|
Pierre-Yves Chibon |
3d09db |
# -*- coding: utf-8 -*-
|
|
Pierre-Yves Chibon |
3d09db |
#
|
|
Pierre-Yves Chibon |
3d09db |
# Copyright © 2014 Red Hat, Inc.
|
|
Pierre-Yves Chibon |
3d09db |
#
|
|
Pierre-Yves Chibon |
3d09db |
# This copyrighted material is made available to anyone wishing to use,
|
|
Pierre-Yves Chibon |
3d09db |
# modify, copy, or redistribute it subject to the terms and conditions
|
|
Pierre-Yves Chibon |
3d09db |
# of the GNU General Public License v.2, or (at your option) any later
|
|
Pierre-Yves Chibon |
3d09db |
# version. This program is distributed in the hope that it will be
|
|
Pierre-Yves Chibon |
3d09db |
# useful, but WITHOUT ANY WARRANTY expressed or implied, including the
|
|
Pierre-Yves Chibon |
3d09db |
# implied warranties of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
|
Pierre-Yves Chibon |
3d09db |
# PURPOSE. See the GNU General Public License for more details. You
|
|
Pierre-Yves Chibon |
3d09db |
# should have received a copy of the GNU General Public License along
|
|
Pierre-Yves Chibon |
3d09db |
# with this program; if not, write to the Free Software Foundation,
|
|
Pierre-Yves Chibon |
3d09db |
# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
Pierre-Yves Chibon |
3d09db |
#
|
|
Pierre-Yves Chibon |
3d09db |
# Any Red Hat trademarks that are incorporated in the source
|
|
Pierre-Yves Chibon |
3d09db |
# code or documentation are not subject to the GNU General Public
|
|
Pierre-Yves Chibon |
3d09db |
# License and may only be used or replicated with the express permission
|
|
Pierre-Yves Chibon |
3d09db |
# of Red Hat, Inc.
|
|
Pierre-Yves Chibon |
3d09db |
#
|
|
Pierre-Yves Chibon |
3d09db |
|
|
Pierre-Yves Chibon |
9c2953 |
"""
|
|
Pierre-Yves Chibon |
3d09db |
Makes pagure an application behind a reverse proxy and thus ensure the
|
|
Pierre-Yves Chibon |
3d09db |
redirects are using ``https``.
|
|
Pierre-Yves Chibon |
3d09db |
|
|
Pierre-Yves Chibon |
3d09db |
Source: http://flask.pocoo.org/snippets/35/ by Peter Hansen
|
|
Pierre-Yves Chibon |
9c2953 |
"""
|
|
Pierre-Yves Chibon |
3d09db |
|
|
Pierre-Yves Chibon |
67d1cc |
from __future__ import unicode_literals, absolute_import
|
|
Aurélien Bompard |
dcf6f6 |
|
|
Pierre-Yves Chibon |
3d09db |
|
|
Pierre-Yves Chibon |
3d09db |
class ReverseProxied(object): # pragma: no cover
|
|
Pierre-Yves Chibon |
9c2953 |
"""Wrap the application in this middleware and configure the
|
|
Pierre-Yves Chibon |
3d09db |
front-end server to add these headers, to let you quietly bind
|
|
Pierre-Yves Chibon |
3d09db |
this to a URL other than / and to an HTTP scheme that is
|
|
Pierre-Yves Chibon |
3d09db |
different than what is used locally.
|
|
Pierre-Yves Chibon |
3d09db |
|
|
Pierre-Yves Chibon |
3d09db |
In nginx:
|
|
Pierre-Yves Chibon |
3d09db |
location /myprefix {
|
|
Pierre-Yves Chibon |
3d09db |
proxy_pass http://192.168.0.1:5001;
|
|
Pierre-Yves Chibon |
3d09db |
proxy_set_header Host $host;
|
|
Pierre-Yves Chibon |
3d09db |
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
Pierre-Yves Chibon |
3d09db |
proxy_set_header X-Scheme $scheme;
|
|
Pierre-Yves Chibon |
3d09db |
proxy_set_header X-Script-Name /myprefix;
|
|
Pierre-Yves Chibon |
3d09db |
}
|
|
Pierre-Yves Chibon |
3d09db |
In apache:
|
|
Pierre-Yves Chibon |
3d09db |
RequestHeader set X-Forwarded-Scheme https early
|
|
Pierre-Yves Chibon |
3d09db |
RequestHeader set X-Scheme https early
|
|
Pierre-Yves Chibon |
3d09db |
RequestHeader add X-Script-Name /myprefix early
|
|
Pierre-Yves Chibon |
3d09db |
RequestHeader set X-Forwarded-Proto https early
|
|
Pierre-Yves Chibon |
3d09db |
|
|
Pierre-Yves Chibon |
3d09db |
:param app: the WSGI application
|
|
Pierre-Yves Chibon |
9c2953 |
"""
|
|
Pierre-Yves Chibon |
9c2953 |
|
|
Pierre-Yves Chibon |
3d09db |
def __init__(self, app):
|
|
Pierre-Yves Chibon |
3d09db |
self.app = app
|
|
Pierre-Yves Chibon |
3d09db |
|
|
Pierre-Yves Chibon |
3d09db |
def __call__(self, environ, start_response):
|
|
Pierre-Yves Chibon |
9c2953 |
script_name = environ.get("HTTP_X_SCRIPT_NAME", "")
|
|
Pierre-Yves Chibon |
3d09db |
if script_name:
|
|
Pierre-Yves Chibon |
9c2953 |
environ["SCRIPT_NAME"] = script_name
|
|
Pierre-Yves Chibon |
9c2953 |
path_info = environ["PATH_INFO"]
|
|
Pierre-Yves Chibon |
3d09db |
if path_info.startswith(script_name):
|
|
Pierre-Yves Chibon |
9c2953 |
environ["PATH_INFO"] = path_info[len(script_name) :]
|
|
Pierre-Yves Chibon |
3d09db |
|
|
Pierre-Yves Chibon |
9c2953 |
server = environ.get("HTTP_X_FORWARDED_HOST", "")
|
|
Pierre-Yves Chibon |
3d09db |
if server:
|
|
Pierre-Yves Chibon |
9c2953 |
environ["HTTP_HOST"] = server
|
|
Pierre-Yves Chibon |
3d09db |
|
|
Pierre-Yves Chibon |
9c2953 |
scheme = environ.get("HTTP_X_SCHEME", "")
|
|
Pierre-Yves Chibon |
3d09db |
if scheme:
|
|
Pierre-Yves Chibon |
9c2953 |
environ["wsgi.url_scheme"] = scheme
|
|
Pierre-Yves Chibon |
3d09db |
|
|
Pierre-Yves Chibon |
3d09db |
return self.app(environ, start_response)
|