apache-airflow-providers-fab 1.5.3rc1__py3-none-any.whl → 2.0.0rc1__py3-none-any.whl

airflow/providers/fab/www/extensions/init_security.py

@@ -0,0 +1,42 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+from __future__ import annotations
+
+import logging
+
+from airflow.configuration import conf
+
+log = logging.getLogger(__name__)
+
+
+def init_xframe_protection(app):
+    """
+    Add X-Frame-Options header.
+
+    Use it to avoid click-jacking attacks, by ensuring that their content is not embedded into other sites.
+
+    See also: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
+    """
+    x_frame_enabled = conf.getboolean("webserver", "X_FRAME_ENABLED", fallback=True)
+    if x_frame_enabled:
+        return
+
+    def apply_caching(response):
+        response.headers["X-Frame-Options"] = "DENY"
+        return response
+
+    app.after_request(apply_caching)

airflow/providers/fab/www/extensions/init_views.py

@@ -0,0 +1,67 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+from __future__ import annotations
+
+import logging
+from typing import TYPE_CHECKING
+
+if TYPE_CHECKING:
+    from flask import Flask
+
+log = logging.getLogger(__name__)
+
+
+def init_plugins(app):
+    """Integrate Flask and FAB with plugins."""
+    from airflow import plugins_manager
+
+    plugins_manager.initialize_flask_plugins()
+
+    appbuilder = app.appbuilder
+
+    for view in plugins_manager.flask_appbuilder_views:
+        name = view.get("name")
+        if name:
+            filtered_view_kwargs = {k: v for k, v in view.items() if k not in ["view"]}
+            log.debug("Adding view %s with menu", name)
+            baseview = view.get("view")
+            if baseview:
+                appbuilder.add_view(baseview, **filtered_view_kwargs)
+            else:
+                log.error("'view' key is missing for the named view: %s", name)
+        else:
+            # if 'name' key is missing, intent is to add view without menu
+            log.debug("Adding view %s without menu", str(type(view["view"])))
+            appbuilder.add_view_no_menu(view["view"])
+
+    for menu_link in sorted(
+        plugins_manager.flask_appbuilder_menu_links, key=lambda x: (x.get("category", ""), x["name"])
+    ):
+        log.debug("Adding menu link %s to %s", menu_link["name"], menu_link["href"])
+        appbuilder.add_link(**menu_link)
+
+    for blue_print in plugins_manager.flask_blueprints:
+        log.debug("Adding blueprint %s:%s", blue_print["name"], blue_print["blueprint"].import_name)
+        app.register_blueprint(blue_print["blueprint"])
+
+
+def init_error_handlers(app: Flask):
+    """Add custom errors handlers."""
+    from airflow.www import views
+
+    app.register_error_handler(500, views.show_traceback)
+    app.register_error_handler(404, views.not_found)