galaxy-web-framework 26.0.1.dev0__tar.gz → 26.0.2__tar.gz

{galaxy_web_framework-26.0.1.dev0 → galaxy_web_framework-26.0.2}/HISTORY.rst

@@ -3,11 +3,39 @@ History
 
 .. to_doc
 
------------
-26.0.1.dev0
------------
+-------------------
+26.0.2 (2026-10-25)
+-------------------
+
+
+=========
+Bug fixes
+=========
+
+* Return 400 for request bodies that webob cannot parse by `@rmz-oz <https://github.com/rmz-oz>`_ in `#23839 <https://github.com/galaxyproject/galaxy/pull/23839>`_
+
+-------------------
+25.1.3 (2026-10-25)
+-------------------
+
 
+=========
+Bug fixes
+=========
+
+* Fix legacy_expose_api error callable returning str instead of bytes by `@mvdbeek <https://github.com/mvdbeek>`_ in `#22106 <https://github.com/galaxyproject/galaxy/pull/22106>`_
+* Return 400 for request bodies that webob cannot parse by `@rmz-oz <https://github.com/rmz-oz>`_ in `#23839 <https://github.com/galaxyproject/galaxy/pull/23839>`_
+
+-------------------
+26.0.1 (2026-06-04)
+-------------------
+
+
+=========
+Bug fixes
+=========
 
+* Add debug middleware and regression tests for blocked main event loop by `@mvdbeek <https://github.com/mvdbeek>`_ in `#22207 <https://github.com/galaxyproject/galaxy/pull/22207>`_
 
 -------------------
 26.0.0 (2026-04-08)

{galaxy_web_framework-26.0.1.dev0/galaxy_web_framework.egg-info → galaxy_web_framework-26.0.2}/PKG-INFO

@@ -1,11 +1,26 @@
 Metadata-Version: 2.4
 Name: galaxy-web-framework
-Version: 26.0.1.dev0
+Version: 26.0.2
 Summary: Galaxy web framework
 Home-page: https://github.com/galaxyproject/galaxy
 Author: Galaxy Project and Community
 Author-email: galaxy-committers@lists.galaxyproject.org
 License: MIT
+Keywords: Galaxy
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Natural Language :: English
+Classifier: Operating System :: POSIX
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Software Development
+Classifier: Topic :: Software Development :: Code Generators
+Classifier: Topic :: Software Development :: Testing
 Requires-Python: >=3.10
 Description-Content-Type: text/x-rst
 License-File: LICENSE
@@ -18,6 +33,7 @@ Requires-Dist: pydantic>=2.7.4
 Requires-Dist: requests
 Requires-Dist: Routes
 Requires-Dist: SQLAlchemy!=2.0.41,<2.1,>=2.0.37
+Requires-Dist: starlette
 Requires-Dist: WebOb
 Provides-Extra: test
 Requires-Dist: pytest; extra == "test"
@@ -42,11 +58,39 @@ History
 
 .. to_doc
 
------------
-26.0.1.dev0
------------
+-------------------
+26.0.2 (2026-10-25)
+-------------------
+
+
+=========
+Bug fixes
+=========
+
+* Return 400 for request bodies that webob cannot parse by `@rmz-oz <https://github.com/rmz-oz>`_ in `#23839 <https://github.com/galaxyproject/galaxy/pull/23839>`_
+
+-------------------
+25.1.3 (2026-10-25)
+-------------------
+
 
+=========
+Bug fixes
+=========
+
+* Fix legacy_expose_api error callable returning str instead of bytes by `@mvdbeek <https://github.com/mvdbeek>`_ in `#22106 <https://github.com/galaxyproject/galaxy/pull/22106>`_
+* Return 400 for request bodies that webob cannot parse by `@rmz-oz <https://github.com/rmz-oz>`_ in `#23839 <https://github.com/galaxyproject/galaxy/pull/23839>`_
+
+-------------------
+26.0.1 (2026-06-04)
+-------------------
+
+
+=========
+Bug fixes
+=========
 
+* Add debug middleware and regression tests for blocked main event loop by `@mvdbeek <https://github.com/mvdbeek>`_ in `#22207 <https://github.com/galaxyproject/galaxy/pull/22207>`_
 
