rest.py 文件源码

def request_status():
    username = str(request.form['username'])
    requestid = str(request.form['requestid'])
    client_ip = request.remote_addr

    if not pivportal.security.username_is_valid(username) or not pivportal.security.requestid_is_valid(requestid) or not pivportal.security.ip_is_valid(client_ip):
        return Response(response=json.dumps({"response": "  invalid request"}), status=400, mimetype="application/json")

    auth_requests = redis_store.hgetall("requests")
    if requestid in auth_requests:
        this_request = json.loads(auth_requests[requestid])
        if this_request["username"] == username and this_request["client_ip"] == client_ip:
            if this_request["authorized"] == True:
                # Success
                redis_store.hdel("requests", requestid)
                return Response(response=json.dumps({"response": "success"}), status=200, mimetype="application/json")
            else:
                # Delete auth_request, it failed anyway
                redis_store.hdel("requests", requestid)

    return Response(response=json.dumps({"response": "Authentication Failure"}), status=401, mimetype="application/json")