B ��Y��@s�dZddlmZddlmZddlmZddlmZm Z m Z ddlmZddl mZddlmZdd lmZdd lmZddlmZdd �Zdd�Zdd�Zeedddg�eeddd��ZdS)z� raven.contrib.django.views ~~~~~~~~~~~~~~~~~~~~~~~~~~ :copyright: (c) 2010-2012 by the Sentry Team, see AUTHORS for more details. :license: BSD, see LICENSE for more details. �)�absolute_import)�wraps)�settings)�HttpResponse�HttpResponseForbidden�HttpResponseBadRequest)�never_cache)�csrf_exempt)�require_http_methods)�string_types)�client)�jsoncCsftjs dStjdkrdS|s dS|��}x8tjD].}t|t�rP|��|kr^dSq0|�|�r0dSq0WdS)NF�*T)rZSENTRY_ALLOW_ORIGIN�lower� isinstancer�match)�origin�value�r�K/opt/alt/python37/lib/python3.7/site-packages/raven/contrib/django/views.py�is_valid_origins rcst��fdd��}|S)Ncs>|j�d�}t|�st�S�|f|�|�}||d<d|d<|S)NZHTTP_ORIGINzAccess-Control-Allow-OriginzGET, POST, OPTIONSzAccess-Control-Allow-Methods)�META�getrr)�request�args�kwargsr�response)�funcrr�wrapped.szwith_origin..wrapped)r)rrr)rr�with_origin-srcCsf|j�dd��d�r|jdS|j�dd��d�r<|jdSdd�|j��D�}|rbdd�|�Sd S) zy raven-js will pass both Authorization and X-Sentry-Auth depending on the browser and server configurations. ZHTTP_X_SENTRY_AUTH��SentryZHTTP_AUTHORIZATIONcSs.g|]&}|d�d�r|ddkrd|�qS)rZsentry_�sentry_dataz%s=%s)� startswith)�.0�irrr� Isz%extract_auth_vars..z Sentry %sz, N)rrr#�GET�items�join)rrrrr�extract_auth_vars=s r*r'�POST�OPTIONSNcCs�|jdkrt�S|jdkr4t|d�r,|j}q@|j}n|j�d�}|sJt�Syt� |� d��}Wntjk rvt�SXtj fdt|�i|��t�S)Nr,r+�bodyr"�utf8Zauth_header)�methodr�hasattrr-Z raw_post_datar'rrr �loads�decode�JSONDecodeErrorr�sendr*)rZ project_id�data�decodedrrr�reportRs r7)N)�__doc__� __future__r� functoolsrZdjango.confrZdjango.httprrrZdjango.views.decorators.cacherZdjango.views.decorators.csrfr Zdjango.views.decorators.httpr Zraven.utils.compatrZraven.contrib.django.modelsrZraven.utilsr rrr*r7rrrr�s$