123456789101112131415161718192021222324252627282930313233 |
- from django.conf import settings
- from django.core.exceptions import ImproperlyConfigured
- from django.http import HttpResponse
- from django.utils.deprecation import MiddlewareMixin
-
- from .utils import get_view_name
-
-
- class XViewMiddleware(MiddlewareMixin):
- """
- Add an X-View header to internal HEAD requests.
- """
-
- def process_view(self, request, view_func, view_args, view_kwargs):
- """
- If the request method is HEAD and either the IP is internal or the
- user is a logged-in staff member, return a response with an x-view
- header indicating the view function. This is used to lookup the view
- function for an arbitrary page.
- """
- if not hasattr(request, "user"):
- raise ImproperlyConfigured(
- "The XView middleware requires authentication middleware to "
- "be installed. Edit your MIDDLEWARE setting to insert "
- "'django.contrib.auth.middleware.AuthenticationMiddleware'."
- )
- if request.method == "HEAD" and (
- request.META.get("REMOTE_ADDR") in settings.INTERNAL_IPS
- or (request.user.is_active and request.user.is_staff)
- ):
- response = HttpResponse()
- response.headers["X-View"] = get_view_name(view_func)
- return response
|