mirror of
https://github.com/galaxyproject/galaxy.git
synced 2026-10-25 10:24:38 +08:00
John Chilton
b17091a3ec
The approach is to use per-session CSRF tokens - this avoids many complications related to per-form tokens. We generate a sequence of hashes based on session IDs that doesn't follow the same pattern as normal database API IDs by supplying a "kind" parameter to encode_id (we use the same pattern for securing the job files API for Pulsar).
117 lines
4.0 KiB
Mako
117 lines
4.0 KiB
Mako
<%def name="render_json( dictionary )">
|
|
${ h.dumps( dictionary, indent=( 2 if trans.debug else 0 ) ) }
|
|
</%def>
|
|
|
|
## ============================================================================
|
|
<%def name="bootstrap( **kwargs )">
|
|
## 1) Bootstap all kwargs to json, assigning to:
|
|
## global 'bootstrapped' var
|
|
## named require module 'bootstrapped-data'
|
|
<script type="text/javascript">
|
|
//TODO: global...
|
|
%for key in kwargs:
|
|
( window.bootstrapped = window.bootstrapped || {} )[ '${key}' ] = (
|
|
${ render_json( kwargs[ key ] ) }
|
|
);
|
|
%endfor
|
|
define( 'bootstrapped-data', function(){
|
|
return window.bootstrapped;
|
|
});
|
|
</script>
|
|
</%def>
|
|
|
|
<%def name="load( app=None, **kwargs )">
|
|
## 1) bootstrap kwargs (as above), 2) build Galaxy global var, 3) load 'app' by AMD (optional)
|
|
${ self.bootstrap( **kwargs ) }
|
|
<script type="text/javascript">
|
|
require([ 'require', 'galaxy' ], function( require, galaxy ){
|
|
//TODO: global...
|
|
window.Galaxy = new galaxy.GalaxyApp({
|
|
root : '${h.url_for( "/" )}',
|
|
config : ${ render_json( get_config_dict() )},
|
|
user : ${ render_json( get_user_dict() )},
|
|
session_csrf_token : '${ trans.session_csrf_token }'
|
|
}, window.bootstrapped );
|
|
|
|
%if app:
|
|
require([ '${app}' ]);
|
|
%endif
|
|
});
|
|
</script>
|
|
</%def>
|
|
|
|
|
|
## ----------------------------------------------------------------------------
|
|
<%def name="get_config_dict()">
|
|
## Return a dictionary of galaxy.ini settings
|
|
<%
|
|
config_dict = {}
|
|
try:
|
|
controller = trans.webapp.api_controllers.get( 'configuration', None )
|
|
if controller:
|
|
config_dict = controller.get_config_dict( trans, trans.user_is_admin() )
|
|
except Exception, exc:
|
|
pass
|
|
return config_dict
|
|
%>
|
|
</%def>
|
|
|
|
<%def name="get_config_json()">
|
|
## Conv. fn to write as JSON
|
|
${ h.dumps( get_config_dict() )}
|
|
</%def>
|
|
|
|
|
|
## ----------------------------------------------------------------------------
|
|
<%def name="get_user_dict()">
|
|
## Return a dictionary of user or anonymous user data including:
|
|
## email, id, disk space used, quota percent, and tags used
|
|
<%
|
|
from markupsafe import escape
|
|
user_dict = {}
|
|
try:
|
|
if trans.user:
|
|
user_dict = trans.user.to_dict( view='element',
|
|
value_mapper={ 'id': trans.security.encode_id, 'total_disk_usage': float, 'email': escape, 'username': escape } )
|
|
user_dict[ 'quota_percent' ] = trans.app.quota_agent.get_percent( trans=trans )
|
|
user_dict[ 'is_admin' ] = trans.user_is_admin()
|
|
|
|
# tags used
|
|
users_api_controller = trans.webapp.api_controllers[ 'users' ]
|
|
tags_used = []
|
|
for tag in users_api_controller.get_user_tags_used( trans, user=trans.user ):
|
|
tag = escape( tag )
|
|
if tag:
|
|
tags_used.append( tag )
|
|
user_dict[ 'tags_used' ] = tags_used
|
|
|
|
return user_dict
|
|
|
|
usage = 0
|
|
percent = None
|
|
try:
|
|
usage = trans.app.quota_agent.get_usage( trans, history=trans.history )
|
|
percent = trans.app.quota_agent.get_percent( trans=trans, usage=usage )
|
|
except AssertionError, assertion:
|
|
# no history for quota_agent.get_usage assertion
|
|
pass
|
|
return {
|
|
'total_disk_usage' : int( usage ),
|
|
'nice_total_disk_usage' : util.nice_size( usage ),
|
|
'quota_percent' : percent
|
|
}
|
|
|
|
except Exception, exc:
|
|
pass
|
|
#TODO: no logging available?
|
|
#log.exception( exc )
|
|
|
|
return user_dict
|
|
%>
|
|
</%def>
|
|
|
|
<%def name="get_user_json()">
|
|
## Conv. fn to write as JSON
|
|
${ h.dumps( get_user_dict() )}
|
|
</%def>
|