source: TI12-security/trunk/python/ndg.security.server/ndg/security/server/sso/sso/lib/base.py @ 3754

"""The base Controller API

Provides the BaseController class for subclassing, and other objects
utilized by Controllers.
"""
from pylons import c, cache, config, g, request, response, session
from pylons.controllers import WSGIController
from pylons.controllers.util import abort, etag_cache, redirect_to
from pylons.decorators import jsonify, validate
from pylons.i18n import _, ungettext, N_
from pylons.templating import render

import sso.lib.helpers as h
import sso.model as model

import urllib
from urlparse import urlsplit, urlunsplit
from base64 import urlsafe_b64encode

from ndg.security.common.pylons.security_util import setSecuritySession, \
    LoginServiceQuery

import logging
log = logging.getLogger(__name__)

class BaseControllerError(Exception):
    "Error handling for BaseController"
    
class BaseController(WSGIController):
    def __call__(self, environ, start_response):        
        # Insert any code to be run per request here. The Routes match
        # is under environ['pylons.routes_dict'] should you want to check
        # the action or route vars here
        log.debug("BaseController.__call__ ...")

        # construct URL picking up setting of server name from config to 
        # avoid exposing absolute URL hidden behind mod_proxy see #857 
        # Also, avoid returning to getCredentials and potentially exposing
        # username/pass-phrase on URL.
        pathInfo = urllib.quote(environ.get('PATH_INFO', '')) 
        if 'getCredentials' in pathInfo:
            log.debug("Reverting request URL from getCredentials to login...")
            c.requestURL = g.ndg.security.server.ssoservice.cfg.server+'/login'       
        else:
            c.requestURL = g.ndg.security.server.ssoservice.cfg.server+pathInfo
            query='&'.join(["%s=%s" % item for item in request.params.items()])
            if query:
                c.requestURL += '?' + query

        log.debug("BaseController.__call__: c.requestURL = %s" % c.requestURL)

        
        return WSGIController.__call__(self, environ, start_response)
    
# Include the '_' function in the public names
__all__ = [__name for __name in locals().keys() if not __name.startswith('_') \
           or __name == '_']