sidekiq 7.3.7 → 8.0.0.beta1

data/lib/sidekiq/web/application.rb

@@ -1,436 +1,442 @@
 # frozen_string_literal: true
 
+require "base64"
+require "sidekiq/paginator"
+require "sidekiq/web/helpers"
+
 module Sidekiq
-  class WebApplication
-    extend WebRouter
-
-    REDIS_KEYS = %w[redis_version uptime_in_days connected_clients used_memory_human used_memory_peak_human]
-    CSP_HEADER_TEMPLATE = [
-      "default-src 'self' https: http:",
-      "child-src 'self'",
-      "connect-src 'self' https: http: wss: ws:",
-      "font-src 'self' https: http:",
-      "frame-src 'self'",
-      "img-src 'self' https: http: data:",
-      "manifest-src 'self'",
-      "media-src 'self'",
-      "object-src 'none'",
-      "script-src 'self' 'nonce-!placeholder!'",
-      "style-src 'self' https: http: 'unsafe-inline'", # TODO Nonce in 8.0
-      "worker-src 'self'",
-      "base-uri 'self'"
-    ].join("; ").freeze
-    METRICS_PERIODS = {
-      "1h" => 60,
-      "2h" => 120,
-      "4h" => 240,
-      "8h" => 480
-    }
-
-    def initialize(klass)
-      @klass = klass
-    end
+  class Web
+    class Application
+      extend Router
+      include Router
+
+      REDIS_KEYS = %w[redis_version uptime_in_days connected_clients used_memory_human used_memory_peak_human]
+
+      CSP_HEADER_TEMPLATE = [
+        "default-src 'self' https: http:",
+        "child-src 'self'",
+        "connect-src 'self' https: http: wss: ws:",
+        "font-src 'none'",
+        "frame-src 'self'",
+        "img-src 'self' https: http: data:",
+        "manifest-src 'self'",
+        "media-src 'self'",
+        "object-src 'none'",
+        "script-src 'self' 'nonce-!placeholder!'",
+        "style-src 'self' 'nonce-!placeholder!'",
+        "worker-src 'self'",
+        "base-uri 'self'"
+      ].join("; ").freeze
+
+      METRICS_PERIODS = {
+        "1h" => 60,
+        "2h" => 120,
+        "4h" => 240,
+        "8h" => 480
+      }
 
-    def settings
-      @klass.settings
-    end
+      def initialize(inst)
+        @app = inst
+      end
 
-    def self.settings
-      Sidekiq::Web.settings
-    end
+      head "/" do
+        # HEAD / is the cheapest heartbeat possible,
+        # it hits Redis to ensure connectivity and returns
+        # the size of the default queue
+        Sidekiq.redis { |c| c.llen("queue:default") }.to_s
+      end
 
-    def self.tabs
-      Sidekiq::Web.tabs
-    end
+      get "/" do
+        @redis_info = redis_info.select { |k, v| REDIS_KEYS.include? k }
+        days = (url_params("days") || 30).to_i
+        return halt(401) if days < 1 || days > 180
 
-    def self.set(key, val)
-      # nothing, backwards compatibility
-    end
+        stats_history = Sidekiq::Stats::History.new(days)
+        @processed_history = stats_history.processed
+        @failed_history = stats_history.failed
 
-    head "/" do
-      # HEAD / is the cheapest heartbeat possible,
-      # it hits Redis to ensure connectivity and returns
-      # the size of the default queue
-      Sidekiq.redis { |c| c.llen("queue:default") }.to_s
-    end
+        erb(:dashboard)
+      end
 
-    get "/" do
-      @redis_info = redis_info.select { |k, v| REDIS_KEYS.include? k }
-      days = (params["days"] || 30).to_i
-      return halt(401) if days < 1 || days > 180
+      get "/metrics" do
+        x = url_params("substr")
+        class_filter = (x.nil? || x == "") ? nil : Regexp.new(Regexp.escape(x), Regexp::IGNORECASE)
 
-      stats_history = Sidekiq::Stats::History.new(days)
-      @processed_history = stats_history.processed
-      @failed_history = stats_history.failed
+        q = Sidekiq::Metrics::Query.new
+        @period = h((url_params("period") || "")[0..1])
+        @periods = METRICS_PERIODS
+        minutes = @periods.fetch(@period, @periods.values.first)
+        @query_result = q.top_jobs(minutes: minutes, class_filter: class_filter)
 