 -------------------
 26.0.0 (2026-04-08)

{galaxy_web_framework-26.0.1.dev0 → galaxy_web_framework-26.0.2}/galaxy/web/framework/base.py

@@ -234,6 +234,12 @@ class WebApplication:
             # https://github.com/bbangert/routes/blob/c4d5a5fb693ce8dc7cf5dbc591861acfc49d5c23/routes/__init__.py#L73
             environ["SERVER_PORT"] = str(server_port)
         rc.environ = environ
+        # Parse the request parameters up front so that a malformed body
+        # (e.g. multipart with an empty boundary) is a 400 rather than a 500.
+        try:
+            Request(environ).params.mixed()
+        except ValueError as e:
+            raise webob.exc.HTTPBadRequest(f"Malformed request body: {e}")
         # Setup the transaction
         trans = self.transaction_factory(environ)
         trans.request_id = request_id

galaxy_web_framework-26.0.2/galaxy/web/framework/middleware/aiocop_integration.py

@@ -0,0 +1,176 @@
+"""
+aiocop integration — detect blocking I/O in async handlers.
+
+`aiocop <https://github.com/Feverup/aiocop>`_ uses ``sys.audit`` hooks to catch
+specific blocking syscalls (``socket.connect``, ``open``, ``subprocess.Popen``,
+etc.) from within async tasks and report the exact call site.
+
+This module installs aiocop and adds an ASGI middleware that surfaces any
+violations recorded during a request via an ``X-Aiocop-Violations`` response
+header so test harnesses can fail requests that block the event loop.
+
+Activation is opt-in via the ``GALAXY_TEST_AIOCOP`` environment variable —
+aiocop is a test-only dependency and is not imported in normal production
+Galaxy servers.
+"""
+
+import asyncio
+import logging
+import os
+import threading
+from contextvars import ContextVar
+from typing import (
+    Any,
+    Optional,
+)
+
+from starlette.types import (
+    ASGIApp,
+    Message,
+    Receive,
+    Scope,
+    Send,
+)
+
+log = logging.getLogger(__name__)
+
+ENV_VAR = "GALAXY_TEST_AIOCOP"
+
+# High-severity threshold used by aiocop itself (THRESHOLD_HIGH == 50).
+# Anything at or above is considered a test-failing violation.
+HIGH_SEVERITY_SCORE = 50
+
+_request_violations: ContextVar[Optional[list[dict[str, Any]]]] = ContextVar("aiocop_request_violations", default=None)
+
+_process_initialized = False
+
+
+def aiocop_enabled() -> bool:
+    return os.environ.get(ENV_VAR, "").lower() in ("1", "true", "yes")
+
+
+def _on_slow_task(event: Any) -> None:
+    if not event.blocking_events:
+        return
+    violations = _request_violations.get()
+    if violations is not None:
+        violations.extend(event.blocking_events)
+    log.error(
+        "aiocop detected blocking I/O on event loop (severity=%s, elapsed=%.1fms): %s",
+        event.severity_level,
+        event.elapsed_ms,
+        "; ".join(f"{e['event']} at {e['entry_point']}" for e in event.blocking_events),
+    )
+
+
+def install_aiocop(slow_task_threshold_ms: int = 50, trace_depth: int = 20) -> None:
+    """Activate aiocop monitoring on the currently running event loop.
+
+    Must be called from the event-loop thread (e.g. a FastAPI ``startup``
+    event).  aiocop normally binds its audit hook to
+    :func:`threading.main_thread`, but Galaxy's test harness runs uvicorn's
+    event loop in a child thread — so we rebind the hook to the current
+    thread explicitly.
+
+    The Galaxy integration test driver spins up a fresh event loop on a new
+    thread for every test module (see ``galaxy_test.driver.driver_util``).
+    aiocop has process-global state — ``sys.addaudithook`` cannot be undone
+    and ``patch_audit_functions`` wraps stdlib call sites in place — so we
+    do that setup exactly once. The per-loop pieces (loop patching, main
+    thread binding, slow-task callback) are re-armed on every call so the
+    Nth Galaxy instance is actually monitored.
+    """
+    global _process_initialized
+
+    import aiocop
+    from aiocop.core import (
+        blocking_io as _bio,
+        slow_tasks as _slow_tasks,
+    )
+
+    if not _process_initialized:
+        aiocop.patch_audit_functions()
+        aiocop.start_blocking_io_detection(trace_depth=trace_depth)
+        _process_initialized = True
