Jimmy Berry
3a2aed7f33
obs_operator: override HTTPServer.handle_error() to capture exceptions.
2019-08-29 14:36:01 -05:00
Jimmy Berry
41ea0c132f
obs_operator: allow illegal cookie keys.
2019-08-29 10:03:00 -05:00
Jimmy Berry
b466442260
obs_operator: handle_package_diff(): expose target package and revision.
2019-08-28 17:04:48 -05:00
Jimmy Berry
776747c9b5
osclib/sentry: expose environment configuration.
2019-08-16 16:02:01 -05:00
Jimmy Berry
8b82d024f6
obs_operator: provide sentry_sdk integration.
2019-08-16 16:02:01 -05:00
Jimmy Berry
5f94ac9eaa
obs_operator: do not require session for OPTIONS method.
...
The CORS pre-flight OPTIONS calls do not include the session headers,
but should validate everything else bsides the session.
2019-05-13 16:53:26 -05:00
Jimmy Berry
74eb4a3955
obs_operator: handle multi-level host domains.
2019-05-10 11:53:28 -05:00
Jimmy Berry
d8df047d24
obs_operator: handle multi-level origin domains.
2019-05-10 11:44:26 -05:00
Jimmy Berry
8022a8435a
obs_operator: do not validate apiurl when set by flag.
2019-05-01 18:26:54 -05:00
Jimmy Berry
5ffe4931e7
obs_operator: provide request/submit handler.
2019-05-01 18:24:27 -05:00
Jimmy Berry
2e311f0702
obs_operator: provide package/diff handler.
2019-05-01 18:24:18 -05:00
Jimmy Berry
2722f5fe2f
obs_operator: provide origin/projects handler.
2019-05-01 15:55:33 -05:00
Jimmy Berry
ed20276100
obs_operator: provide origin/potentials handler.
2019-05-01 15:55:33 -05:00
Jimmy Berry
6c931615c7
obs_operator: provide origin/history handler.
2019-05-01 15:55:33 -05:00
Jimmy Berry
c3c4069c79
obs_operator: add format support to origin/list handler.
2019-05-01 15:55:27 -05:00
Jimmy Berry
7bf860c8cb
obs_operator: handle empty body POST request.
2019-05-01 15:49:21 -05:00
Jimmy Berry
701e5ea2d1
obs_operator: support CORS preflight check OPTIONS requests.
2019-05-01 15:49:21 -05:00
Jimmy Berry
d78d9657ae
obs_operator: change to two-level POST paths and same func naming as GET.
2019-05-01 15:49:16 -05:00
Jimmy Berry
2a3def39fd
obs_operator: verify that origin root-domain matches host domain.
...
Reduces the attack surface by limiting sites that can initiate a
cross-domain request to sub-domains of the domain on which the operator
server is running.
2019-03-26 18:21:06 -05:00
Jimmy Berry
d3ff38cbf8
obs_operator: raise exceptions when osc request environment cannot be aquired.
2019-03-25 17:47:07 -05:00
Jimmy Berry
cdb99a1f1a
obs_operator: calculate apiurl from host instead of origin header.
...
Debated originally, but was attempting to allow operator to run on
different domain from request origin and handle multiple origins. This
does not work in practice since openSUSE and SUSE https certs are not
present on same machine. As such, host works better since it allows for
non-cross-origin requests to work without having to specify an apiurl
in startup arguments.
2019-03-25 17:46:14 -05:00
Jimmy Berry
0734bf756c
obs_operator: expose osc-plugin-origin commands via GET.
2019-03-20 19:18:05 -05:00
Jimmy Berry
2c45688f2f
obs_operator: extract osc environment setup as with object.
2019-03-20 19:18:05 -05:00
Jimmy Berry
441ea7167a
obs_operator: use unbuffered output to work properly in systemd.
2018-11-26 16:01:45 -06:00
Jimmy Berry
3d0832f97d
obs_operator: provide initial version of server.
2018-11-08 16:08:19 -06:00