-      erb(:dashboard)
-    end
+        erb(:metrics)
+      end
 
-    get "/metrics" do
-      x = params[:substr]
-      class_filter = (x.nil? || x == "") ? nil : Regexp.new(Regexp.escape(x), Regexp::IGNORECASE)
+      get "/metrics/:name" do
+        @name = route_params(:name)
+        @period = h((url_params("period") || "")[0..1])
+        q = Sidekiq::Metrics::Query.new
+        @periods = METRICS_PERIODS
+        minutes = @periods.fetch(@period, @periods.values.first)
+        @query_result = q.for_job(@name, minutes: minutes)
+        erb(:metrics_for_job)
+      end
 
-      q = Sidekiq::Metrics::Query.new
-      @period = h((params[:period] || "")[0..1])
-      @periods = METRICS_PERIODS
-      minutes = @periods.fetch(@period, @periods.values.first)
-      @query_result = q.top_jobs(minutes: minutes, class_filter: class_filter)
+      get "/busy" do
+        @count = (url_params("count") || 100).to_i
+        (@current_page, @total_size, @workset) = page_items(workset, url_params("page"), @count)
 
-      erb(:metrics)
-    end
+        erb(:busy)
+      end
 
-    get "/metrics/:name" do
-      @name = route_params[:name]
-      @period = h((params[:period] || "")[0..1])
-      q = Sidekiq::Metrics::Query.new
-      @periods = METRICS_PERIODS
-      minutes = @periods.fetch(@period, @periods.values.first)
-      @query_result = q.for_job(@name, minutes: minutes)
-      erb(:metrics_for_job)
-    end
+      post "/busy" do
+        if url_params("identity")
+          pro = Sidekiq::ProcessSet[url_params("identity")]
 
-    get "/busy" do
-      @count = (params["count"] || 100).to_i
-      (@current_page, @total_size, @workset) = page_items(workset, params["page"], @count)
+          pro.quiet! if url_params("quiet")
+          pro.stop! if url_params("stop")
+        else
+          processes.each do |pro|
+            next if pro.embedded?
 
-      erb(:busy)
-    end
+            pro.quiet! if url_params("quiet")
+            pro.stop! if url_params("stop")
+          end
+        end
 
-    post "/busy" do
-      if params["identity"]
-        pro = Sidekiq::ProcessSet[params["identity"]]
+        redirect "#{root_path}busy"
+      end
 
-        pro.quiet! if params["quiet"]
-        pro.stop! if params["stop"]
-      else
-        processes.each do |pro|
-          next if pro.embedded?
+      get "/queues" do
+        @queues = Sidekiq::Queue.all
 
-          pro.quiet! if params["quiet"]
-          pro.stop! if params["stop"]
-        end
+        erb(:queues)
       end
 
-      redirect "#{root_path}busy"
-    end
+      QUEUE_NAME = /\A[a-z_:.\-0-9]+\z/i
 
-    get "/queues" do
-      @queues = Sidekiq::Queue.all
+      get "/queues/:name" do
+        @name = route_params(:name)
 
-      erb(:queues)
-    end
+        halt(404) if !@name || @name !~ QUEUE_NAME
 
-    QUEUE_NAME = /\A[a-z_:.\-0-9]+\z/i
+        @count = (url_params("count") || 25).to_i
+        @queue = Sidekiq::Queue.new(@name)
+        (@current_page, @total_size, @jobs) = page("queue:#{@name}", url_params("page"), @count, reverse: url_params("direction") == "asc")
+        @jobs = @jobs.map { |msg| Sidekiq::JobRecord.new(msg, @name) }
 
-    get "/queues/:name" do
-      @name = route_params[:name]
+        erb(:queue)
+      end
 
-      halt(404) if !@name || @name !~ QUEUE_NAME
+      post "/queues/:name" do
+        queue = Sidekiq::Queue.new(route_params(:name))
 
-      @count = (params["count"] || 25).to_i
-      @queue = Sidekiq::Queue.new(@name)
-      (@current_page, @total_size, @jobs) = page("queue:#{@name}", params["page"], @count, reverse: params["direction"] == "asc")
-      @jobs = @jobs.map { |msg| Sidekiq::JobRecord.new(msg, @name) }
+        if Sidekiq.pro? && url_params("pause")
+          queue.pause!
+        elsif Sidekiq.pro? && url_params("unpause")
+          queue.unpause!
+        else
+          queue.clear
+        end
 
