c2cgeoportal-geoportal 2.3.5.79__py3-none-any.whl → 2.9rc1__py3-none-any.whl

c2cgeoportal_geoportal/views/raster.py

@@ -0,0 +1,193 @@
+# Copyright (c) 2012-2024, Camptocamp SA
+# All rights reserved.
+
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are met:
+
+# 1. Redistributions of source code must retain the above copyright notice, this
+#    list of conditions and the following disclaimer.
+# 2. Redistributions in binary form must reproduce the above copyright notice,
+#    this list of conditions and the following disclaimer in the documentation
+#    and/or other materials provided with the distribution.
+
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+# DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
+# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+# ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+# SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+# The views and conclusions contained in the software and documentation are those
+# of the authors and should not be interpreted as representing official policies,
+# either expressed or implied, of the FreeBSD Project.
+
+
+import decimal
+import logging
+import math
+import os
+import traceback
+from typing import TYPE_CHECKING, Any
+
+import numpy
+import pyramid.request
+import zope.event.classhandler
+from pyramid.httpexceptions import HTTPBadRequest, HTTPNotFound
+from pyramid.view import view_config
+from rasterio.io import DatasetReader
+
+from c2cgeoportal_commons.models import InvalidateCacheEvent
+from c2cgeoportal_geoportal.lib.common_headers import Cache, set_common_headers
+
+if TYPE_CHECKING:
+    import fiona.collection
+
+_LOG = logging.getLogger(__name__)
+
+
+class Raster:
+    """All the view concerned the raster (point, not the profile profile)."""
+
+    data: dict[str, "fiona.collection.Collection"] = {}
+
+    def __init__(self, request: pyramid.request.Request):
+        self.request = request
+        self.rasters = self.request.registry.settings["raster"]
+
+        @zope.event.classhandler.handler(InvalidateCacheEvent)  # type: ignore
+        def handle(event: InvalidateCacheEvent) -> None:
+            del event
+            for _, v in Raster.data.items():
+                v.close()
+            Raster.data = {}
+
+    def _get_required_finite_float_param(self, name: str) -> float:
+        if name not in self.request.params:
+            raise HTTPBadRequest(f"'{name}' should be in the query string parameters")
+        try:
+            result = float(self.request.params[name])
+        except ValueError:
+            raise HTTPBadRequest(  # pylint: disable=raise-missing-from
+                f"'{name}' ({self.request.params[name]}) parameters should be a number"
+            )
+        if not math.isfinite(result):
+            raise HTTPBadRequest(
+                f"'{name}' ({self.request.params[name]}) parameters should be a finite number"
+            )
+        return result
+
+    @view_config(route_name="raster", renderer="fast_json")  # type: ignore
+    def raster(self) -> dict[str, Any]:
+        lon = self._get_required_finite_float_param("lon")
+        lat = self._get_required_finite_float_param("lat")
+
+        if "layers" in self.request.params:
+            rasters = {}
+            layers = self.request.params["layers"].split(",")
+            for layer in layers:
+                if layer in self.rasters:
+                    rasters[layer] = self.rasters[layer]
+                else:
+                    raise HTTPNotFound(f"Layer {layer} not found")
+        else:
+            rasters = self.rasters
+
+        result = {}
+        for ref in list(rasters.keys()):
+            result[ref] = self._get_raster_value(rasters[ref], ref, lon, lat)
+
+        set_common_headers(self.request, "raster", Cache.PUBLIC_NO)
+        return result
+
+    def _get_data(self, layer: dict[str, Any], name: str) -> "fiona.collection.Collection":
+        if name not in self.data:
+            path = layer["file"]
+            if layer.get("type", "shp_index") == "shp_index":
+                # Avoid loading if not needed
+                from fiona.collection import Collection  # pylint: disable=import-outside-toplevel
+
+                self.data[name] = Collection(path)
+            elif layer.get("type") == "gdal":
+                # Avoid loading if not needed
+                import rasterio  # pylint: disable=import-outside-toplevel
+
+                self.data[name] = rasterio.open(path)
+
+        return self.data[name]
+
+    def _get_raster_value(
+        self, layer: dict[str, Any], name: str, lon: float, lat: float
+    ) -> decimal.Decimal | None:
+        data = self._get_data(layer, name)
+        type_ = layer.get("type", "shp_index")
+        if type_ == "shp_index":
+            tiles = list(data.filter(mask={"type": "Point", "coordinates": [lon, lat]}))
+
+            if not tiles:
+                return None
+
+            path = os.path.join(os.path.dirname(layer["file"]), tiles[0]["properties"]["location"])
+
+            # Avoid loading if not needed
+            import rasterio  # pylint: disable=import-outside-toplevel
+
+            with rasterio.open(path) as dataset:
+                result = self._get_value(layer, name, dataset, lon, lat)
+        elif type_ == "gdal":
+            result = self._get_value(layer, name, data, lon, lat)
+        else:
+            raise ValueError("Unsupported type " + type_)
+
+        result_d = None
+        if "round" in layer and result is not None:
+            result_d = self._round(result, layer["round"])
+        elif result is not None:
+            result_d = decimal.Decimal(str(result))
+
+        return result_d
+
+    @staticmethod
+    def _get_value(
+        layer: dict[str, Any], name: str, dataset: DatasetReader, lon: float, lat: float
+    ) -> numpy.float32 | None:
+        index = dataset.index(lon, lat)
+
+        shape = dataset.shape
+        result: numpy.float32 | None
+        if 0 <= index[0] < shape[0] and 0 <= index[1] < shape[1]:
+
+            def get_index(index_: int) -> tuple[int, int]:
+                return index_, index_ + 1
+
+            result = dataset.read(1, window=(get_index(index[0]), get_index(index[1])))[0][0]
+            result = None if result == layer.get("nodata", dataset.nodata) else result
+        else:
+            _LOG.debug(
+                "Out of index for layer: %s (%s), lon/lat: %dx%d, index: %dx%d, shape: %dx%d.",
+                name,
+                layer["file"],
+                lon,
+                lat,
+                index[0],
+                index[1],
+                dataset.shape[0],
+                dataset.shape[1],
+            )
+            result = None
+
+        return result
+
+    @staticmethod
+    def _round(value: numpy.float32, round_to: float) -> decimal.Decimal | None:
+        if value is not None:
+            decimal_value = decimal.Decimal(str(value))
+            try:
+                return decimal_value.quantize(decimal.Decimal(str(round_to)))
+            except decimal.InvalidOperation:
+                _LOG.info("Error on rounding %s: %s", decimal_value, traceback.format_exc())
+                return decimal_value
+        return None

