|
a/Allura/allura/controllers/rest.py |
|
b/Allura/allura/controllers/rest.py |
|
... |
|
... |
| 10 |
from ming.orm import session
|
10 |
from ming.orm import session
|
| 11 |
from ming.utils import LazyProperty
|
11 |
from ming.utils import LazyProperty
|
| 12 |
|
12 |
|
| 13 |
from allura import model as M
|
13 |
from allura import model as M
|
| 14 |
from allura.lib import helpers as h
|
14 |
from allura.lib import helpers as h
|
| 15 |
from allura.lib import security
|
15 |
from allura.lib import security
|
|
|
16 |
from allura.lib.decorators import require_post
|
| 16 |
|
17 |
|
| 17 |
log = logging.getLogger(__name__)
|
18 |
log = logging.getLogger(__name__)
|
| 18 |
action_logger = h.log_action(log, 'API:')
|
19 |
action_logger = h.log_action(log, 'API:')
|
| 19 |
|
20 |
|
| 20 |
class RestController(object):
|
21 |
class RestController(object):
|
|
... |
|
... |
| 82 |
log.error('Invalid signature')
|
83 |
log.error('Invalid signature')
|
| 83 |
raise exc.HTTPForbidden
|
84 |
raise exc.HTTPForbidden
|
| 84 |
return access_token
|
85 |
return access_token
|
| 85 |
|
86 |
|
| 86 |
@expose()
|
87 |
@expose()
|
|
|
88 |
@require_post()
|
| 87 |
def request_token(self, **kw):
|
89 |
def request_token(self, **kw):
|
| 88 |
req = oauth.Request.from_request(
|
90 |
req = oauth.Request.from_request(
|
| 89 |
request.method,
|
91 |
request.method,
|
| 90 |
request.url.split('?')[0],
|
92 |
request.url.split('?')[0],
|
| 91 |
headers=request.headers,
|
93 |
headers=request.headers,
|
|
... |
|
... |
| 142 |
url+='oauth_token=%s&oauth_verifier=%s' % (
|
144 |
url+='oauth_token=%s&oauth_verifier=%s' % (
|
| 143 |
rtok.api_key, rtok.validation_pin)
|
145 |
rtok.api_key, rtok.validation_pin)
|
| 144 |
redirect(url)
|
146 |
redirect(url)
|
| 145 |
|
147 |
|
| 146 |
@expose()
|
148 |
@expose()
|
|
|
149 |
@require_post()
|
| 147 |
def access_token(self, **kw):
|
150 |
def access_token(self, **kw):
|
| 148 |
req = oauth.Request.from_request(
|
151 |
req = oauth.Request.from_request(
|
| 149 |
request.method,
|
152 |
request.method,
|
| 150 |
request.url.split('?')[0],
|
153 |
request.url.split('?')[0],
|
| 151 |
headers=request.headers,
|
154 |
headers=request.headers,
|