piwigo: Add .images.add including form handling.

To make things a bit easier, switch to WTForms
for validating the received data.
This commit is contained in:
Elrond 2013-03-25 15:34:21 +01:00
parent 180a008100
commit c1df8d1963
3 changed files with 41 additions and 3 deletions

View File

@ -26,3 +26,19 @@ class AddSimpleForm(wtforms.Form):
# tags = wtforms.FieldList(wtforms.TextField())
category = wtforms.IntegerField()
level = wtforms.IntegerField()
_md5_validator = wtforms.validators.Regexp(r"^[0-9a-fA-F]{32}$")
class AddForm(wtforms.Form):
original_sum = wtforms.TextField(None,
[_md5_validator,
wtforms.validators.Required()])
thumbnail_sum = wtforms.TextField(None,
[wtforms.validators.Optional(False),
_md5_validator])
file_sum = wtforms.TextField(None, [_md5_validator])
name = wtforms.TextField()
date_creation = wtforms.TextField()
categories = wtforms.TextField()

View File

@ -18,7 +18,7 @@ import logging
import six
import lxml.etree as ET
from werkzeug.exceptions import MethodNotAllowed
from werkzeug.exceptions import MethodNotAllowed, BadRequest
from mediagoblin.tools.response import Response
@ -106,3 +106,16 @@ class CmdTable(object):
_log.warn("Method %s only allowed for POST", cmd_name)
raise MethodNotAllowed()
return func
def check_form(form):
if not form.validate():
_log.error("form validation failed for form %r", form)
for f in form:
if len(f.error):
_log.error("Errors for %s: %r", f.name, f.errors)
raise BadRequest()
dump = []
for f in form:
dump.append("%s=%r" % (f.name, f.data))
_log.debug("form: %s", " ".join(dump))

View File

@ -23,8 +23,8 @@ from werkzeug.wrappers import BaseResponse
from mediagoblin import mg_globals
from mediagoblin.meddleware.csrf import csrf_exempt
from mediagoblin.submit.lib import check_file_field
from .tools import CmdTable, PwgNamedArray, response_xml
from .forms import AddSimpleForm
from .tools import CmdTable, PwgNamedArray, response_xml, check_form
from .forms import AddSimpleForm, AddForm
_log = logging.getLogger(__name__)
@ -133,6 +133,15 @@ def pwg_images_addChunk(request):
return True
@CmdTable("pwg.images.add", True)
def pwg_images_add(request):
_log.info("add: %r", request.form)
form = AddForm(request.form)
check_form(form)
return {'image_id': 123456, 'url': ''}
@csrf_exempt
def ws_php(request):
if request.method not in ("GET", "POST"):