c2cgeoportal_geoportal/views/resourceproxy.py

@@ -0,0 +1,73 @@
+# Copyright (c) 2011-2024, Camptocamp SA
+# All rights reserved.
+
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are met:
+
+# 1. Redistributions of source code must retain the above copyright notice, this
+#    list of conditions and the following disclaimer.
+# 2. Redistributions in binary form must reproduce the above copyright notice,
+#    this list of conditions and the following disclaimer in the documentation
+#    and/or other materials provided with the distribution.
+
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+# DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
+# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+# ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+# SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+# The views and conclusions contained in the software and documentation are those
+# of the authors and should not be interpreted as representing official policies,
+# either expressed or implied, of the FreeBSD Project.
+
+
+import ast
+import logging
+
+import pyramid.request
+import pyramid.response
+from pyramid.httpexceptions import HTTPBadRequest
+from pyramid.view import view_config
+
+from c2cgeoportal_geoportal.lib.common_headers import Cache
+from c2cgeoportal_geoportal.views.proxy import Proxy
+
+_LOG = logging.getLogger(__name__)
+
+
+class ResourceProxy(Proxy):
+    """All the views concerned the resources (it's a kind of proxy)."""
+
+    def __init__(self, request: pyramid.request.Request):
+        Proxy.__init__(self, request)
+        self.request = request
+        self.settings = request.registry.settings.get("resourceproxy", {})
+
+    @view_config(route_name="resourceproxy")  # type: ignore
+    def proxy(self) -> pyramid.response.Response:
+        target = self.request.params.get("target", "")
+        targets = self.settings.get("targets", [])
+        if target in targets:
+            url = targets[target]
+            values = ast.literal_eval(self.request.params.get("values"))
+            url = url % values
+
+            response = self._proxy(url=url)
+
+            cache_control = Cache.PRIVATE_NO
+            content_type = response.headers["Content-Type"]
+
+            response = self._build_response(
+                response, response.content, cache_control, "externalresource", content_type=content_type
+            )
+            for header in response.headers.keys():
+                if header not in self.settings["allowed_headers"]:
+                    response.headers.pop(header)
+            return response
+        _LOG.warning("Target URL not found: %s", target)
+        return HTTPBadRequest("URL not allowed")

