django-rest-framework/djangorestframework/views.py

291 lines
9.7 KiB
Python
Raw Normal View History

"""
The :mod:`views` module provides the Views you will most probably
be subclassing in your implementation.
By setting or modifying class attributes on your view, you change it's predefined behaviour.
"""
import re
from django.core.urlresolvers import set_script_prefix, get_script_prefix
from django.http import HttpResponse
from django.utils.html import escape
from django.utils.safestring import mark_safe
2011-05-04 12:21:17 +04:00
from django.views.decorators.csrf import csrf_exempt
from djangorestframework.compat import View as DjangoView, apply_markdown
2011-05-04 12:21:17 +04:00
from djangorestframework.response import Response, ErrorResponse
from djangorestframework.mixins import *
2011-05-12 18:11:14 +04:00
from djangorestframework import resources, renderers, parsers, authentication, permissions, status
2011-05-04 12:21:17 +04:00
2011-05-10 15:21:48 +04:00
__all__ = (
'View',
2011-05-10 15:21:48 +04:00
'ModelView',
'InstanceModelView',
'ListModelView',
2011-05-10 15:21:48 +04:00
'ListOrCreateModelView'
)
2011-05-04 12:21:17 +04:00
2012-01-26 00:39:01 +04:00
def _remove_trailing_string(content, trailing):
"""
Strip trailing component `trailing` from `content` if it exists.
Used when generating names from view/resource classes.
"""
if content.endswith(trailing) and content != trailing:
return content[:-len(trailing)]
return content
2012-01-28 18:38:06 +04:00
2012-01-26 00:39:01 +04:00
def _remove_leading_indent(content):
"""
Remove leading indent from a block of text.
Used when generating descriptions from docstrings.
"""
whitespace_counts = [len(line) - len(line.lstrip(' '))
for line in content.splitlines()[1:] if line.lstrip()]
# unindent the content if needed
if whitespace_counts:
whitespace_pattern = '^' + (' ' * min(whitespace_counts))
return re.sub(re.compile(whitespace_pattern, re.MULTILINE), '', content)
return content
2012-01-28 18:38:06 +04:00
2012-01-26 00:39:01 +04:00
def _camelcase_to_spaces(content):
"""
Translate 'CamelCaseNames' to 'Camel Case Names'.
Used when generating names from view/resource classes.
"""
camelcase_boundry = '(((?<=[a-z])[A-Z])|([A-Z](?![A-Z]|$)))'
return re.sub(camelcase_boundry, ' \\1', content).strip()
_resource_classes = (
None,
resources.Resource,
resources.FormResource,
resources.ModelResource
)
class View(ResourceMixin, RequestMixin, ResponseMixin, AuthMixin, DjangoView):
"""
Handles incoming requests and maps them to REST operations.
Performs request deserialization, response serialization, authentication and input validation.
"""
2011-05-04 12:21:17 +04:00
2012-01-19 07:59:30 +04:00
resource = None
"""
The resource to use when validating requests and filtering responses,
or `None` to use default behaviour.
"""
2011-05-04 12:21:17 +04:00
2012-01-19 07:59:30 +04:00
renderers = renderers.DEFAULT_RENDERERS
"""
List of renderers the resource can serialize the response with, ordered by preference.
"""
2011-12-09 16:54:11 +04:00
2012-01-19 07:59:30 +04:00
parsers = parsers.DEFAULT_PARSERS
"""
List of parsers the resource can parse the request with.
"""
2011-05-04 12:21:17 +04:00
2012-01-24 23:11:10 +04:00
authentication = (authentication.UserLoggedInAuthentication,
authentication.BasicAuthentication)
"""
List of all authenticating methods to attempt.
"""
2011-12-09 16:54:11 +04:00
2012-01-24 23:11:10 +04:00
permissions = (permissions.FullAnonAccess,)
"""
List of all permissions that must be checked.
"""
2011-12-09 16:54:11 +04:00
2011-05-23 20:07:31 +04:00
@classmethod
def as_view(cls, **initkwargs):
"""
Override the default :meth:`as_view` to store an instance of the view
as an attribute on the callable function. This allows us to discover
2011-12-09 16:54:11 +04:00
information about the view when we do URL reverse lookups.
2011-05-23 20:07:31 +04:00
"""
view = super(View, cls).as_view(**initkwargs)
2011-05-23 20:07:31 +04:00
view.cls_instance = cls(**initkwargs)
return view
2011-05-04 12:21:17 +04:00
@property
def allowed_methods(self):
2011-05-12 18:11:14 +04:00
"""
Return the list of allowed HTTP methods, uppercased.
"""
2011-05-04 12:21:17 +04:00
return [method.upper() for method in self.http_method_names if hasattr(self, method)]
def get_name(self):
"""
Return the resource or view class name for use as this view's name.
Override to customize.
"""
# If this view has a resource that's been overridden, then use that resource for the name
2012-01-26 00:39:01 +04:00
if getattr(self, 'resource', None) not in _resource_classes:
name = self.resource.__name__
2012-01-26 00:39:01 +04:00
name = _remove_trailing_string(name, 'Resource')
name += getattr(self, '_suffix', '')
# If it's a view class with no resource then grok the name from the class name
2012-01-26 00:39:01 +04:00
else:
name = self.__class__.__name__
2012-01-26 00:39:01 +04:00
name = _remove_trailing_string(name, 'View')
2012-01-26 00:39:01 +04:00
return _camelcase_to_spaces(name)
def get_description(self, html=False):
"""
Return the resource or view docstring for use as this view's description.
Override to customize.
