From 865ffa2e14fb4695ae87495174c1775248371454 Mon Sep 17 00:00:00 2001
From: root <root@login001.cm.cluster>
Date: Wed, 14 Dec 2022 01:30:56 -0600
Subject: [PATCH 1/2] Update to only use eppa if it's provided in the headers
---
app/__init__.py | 11 ++++++-----
1 file changed, 6 insertions(+), 5 deletions(-)
diff --git a/app/__init__.py b/app/__init__.py
index 5519a7b..6b4273e 100644
--- a/app/__init__.py
+++ b/app/__init__.py
@@ -71,11 +71,12 @@ def create_app(config_name):
"redir", app_vars.default_referrer
)
- if not any(item in session["user"].get("eppa") for item in valid_eppa):
- return render_template(
- "account/unauthorized.html",
- unauthorized_msg=messages.unauthorized_message,
- )
+ if 'eppa' in request.headers:
+ if not any(item in session["user"].get("eppa") for item in valid_eppa):
+ return render_template(
+ "account/unauthorized.html",
+ unauthorized_msg=messages.unauthorized_message,
+ )
if rc_util.check_state(session["user"].get("username")) == "hold":
return render_template(
--
GitLab
From c6942887d5f670f5d8cd3568e8a75423ea2c8752 Mon Sep 17 00:00:00 2001
From: Ravi Tripathi <ravi89@uab.edu>
Date: Thu, 15 Dec 2022 11:09:35 -0600
Subject: [PATCH 2/2] Updated the code using black reformatter.
---
app/__init__.py | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/app/__init__.py b/app/__init__.py
index 6b4273e..61c72f5 100644
--- a/app/__init__.py
+++ b/app/__init__.py
@@ -44,7 +44,6 @@ def create_app(config_name):
Bootstrap(app) # allowing app to use bootstrap
def get_authorized_user():
-
user = {
"username": request.headers.get("REMOTE_USER"),
"fullname": request.headers.get("Displayname"),
@@ -58,7 +57,6 @@ def create_app(config_name):
"/", methods=["GET", "POST"]
) # initial route to display the reg page
def index():
-
valid_eppa = app_vars.valid_eppa
if "uid" not in session:
@@ -71,8 +69,10 @@ def create_app(config_name):
"redir", app_vars.default_referrer
)
- if 'eppa' in request.headers:
- if not any(item in session["user"].get("eppa") for item in valid_eppa):
+ if "eppa" in request.headers:
+ if not any(
+ item in session["user"].get("eppa") for item in valid_eppa
+ ):
return render_template(
"account/unauthorized.html",
unauthorized_msg=messages.unauthorized_message,
--
GitLab