c2cgeoportal_geoportal/views/shortener.py

@@ -0,0 +1,152 @@
+# Copyright (c) 2013-2024, Camptocamp SA
+# All rights reserved.
+
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are met:
+
+# 1. Redistributions of source code must retain the above copyright notice, this
+#    list of conditions and the following disclaimer.
+# 2. Redistributions in binary form must reproduce the above copyright notice,
+#    this list of conditions and the following disclaimer in the documentation
+#    and/or other materials provided with the distribution.
+
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+# DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
+# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+# ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+# SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+# The views and conclusions contained in the software and documentation are those
+# of the authors and should not be interpreted as representing official policies,
+# either expressed or implied, of the FreeBSD Project.
+
+
+import logging
+import random
+import string
+from datetime import datetime
+from typing import cast
+from urllib.parse import urlparse
+
+import pyramid.request
+from pyramid.httpexceptions import HTTPBadRequest, HTTPFound, HTTPInternalServerError, HTTPNotFound
+from pyramid.view import view_config
+
+from c2cgeoportal_commons.lib.email_ import send_email_config
+from c2cgeoportal_commons.models import DBSession, static
+from c2cgeoportal_geoportal import is_allowed_url
+from c2cgeoportal_geoportal.lib.common_headers import Cache, set_common_headers
+
+logger = logging.getLogger(__name__)
+
+
+class Shortener:
+    """All the views conserne the shortener."""
+
+    def __init__(self, request: pyramid.request.Request):
+        self.request = request
+        self.settings = request.registry.settings.get("shortener", {})
+        self.short_bases = [self.request.route_url("shortener_get", ref="")]
+        if "base_url" in self.settings:
+            self.short_bases.append(self.settings["base_url"])
+
+    @view_config(route_name="shortener_get")  # type: ignore
+    def get(self) -> HTTPFound:
+        assert DBSession is not None
+
+        ref = self.request.matchdict["ref"]
+        short_urls = DBSession.query(static.Shorturl).filter(static.Shorturl.ref == ref).all()
+
+        if len(short_urls) != 1:
+            raise HTTPNotFound(f"Ref '{ref!s}' not found")
+
+        short_urls[0].nb_hits += 1
+        short_urls[0].last_hit = datetime.now()
+
+        set_common_headers(self.request, "shortener", Cache.PUBLIC_NO)
+        return HTTPFound(location=short_urls[0].url)
+
+    @view_config(route_name="shortener_create", renderer="json")  # type: ignore
+    def create(self) -> dict[str, str]:
+        assert DBSession is not None
+
+        if "url" not in self.request.params:
+            raise HTTPBadRequest("The parameter url is required")
+
+        url = self.request.params["url"]
+
+        # see: https://httpd.apache.org/docs/2.2/mod/core.html#limitrequestline
+        if len(url) > 8190:
+            raise HTTPBadRequest(f"The parameter url is too long ({len(url)} > {8190})")
+
+        allowed_hosts = self.settings.get("allowed_hosts", [])
+        url_hostname, ok = is_allowed_url(self.request, url, allowed_hosts)
+        if not ok:
+            message = (
+                f"Invalid requested host '{url_hostname}', "
+                f"is not the current host '{self.request.host}' "
+                f"or part of allowed hosts: {', '.join(allowed_hosts)}"
+            )
+            logging.debug(message)
+            raise HTTPBadRequest(message)
+
+        shortened = False
+
+        uri_parts = urlparse(url)
+        for base in self.short_bases:
+            base_parts = urlparse(base)
+            if uri_parts.path.startswith(base_parts.path):
+                shortened = True
+                ref = uri_parts.path.split("/")[-1]
+
+        tries = 0
+        while not shortened:
+            ref = "".join(
+                random.choice(string.ascii_letters + string.digits)  # nosec
+                for i in range(self.settings.get("length", 4))
+            )
+            test_url = DBSession.query(static.Shorturl).filter(static.Shorturl.ref == ref).all()
+            if not test_url:
+                break
+            tries += 1
+            if tries > 20:
+                message = "No free ref found, considered to increase the length"
+                logger.error(message)
+                raise HTTPInternalServerError(message)
+
+        user_email = cast(static.User, self.request.user).email if self.request.user is not None else None
+        email = self.request.params.get("email")
+        if not shortened:
+            short_url = static.Shorturl()
+            short_url.url = url
+            short_url.ref = ref
+            short_url.creator_email = user_email
+            short_url.creation = datetime.now()
+            short_url.nb_hits = 0
+
+            DBSession.add(short_url)
+
+        if "base_url" in self.settings:
+            s_url = self.settings["base_url"] + ref
+        else:
+            s_url = self.request.route_url("shortener_get", ref=ref)
+
+        if email is not None:
+            send_email_config(
+                self.request.registry.settings,
+                "shortener",
+                email,
+                full_url=url,
+                short_url=s_url,
+                message=self.request.params.get("message", ""),
+                application_url=self.request.route_url("base"),
+                current_url=self.request.current_route_url(),
+            )
+
+        set_common_headers(self.request, "shortener", Cache.PRIVATE_NO)
+        return {"short_url": s_url}