"""
2012-01-26 00:39:01 +04:00
description = None
# If this view has a resource that's been overridden,
# then try to use the resource's docstring
if getattr(self, 'resource', None) not in _resource_classes:
description = self.resource.__doc__
# Otherwise use the view docstring
if not description:
description = self.__doc__ or ''
description = _remove_leading_indent(description)
if html:
return self.markup_description(description)
return description
def markup_description(self, description):
if apply_markdown:
2012-01-28 18:38:06 +04:00
description = apply_markdown(description)
else:
2012-01-28 18:38:06 +04:00
description = escape(description).replace('\n', '<br />')
return mark_safe(description)
2011-05-04 12:21:17 +04:00
def http_method_not_allowed(self, request, *args, **kwargs):
"""
2011-12-09 16:54:11 +04:00
Return an HTTP 405 error if an operation is called which does not have a handler method.
"""
2011-05-04 12:21:17 +04:00
raise ErrorResponse(status.HTTP_405_METHOD_NOT_ALLOWED,
2011-05-12 18:11:14 +04:00
{'detail': 'Method \'%s\' not allowed on this resource.' % self.method})
2011-05-04 12:21:17 +04:00
def initial(self, request, *args, **kargs):
"""
Hook for any code that needs to run prior to anything else.
Required if you want to do things like set `request.upload_handlers` before
the authentication and dispatch handling is run.
"""
2012-02-20 13:33:45 +04:00
return request
2012-01-11 18:42:16 +04:00
def final(self, request, response, *args, **kargs):
"""
Hook for any code that needs to run after everything else in the view.
"""
# Always add these headers.
response.headers['Allow'] = ', '.join(self.allowed_methods)
# sample to allow caching using Vary http header
response.headers['Vary'] = 'Authenticate, Accept'
# merge with headers possibly set at some point in the view
response.headers.update(self.headers)
return self.render(response)
2011-06-13 22:42:37 +04:00
def add_header(self, field, value):
"""
2011-12-09 16:54:11 +04:00
Add *field* and *value* to the :attr:`headers` attribute of the :class:`View` class.
2011-06-13 22:42:37 +04:00
"""
self.headers[field] = value
2011-05-04 12:21:17 +04:00
# Note: session based authentication is explicitly CSRF validated,
# all other authentication is CSRF exempt.
@csrf_exempt
def dispatch(self, request, *args, **kwargs):
self.request = request
self.args = args
self.kwargs = kwargs
self.headers = {}
try:
self.initial(request, *args, **kwargs)
2011-12-09 16:54:11 +04:00
# Authenticate and check request has the relevant permissions
self._check_permissions()
# Get the appropriate handler method
if self.method.lower() in self.http_method_names:
handler = getattr(self, self.method.lower(), self.http_method_not_allowed)
else:
handler = self.http_method_not_allowed
response_obj = handler(request, *args, **kwargs)
# Allow return value to be either HttpResponse, Response, or an object, or None
if isinstance(response_obj, HttpResponse):
return response_obj
elif isinstance(response_obj, Response):
response = response_obj
elif response_obj is not None:
response = Response(status.HTTP_200_OK, response_obj)
else:
response = Response(status.HTTP_204_NO_CONTENT)
# Pre-serialize filtering (eg filter complex objects into natively serializable types)
response.cleaned_content = self.filter_response(response.raw_content)
2011-12-09 16:54:11 +04:00
except ErrorResponse, exc:
response = exc.response
2011-12-09 16:54:11 +04:00
return self.final(request, response, *args, **kwargs)
2011-12-09 16:54:11 +04:00
def options(self, request, *args, **kwargs):
response_obj = {
'name': self.get_name(),
'description': self.get_description(),
'renders': self._rendered_media_types,
'parses': self._parsed_media_types,
}
form = self.get_bound_form()
if form is not None:
field_name_types = {}
for name, field in form.fields.iteritems():
field_name_types[name] = field.__class__.__name__
response_obj['fields'] = field_name_types
# Note 'ErrorResponse' is misleading, it's just any response
# that should be rendered and returned immediately, without any
# response filtering.
raise ErrorResponse(status.HTTP_200_OK, response_obj)
2011-05-04 12:21:17 +04:00
class ModelView(View):
2011-07-22 15:03:04 +04:00
"""
A RESTful view that maps to a model in the database.
"""
2011-05-12 18:11:14 +04:00
resource = resources.ModelResource
2011-05-04 12:21:17 +04:00
2012-01-24 23:11:10 +04:00
class InstanceModelView(InstanceMixin, ReadModelMixin, UpdateModelMixin, DeleteModelMixin, ModelView):
2011-07-22 15:03:04 +04:00
"""
A view which provides default operations for read/update/delete against a model instance.
"""
2011-05-23 20:07:31 +04:00
_suffix = 'Instance'
2011-05-04 12:21:17 +04:00
2012-01-24 23:11:10 +04:00
2011-05-10 13:49:28 +04:00
class ListModelView(ListModelMixin, ModelView):
2011-07-22 15:03:04 +04:00
"""
A view which provides default operations for list, against a model in the database.
2011-12-09 16:54:11 +04:00
"""
2011-05-23 20:07:31 +04:00
_suffix = 'List'
2011-05-04 12:21:17 +04:00
2012-01-24 23:11:10 +04:00
2011-05-10 13:49:28 +04:00
class ListOrCreateModelView(ListModelMixin, CreateModelMixin, ModelView):
2011-07-22 15:03:04 +04:00
"""
A view which provides default operations for list and create, against a model in the database.
2011-12-09 16:54:11 +04:00
"""
2011-05-23 20:07:31 +04:00
_suffix = 'List'