-      erb(:queue)
-    end
+        redirect "#{root_path}queues"
+      end
 
-    post "/queues/:name" do
-      queue = Sidekiq::Queue.new(route_params[:name])
+      post "/queues/:name/delete" do
+        name = route_params(:name)
+        Sidekiq::JobRecord.new(url_params("key_val"), name).delete
 
-      if Sidekiq.pro? && params["pause"]
-        queue.pause!
-      elsif Sidekiq.pro? && params["unpause"]
-        queue.unpause!
-      else
-        queue.clear
+        redirect_with_query("#{root_path}queues/#{CGI.escape(name)}")
       end
 
-      redirect "#{root_path}queues"
-    end
+      get "/morgue" do
+        x = url_params("substr")
 
-    post "/queues/:name/delete" do
-      name = route_params[:name]
-      Sidekiq::JobRecord.new(params["key_val"], name).delete
+        if x && x != ""
+          @dead = search(Sidekiq::DeadSet.new, x)
+        else
+          @count = (url_params("count") || 25).to_i
+          (@current_page, @total_size, @dead) = page("dead", url_params("page"), @count, reverse: true)
+          @dead = @dead.map { |msg, score| Sidekiq::SortedEntry.new(nil, score, msg) }
+        end
 
-      redirect_with_query("#{root_path}queues/#{CGI.escape(name)}")
-    end
+        erb(:morgue)
+      end
 
-    get "/morgue" do
-      x = params[:substr]
+      get "/morgue/:key" do
+        key = route_params(:key)
+        halt(404) unless key
 
-      if x && x != ""
-        @dead = search(Sidekiq::DeadSet.new, x)
-      else
-        @count = (params["count"] || 25).to_i
-        (@current_page, @total_size, @dead) = page("dead", params["page"], @count, reverse: true)
-        @dead = @dead.map { |msg, score| Sidekiq::SortedEntry.new(nil, score, msg) }
-      end
+        @dead = Sidekiq::DeadSet.new.fetch(*parse_key(key)).first
 
-      erb(:morgue)
-    end
+        if @dead.nil?
+          redirect "#{root_path}morgue"
+        else
+          erb(:dead)
+        end
+      end
 
-    get "/morgue/:key" do
-      key = route_params[:key]
-      halt(404) unless key
+      post "/morgue" do
+        redirect(request.path) unless url_params("key")
 
-      @dead = Sidekiq::DeadSet.new.fetch(*parse_params(key)).first
+        url_params("key").each do |key|
+          job = Sidekiq::DeadSet.new.fetch(*parse_key(key)).first
+          retry_or_delete_or_kill job, request.params if job
+        end
 
-      if @dead.nil?
-        redirect "#{root_path}morgue"
-      else
-        erb(:dead)
+        redirect_with_query("#{root_path}morgue")
       end
-    end
 
-    post "/morgue" do
-      redirect(request.path) unless url_params("key")
+      post "/morgue/all/delete" do
+        Sidekiq::DeadSet.new.clear
 
-      params["key"].each do |key|
-        job = Sidekiq::DeadSet.new.fetch(*parse_params(key)).first
-        retry_or_delete_or_kill job, params if job
+        redirect "#{root_path}morgue"
       end
 
-      redirect_with_query("#{root_path}morgue")
-    end
+      post "/morgue/all/retry" do
+        Sidekiq::DeadSet.new.retry_all
 
-    post "/morgue/all/delete" do
-      Sidekiq::DeadSet.new.clear
+        redirect "#{root_path}morgue"
+      end
 
-      redirect "#{root_path}morgue"
-    end
+      post "/morgue/:key" do
+        key = route_params(:key)
+        halt(404) unless key
 
-    post "/morgue/all/retry" do
-      Sidekiq::DeadSet.new.retry_all
+        job = Sidekiq::DeadSet.new.fetch(*parse_key(key)).first
+        retry_or_delete_or_kill job, request.params if job
 
-      redirect "#{root_path}morgue"
-    end
+        redirect_with_query("#{root_path}morgue")
+      end
 
-    post "/morgue/:key" do
-      key = route_params(:key)
-      halt(404) unless key
+      get "/retries" do
+        x = url_params("substr")
 
-      job = Sidekiq::DeadSet.new.fetch(*parse_params(key)).first
-      retry_or_delete_or_kill job, params if job
+        if x && x != ""
+          @retries = search(Sidekiq::RetrySet.new, x)
+        else
+          @count = (url_params("count") || 25).to_i
+          (@current_page, @total_size, @retries) = page("retry", url_params("page"), @count)
+          @retries = @retries.map { |msg, score| Sidekiq::SortedEntry.new(nil, score, msg) }
+        end
 
