django-pfx 1.7.3.dev10__tar.gz → 1.7.3.dev12__tar.gz

{django_pfx-1.7.3.dev10 → django_pfx-1.7.3.dev12}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-pfx
-Version: 1.7.3.dev10
+Version: 1.7.3.dev12
 Summary: Django PFX is a toolkit designed to streamline the development of RESTful APIs using the Django framework.
 Author: Hervé Martinet
 Author-email: herve.martinet@gmail.com

{django_pfx-1.7.3.dev10 → django_pfx-1.7.3.dev12}/django_pfx.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-pfx
-Version: 1.7.3.dev10
+Version: 1.7.3.dev12
 Summary: Django PFX is a toolkit designed to streamline the development of RESTful APIs using the Django framework.
 Author: Hervé Martinet
 Author-email: herve.martinet@gmail.com

{django_pfx-1.7.3.dev10 → django_pfx-1.7.3.dev12}/django_pfx.egg-info/SOURCES.txt

@@ -88,6 +88,7 @@ pfx/pfxcore/middleware/__init__.py
 pfx/pfxcore/middleware/authentication.py
 pfx/pfxcore/middleware/locale.py
 pfx/pfxcore/middleware/profiling.py
+pfx/pfxcore/middleware/request_too_big_middleware.py
 pfx/pfxcore/migrations/0001_initial.py
 pfx/pfxcore/migrations/0002_pfxpermissionsuser.py
 pfx/pfxcore/migrations/0003_delete_pfxpermissionsuser.py

{django_pfx-1.7.3.dev10 → django_pfx-1.7.3.dev12}/pfx/pfxcore/middleware/__init__.py

@@ -4,3 +4,4 @@ from .authentication import (
 )
 from .locale import LocaleMiddleware
 from .profiling import ProfilingDatabaseRouter, ProfilingMiddleware
+from .request_too_big_middleware import RequestTooBigMiddleware

django_pfx-1.7.3.dev12/pfx/pfxcore/middleware/request_too_big_middleware.py

@@ -0,0 +1,25 @@
+from django.conf import settings
+from django.core.exceptions import RequestDataTooBig
+from django.http import HttpResponse
+
+
+class RequestTooBigMiddleware:
+    """Dev middleware to simulate 413 from HTTP reverse proxy.
+    Don't use it in production,
+    set DATA_UPLOAD_MAX_MEMORY_SIZE > reverse proxy limit.
+    """
+    def __init__(self, get_response):
+        self.get_response = get_response
+
+    def __call__(self, request):
+        try:
+            # force body reading to catch RequestDataTooBig early
+            _ = request.body
+        except RequestDataTooBig:
+            response = HttpResponse("Request Entity Too Large", status=413)
+            # In dev, UI and API are on different ports,
+            # so we need CORS headers.
+            response["Access-Control-Allow-Origin"] = settings.PFX_BASE_URL
+            response["Access-Control-Allow-Credentials"] = "true"
+            return response
+        return self.get_response(request)