urls.py

# Copyright 2012, 2013 GRNET S.A. All rights reserved.
#
# Redistribution and use in source and binary forms, with or
# without modification, are permitted provided that the following
# conditions are met:
#
#   1. Redistributions of source code must retain the above
#      copyright notice, this list of conditions and the following
#      disclaimer.
#
#   2. Redistributions in binary form must reproduce the above
#      copyright notice, this list of conditions and the following
#      disclaimer in the documentation and/or other materials
#      provided with the distribution.
#
# THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS
# OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR
# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
# USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
# POSSIBILITY OF SUCH DAMAGE.
#
# The views and conclusions contained in the software and
# documentation are those of the authors and should not be
# interpreted as representing official policies, either expressed
# or implied, of GRNET S.A.

from django.core import urlresolvers
from django.views.decorators import csrf
from django.conf.urls.defaults import patterns


def _patch_pattern(regex_pattern):
    """
    Patch pattern callback using csrf_exempt. Enforce
    RegexURLPattern callback to get resolved if required.
    """
    if not regex_pattern._callback:
        # enforce _callback resolving
        regex_pattern._get_callback()

    regex_pattern._callback = \
        csrf.csrf_exempt(regex_pattern._callback)


def _patch_resolver(r):
    """
    Patch all patterns found in resolver with _patch_pattern
    """
    if hasattr(r, '_get_url_patterns'):
        entries = r._get_url_patterns()
    else:
        # first level view in patterns ?
        entries = [r]

    for entry in entries:
        if isinstance(entry, urlresolvers.RegexURLResolver):
            _patch_resolver(entry)
        #if isinstance(entry, urlresolvers.RegexURLPattern):
        # let it break...
        else:
            _patch_pattern(entry)


def api_patterns(*args, **kwargs):
    """
    Protect all url patterns from csrf attacks.
    """
    _patterns = patterns(*args, **kwargs)
    for entry in _patterns:
        _patch_resolver(entry)
    return _patterns