-      redirect_with_query("#{root_path}morgue")
-    end
+        erb(:retries)
+      end
 
-    get "/retries" do
-      x = url_params("substr")
+      get "/retries/:key" do
+        @retry = Sidekiq::RetrySet.new.fetch(*parse_key(route_params(:key))).first
 
-      if x && x != ""
-        @retries = search(Sidekiq::RetrySet.new, x)
-      else
-        @count = (params["count"] || 25).to_i
-        (@current_page, @total_size, @retries) = page("retry", params["page"], @count)
-        @retries = @retries.map { |msg, score| Sidekiq::SortedEntry.new(nil, score, msg) }
+        if @retry.nil?
+          redirect "#{root_path}retries"
+        else
+          erb(:retry)
+        end
       end
 
-      erb(:retries)
-    end
+      post "/retries" do
+        route_params("mike")
+        url_params(:mike)
+        redirect(request.path) unless url_params("key")
 
-    get "/retries/:key" do
-      @retry = Sidekiq::RetrySet.new.fetch(*parse_params(route_params[:key])).first
+        url_params("key").each do |key|
+          job = Sidekiq::RetrySet.new.fetch(*parse_key(key)).first
+          retry_or_delete_or_kill job, request.params if job
+        end
 
-      if @retry.nil?
-        redirect "#{root_path}retries"
-      else
-        erb(:retry)
+        redirect_with_query("#{root_path}retries")
       end
-    end
 
-    post "/retries" do
-      redirect(request.path) unless params["key"]
+      post "/retries/all/delete" do
+        Sidekiq::RetrySet.new.clear
+        redirect "#{root_path}retries"
+      end
 
-      params["key"].each do |key|
-        job = Sidekiq::RetrySet.new.fetch(*parse_params(key)).first
-        retry_or_delete_or_kill job, params if job
+      post "/retries/all/retry" do
+        Sidekiq::RetrySet.new.retry_all
+        redirect "#{root_path}retries"
       end
 
-      redirect_with_query("#{root_path}retries")
-    end
+      post "/retries/all/kill" do
+        Sidekiq::RetrySet.new.kill_all
+        redirect "#{root_path}retries"
+      end
 
-    post "/retries/all/delete" do
-      Sidekiq::RetrySet.new.clear
+      post "/retries/:key" do
+        job = Sidekiq::RetrySet.new.fetch(*parse_key(route_params(:key))).first
 
-      redirect "#{root_path}retries"
-    end
+        retry_or_delete_or_kill job, request.params if job
 
-    post "/retries/all/retry" do
-      Sidekiq::RetrySet.new.retry_all
+        redirect_with_query("#{root_path}retries")
+      end
 
-      redirect "#{root_path}retries"
-    end
+      get "/scheduled" do
+        x = url_params("substr")
 
-    post "/retries/all/kill" do
-      Sidekiq::RetrySet.new.kill_all
+        if x && x != ""
+          @scheduled = search(Sidekiq::ScheduledSet.new, x)
+        else
+          @count = (url_params("count") || 25).to_i
+          (@current_page, @total_size, @scheduled) = page("schedule", url_params("page"), @count)
+          @scheduled = @scheduled.map { |msg, score| Sidekiq::SortedEntry.new(nil, score, msg) }
+        end
 
-      redirect "#{root_path}retries"
-    end
+        erb(:scheduled)
+      end
 
-    post "/retries/:key" do
-      job = Sidekiq::RetrySet.new.fetch(*parse_params(route_params[:key])).first
+      get "/scheduled/:key" do
+        @job = Sidekiq::ScheduledSet.new.fetch(*parse_key(route_params(:key))).first
 
-      retry_or_delete_or_kill job, params if job
+        if @job.nil?
+          redirect "#{root_path}scheduled"
+        else
+          erb(:scheduled_job_info)
+        end
+      end
 
-      redirect_with_query("#{root_path}retries")
-    end
+      post "/scheduled" do
+        redirect(request.path) unless url_params("key")
 
-    get "/scheduled" do
-      x = params[:substr]
+        url_params("key").each do |key|
+          job = Sidekiq::ScheduledSet.new.fetch(*parse_key(key)).first
+          delete_or_add_queue job, request.params if job
+        end
 
