Pārlūkot izejas kodu

[core] Adding no auth flag for component testing

Undocumented as experimental:

[desktop]
cors_enabled=true
Romain Rigaux 4 gadi atpakaļ
vecāks
revīzija
ba8f19931c

+ 6 - 0
desktop/core/src/desktop/middleware.py

@@ -351,6 +351,12 @@ class LoginAndPermissionMiddleware(MiddlewareMixin):
           log_page_hit(request, view_func, level=access_log_level)
         return None
 
+    if desktop.conf.CORS_ENABLED.get():
+      user = authenticate(request, username='hue', password='hue')
+      if user is not None:
+        login(request, user)
+        return None
+
     logging.info("Redirecting to login page: %s", request.get_full_path())
     access_log(request, 'login redirection', level=access_log_level)
     no_idle_backends = (

+ 1 - 1
desktop/core/src/desktop/settings.py

@@ -169,7 +169,6 @@ MIDDLEWARE = [
     'django.middleware.csrf.CsrfViewMiddleware',
 
     'django.middleware.http.ConditionalGetMiddleware',
-    #@TODO@ Prakash to check FailedLoginMiddleware working or not?
     #'axes.middleware.FailedLoginMiddleware',
     'desktop.middleware.MimeTypeJSFileFixStreamingMiddleware',
     'crequest.middleware.CrequestMiddleware',
@@ -359,6 +358,7 @@ EMAIL_SUBJECT_PREFIX = 'Hue %s - ' % desktop.conf.CLUSTER_ID.get()
 if desktop.conf.CORS_ENABLED.get():
   INSTALLED_APPS.append('corsheaders')
   MIDDLEWARE.append('corsheaders.middleware.CorsMiddleware')
+  MIDDLEWARE.remove('django.middleware.csrf.CsrfViewMiddleware')
   CORS_ALLOW_ALL_ORIGINS = True
 
 # Configure database