vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

endpoints: remove /keys

Browse source 
BitTorrent support should now be able to use the keyserver
infrastructure instead.
This commit is contained in:
Jimmy Zelinskie 2016-04-11 18:22:47 -04:00 • committed by Jimmy Zelinskie
parent 6a00025545
commit fca258d8bf
1 changed files with 3 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

30
endpoints/web.py
View file

@ -1,14 +1,11 @@
import json import json
import logging import logging
from jwkest import long_to_base64 from urlparse import urlparse
from cachetools import lru_cache
from cryptography.x509 import load_pem_x509_certificate
from cryptography.hazmat.backends import default_backend
from flask import (abort, redirect, request, url_for, make_response, Response, from flask import (abort, redirect, request, url_for, make_response, Response,
Blueprint, send_from_directory, jsonify, send_file) Blueprint, send_from_directory, jsonify, send_file)
from flask.ext.login import current_user from flask.ext.login import current_user
from urlparse import urlparse
import features import features
@ -30,7 +27,7 @@ from endpoints.common import (common_login, render_page_template, route_show_if,
from endpoints.csrf import csrf_protect, generate_csrf_token, verify_csrf from endpoints.csrf import csrf_protect, generate_csrf_token, verify_csrf
from endpoints.decorators import anon_protect, anon_allowed from endpoints.decorators import anon_protect, anon_allowed
from health.healthcheck import get_healthchecker from health.healthcheck import get_healthchecker
from util.cache import no_cache, cache_control from util.cache import no_cache
from util.headers import parse_basic_auth from util.headers import parse_basic_auth
from util.invoice import renderInvoiceToPdf from util.invoice import renderInvoiceToPdf
from util.seo import render_snapshot from util.seo import render_snapshot
@ -688,24 +685,3 @@ def redirect_to_namespace(namespace):
return redirect(url_for('web.org_view', path=namespace)) return redirect(url_for('web.org_view', path=namespace))
else: else:
return redirect(url_for('web.user_view', path=namespace)) return redirect(url_for('web.user_view', path=namespace))
@lru_cache(maxsize=1)
def _load_certificate_bytes(certificate_file_path):
with open(certificate_file_path) as cert_file:
return load_pem_x509_certificate(cert_file.read(), default_backend()).public_key()
@route_show_if(features.BITTORRENT)
@cache_control(max_age=300)
@web.route('/keys', methods=['GET'])
def jwk_set_uri():
certificate = _load_certificate_bytes(app.config['JWT_AUTH_CERTIFICATE_PATH'])
return jsonify({
'keys': [{
'kty': 'RSA',
'alg': 'RS256',
'use': 'sig',
'n': long_to_base64(certificate.public_numbers().n),
'e': long_to_base64(certificate.public_numbers().e),
}],
'issuer': JWT_ISSUER,
})