-      if x && x != ""
-        @scheduled = search(Sidekiq::ScheduledSet.new, x)
-      else
-        @count = (params["count"] || 25).to_i
-        (@current_page, @total_size, @scheduled) = page("schedule", params["page"], @count)
-        @scheduled = @scheduled.map { |msg, score| Sidekiq::SortedEntry.new(nil, score, msg) }
+        redirect_with_query("#{root_path}scheduled")
       end
 
-      erb(:scheduled)
-    end
+      post "/scheduled/:key" do
+        key = route_params(:key)
+        halt(404) unless key
 
-    get "/scheduled/:key" do
-      @job = Sidekiq::ScheduledSet.new.fetch(*parse_params(route_params[:key])).first
+        job = Sidekiq::ScheduledSet.new.fetch(*parse_key(key)).first
+        delete_or_add_queue job, request.params if job
 
-      if @job.nil?
-        redirect "#{root_path}scheduled"
-      else
-        erb(:scheduled_job_info)
+        redirect_with_query("#{root_path}scheduled")
       end
-    end
 
-    post "/scheduled" do
-      redirect(request.path) unless params["key"]
-
-      params["key"].each do |key|
-        job = Sidekiq::ScheduledSet.new.fetch(*parse_params(key)).first
-        delete_or_add_queue job, params if job
+      get "/dashboard/stats" do
+        redirect "#{root_path}stats"
       end
 
-      redirect_with_query("#{root_path}scheduled")
-    end
-
-    post "/scheduled/:key" do
-      key = route_params[:key]
-      halt(404) unless key
-
-      job = Sidekiq::ScheduledSet.new.fetch(*parse_params(key)).first
-      delete_or_add_queue job, params if job
-
-      redirect_with_query("#{root_path}scheduled")
-    end
-
-    get "/dashboard/stats" do
-      redirect "#{root_path}stats"
-    end
+      get "/stats" do
+        sidekiq_stats = Sidekiq::Stats.new
+        redis_stats = redis_info.select { |k, v| REDIS_KEYS.include? k }
+        json(
+          sidekiq: {
+            processed: sidekiq_stats.processed,
+            failed: sidekiq_stats.failed,
+            busy: sidekiq_stats.workers_size,
+            processes: sidekiq_stats.processes_size,
+            enqueued: sidekiq_stats.enqueued,
+            scheduled: sidekiq_stats.scheduled_size,
+            retries: sidekiq_stats.retry_size,
+            dead: sidekiq_stats.dead_size,
+            default_latency: sidekiq_stats.default_queue_latency
+          },
+          redis: redis_stats,
+          server_utc_time: server_utc_time
+        )
+      end
 
-    get "/stats" do
-      sidekiq_stats = Sidekiq::Stats.new
-      redis_stats = redis_info.select { |k, v| REDIS_KEYS.include? k }
-      json(
-        sidekiq: {
-          processed: sidekiq_stats.processed,
-          failed: sidekiq_stats.failed,
-          busy: sidekiq_stats.workers_size,
-          processes: sidekiq_stats.processes_size,
-          enqueued: sidekiq_stats.enqueued,
-          scheduled: sidekiq_stats.scheduled_size,
-          retries: sidekiq_stats.retry_size,
-          dead: sidekiq_stats.dead_size,
-          default_latency: sidekiq_stats.default_queue_latency
-        },
-        redis: redis_stats,
-        server_utc_time: server_utc_time
-      )
-    end
+      get "/stats/queues" do
+        json Sidekiq::Stats.new.queues
+      end
 
-    get "/stats/queues" do
-      json Sidekiq::Stats.new.queues
-    end
+      get "/profiles" do
+        erb(:profiles)
+      end
 
-    post "/change_locale" do
-      locale = params["locale"]
+      get "/profiles/:key" do
+        store = config[:profile_store_url]
+        return redirect_to "#{root_path}profiles" unless store
+
+        key = route_params(:key)
+        sid = Sidekiq.redis { |c| c.hget(key, "sid") }
+
+        unless sid
+          require "net/http"
+          data = Sidekiq.redis { |c| c.hget(key, "data") }
+          resp = Net::HTTP.post(URI(store),
+            data,
+            {"Accept" => "application/vnd.firefox-profiler+json;version=1.0",
+             "User-Agent" => "Sidekiq #{Sidekiq::VERSION} job profiler"})
+          # https://raw.githubusercontent.com/firefox-devtools/profiler-server/master/tools/decode_jwt_payload.py
+          sid = Sidekiq.load_json(Base64.decode64(resp.body.split(".")[1]))["profileToken"]
+          Sidekiq.redis { |c| c.hset(key, "sid", sid) }
+        end
+        url = config[:profile_view_url] % sid
+        redirect_to url
+      end
 
