intelligently handles stringifying
|
strings, lists and other iterables. The results are lexographically sorted
|
to ensure generated responses are consistent when iterables such as Set
|
are used.
|
NrI c s s | ]}t |V qd S r$ )r2 )r Úitemr r r" rQ G s z flexible_str.<locals>.<genexpr>)r. r2 r rL r1 )Úobjr r r" Ú flexible_str= s
|
r c C s, || kr(t | | }|r | ¡ n|| |< d S r$ )r rY )Z options_dictr+ rY Úvaluer r r" Úserialize_optionL s r c C s( t | tr| gS t | ts | gS | S dS )zT
|
Wraps scalars or string types as a list, or returns the iterable instance.
|
N)r. r2 r rv r r r" Úensure_iterableR s
|
|
|
r c C s dd t | D S )Nc S s g | ] }t |qS r r )r Úxr r r" r# ^ s z(sanitize_regex_param.<locals>.<listcomp>)r )Úparamr r r" Úsanitize_regex_param] s r c C sº | pi ¡ }| ¡ D ]}|tkrt d|¡ qt| d¡|d< t| d¡|d< d|d krv|d rv|d rvtdt|d t|d d
|
d t | d ¡t
|
r¶t t |d ¡ |d < |S ) zL
|
A helper method to serialize and processes the options dictionary.
|
z'Unknown option passed to Flask-CORS: %sr r r9 r r z}Cannot use supports_credentials in conjunction withan origin string of '*'. See: http://www.w3.org/TR/cors/#resource-requestsr r T)rY r )r Úkeysr~ r= Úwarningr r< r4 r r. r r2 ÚintÚ total_seconds)Úoptsr@ r+ r r r" r a s
|
r )N)F)3Ú__doc__rz ÚloggingÚcollections.abcr Údatetimer Zflaskr r Zwerkzeug.datastructuresr r Ú getLoggerÚ__name__r= rS r] r[ rT rU r\ rW rX rZ rV Z ALL_METHODSr rf ÚtypeÚcompiler3 r/ r~ r5 r& rB rN rd ri r: r r? ru r
r r r r r r r r r r" Ú<module> sz
|
û õ 04
|
|
|
