1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
|
# -*- coding: iso-latin-1 -*-
#
# Copyright (C) 2005 by Holger Schurig
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
"""
DeStarPublisher also has it's own session management. For simplicity, I put
the session stuff directly into the Publisher object, so I don't use
Quixote's classes 'Session' and 'SessionPublisher'.
Reasons:
a) they set a cookie, some browsers don't allow cookies
b) if you stop and start DeStar (which happens very often during
Development) Quixote's session handler would give you ugly error messages
c) Keeping the session data in the publisher object scales quite ok, because
DeStar will usually only be used inside the LAN anyway
But keep in mind that a session here is not a (user, host, browser_process)
tuple, but a (user, host) tuple.
TODO: the default implementation provided here is not persistent. There is
also no cleanup code to remove old sessions.
The Session holds several values:
request.session.user User name
request.session.level User level (0=disabled/not logged in
1=normal PBX user
2=PBX Administrator
3=PBX Configurator
4=Programmer
request.session.language User language
"""
from quixote.publish import Publisher
import configlets, backend, language
import time
sessions = {}
class DeStarPublisher(Publisher):
def start_request (self, request):
t = time.time()
# Determine IP of originator, keep Squid in mind :-)
try:
ip = request.environ['HTTP_X_FORWARDED_FOR']
except:
ip = request.environ['REMOTE_ADDR']
# Search session object, if none found, create one with default values
global sessions
session = sessions.setdefault(ip,
configlets.Holder(
firstaccess=t,
user=None,
phone='',
language='en',
level=-1, # Try to auto-login, based on IP
))
# level==-1 means we should auto-login
# This works by searching for the first CfgOptUser configlet where
# the 'pc' variable matches the request originating IP:
if session.level == -1:
# Only try auto-login once, so set it to lowest level
session.level = 0
users = backend.getConfiglets(name="CfgOptUser")
if len(users) == 0:
# be Admin if there are no users configured
session.user = "programmer"
session.level = 4
session.language = 'en'
else:
for user in users:
if user.pc == ip:
session.user = user.name
session.level = int(user.level)
session.phone = user.phone
session.language = user.language
break
language.setLanguage(session.language)
session.lastaccess = t
request.session = session
def filter_output(self, request, output):
output = Publisher.filter_output(self, request, output)
resp = request.response
if resp.get_header('Content-Type') in (None, 'text/html'):
resp.set_header('Content-Type','text/html; charset=%s' % language.encoding() )
return output
|