-      match = available_locales.find { |available|
-        locale == available
-      }
+      get "/profiles/:key/data" do
+        key = route_params(:key)
+        data = Sidekiq.redis { |c| c.hget(key, "data") }
 
-      session[:locale] = match if match
+        [200, {
+          "content-type" => "application/json",
+          "content-encoding" => "gzip",
+          # allow Firefox Profiler's XHR to fetch this profile data
+          "access-control-allow-origin" => "*"
+        }, [data]]
+      end
 
-      reload_page
-    end
+      post "/change_locale" do
+        locale = url_params("locale")
 
-    def call(env)
-      action = self.class.match(env)
-      return [404, {Rack::CONTENT_TYPE => "text/plain", Web::X_CASCADE => "pass"}, ["Not Found"]] unless action
-
-      app = @klass
-      resp = catch(:halt) do
-        self.class.run_befores(app, action)
-        action.instance_exec env, &action.block
-      ensure
-        self.class.run_afters(app, action)
-      end
-
-      case resp
-      when Array
-        # redirects go here
-        resp
-      else
-        # rendered content goes here
-        headers = {
-          Rack::CONTENT_TYPE => "text/html",
-          Rack::CACHE_CONTROL => "private, no-store",
-          Web::CONTENT_LANGUAGE => action.locale,
-          Web::CONTENT_SECURITY_POLICY => process_csp(env, CSP_HEADER_TEMPLATE),
-          Web::X_CONTENT_TYPE_OPTIONS => "nosniff"
+        match = available_locales.find { |available|
+          locale == available
         }
-        # we'll let Rack calculate Content-Length for us.
-        [200, headers, [resp]]
-      end
-    end
 
-    def process_csp(env, input)
-      input.gsub("!placeholder!", env[:csp_nonce])
-    end
+        session[:locale] = match if match
 
-    def self.helpers(mod = nil, &block)
-      if block
-        WebAction.class_eval(&block)
-      else
-        WebAction.send(:include, mod)
+        reload_page
       end
-    end
 
-    def self.before(path = nil, &block)
-      befores << [path && Regexp.new("\\A#{path.gsub("*", ".*")}\\z"), block]
-    end
+      def redis(&)
+        Thread.current[:sidekiq_redis_pool].with(&)
+      end
 
-    def self.after(path = nil, &block)
-      afters << [path && Regexp.new("\\A#{path.gsub("*", ".*")}\\z"), block]
-    end
+      def call(env)
+        action = match(env)
+        return [404, {"content-type" => "text/plain", "x-cascade" => "pass"}, ["Not Found"]] unless action
 
-    def self.run_befores(app, action)
-      run_hooks(befores, app, action)
-    end
-
-    def self.run_afters(app, action)
-      run_hooks(afters, app, action)
-    end
+        resp = catch(:halt) do
+          Thread.current[:sidekiq_redis_pool] = env[:redis_pool]
+          action.instance_exec env, &action.block
+        ensure
+          Thread.current[:sidekiq_redis_pool] = nil
+        end
 
-    def self.run_hooks(hooks, app, action)
-      hooks.select { |p, _| !p || p =~ action.env[WebRouter::PATH_INFO] }
-        .each { |_, b| action.instance_exec(action.env, app, &b) }
-    end
+        case resp
+        when Array
+          # redirects go here
+          resp
+        else
+          # rendered content goes here
+          headers = {
+            "content-type" => "text/html",
+            "cache-control" => "private, no-store",
+            "content-language" => action.locale,
+            "content-security-policy" => process_csp(env, CSP_HEADER_TEMPLATE),
+            "x-content-type-options" => "nosniff"
+          }
+          # we'll let Rack calculate Content-Length for us.
+          [200, headers, [resp]]
+        end
+      end
 
-    def self.befores
-      @befores ||= []
-    end
+      def process_csp(env, input)
+        input.gsub("!placeholder!", env[:csp_nonce])
+      end
 
-    def self.afters
-      @afters ||= []
+      # Used by extensions to add helper methods accessible to
+      # any defined endpoints in Application. Careful with generic
+      # method naming as there's no namespacing so collisions are
+      # possible.
+      def self.helpers(mod)
+        Sidekiq::Web::Action.send(:include, mod)
+      end
+      helpers WebHelpers
+      helpers Paginator
     end
   end
 end