+
+    # aiocop binds audit events to the process main thread; the Galaxy test
+    # server runs its event loop in a non-main thread, so pin aiocop to the
+    # thread that actually hosts the loop.
+    _bio._main_thread_id = threading.get_ident()
+
+    # Re-arm detect_slow_tasks so the on-activate hook is fresh and the
+    # slow-task callback isn't a stale closure from a prior Galaxy instance.
+    # detect_slow_tasks() short-circuits on its module-global guard, so reset
+    # it and clear the callback list before calling again.
+    _slow_tasks._detect_slow_tasks_configured = False
+    aiocop.clear_slow_task_callbacks()
+    aiocop.detect_slow_tasks(threshold_ms=slow_task_threshold_ms, on_slow_task=_on_slow_task)
+    aiocop.activate()
+    log.info("aiocop blocking-I/O detection activated (threshold=%dms)", slow_task_threshold_ms)
+
+
+class AiocopMiddleware:
+    """Attach per-request aiocop violations to an ``X-Aiocop-Violations`` header.
+
+    The header is only emitted when at least one blocking event was captured.
+    Format:
+
+        ``count=<n>;severity=<max>;first=<event>@<entry_point>``
+
+    ``severity`` is the maximum severity weight among the captured events
+    (see ``aiocop.core.blocking_io.BLOCKING_EVENTS_DICT``).  A value of
+    50 or higher indicates a high-severity block that should fail tests.
+
+    aiocop itself is installed on the first ``lifespan`` startup event so
+    it binds to the event loop actually serving traffic (Galaxy's test
+    harness runs uvicorn in a child thread — see
+    :func:`galaxy_test.driver.driver_util.launch_server`).
+    """
+
+    def __init__(self, app: ASGIApp):
+        self.app = app
+        self._installed = False
+
+    async def __call__(self, scope: Scope, receive: Receive, send: Send) -> None:
+        if scope["type"] == "lifespan":
+            # Wrap lifespan startup to install aiocop as soon as the loop
+            # is running, before any request is served.
+            async def send_wrapper(message: Message) -> None:
+                if message.get("type") == "lifespan.startup.complete" and not self._installed:
+                    install_aiocop()
+                    self._installed = True
+                await send(message)
+
+            return await self.app(scope, receive, send_wrapper)
+
+        if scope["type"] != "http":
+            return await self.app(scope, receive, send)
+
+        violations: list[dict[str, Any]] = []
+        token = _request_violations.set(violations)
+        response_started = False
+
+        async def send_with_header(message: Message) -> None:
+            nonlocal response_started
+            if message["type"] == "http.response.start" and not response_started:
+                response_started = True
+                # aiocop's slow-task callback fires when the task step that
+                # did the blocking I/O ends; yield once to let any pending
+                # callback populate `violations` before we emit headers.
+                await asyncio.sleep(0)
+                if violations:
+                    max_severity = max(int(v.get("severity") or 0) for v in violations)
+                    first = violations[0]
+                    summary = (
+                        f"count={len(violations)};severity={max_severity};"
+                        f"first={first['event']}@{first['entry_point']}"
+                    )
+                    headers = list(message.get("headers", []))
+                    headers.append((b"x-aiocop-violations", summary.encode("latin-1")))
+                    message = {**message, "headers": headers}
+            await send(message)
+
+        try:
+            await self.app(scope, receive, send_with_header)
+        finally:
+            _request_violations.reset(token)

{galaxy_web_framework-26.0.1.dev0 → galaxy_web_framework-26.0.2/galaxy_web_framework.egg-info}/PKG-INFO

@@ -1,11 +1,26 @@
 Metadata-Version: 2.4
 Name: galaxy-web-framework
-Version: 26.0.1.dev0
+Version: 26.0.2
 Summary: Galaxy web framework
 Home-page: https://github.com/galaxyproject/galaxy
 Author: Galaxy Project and Community
 Author-email: galaxy-committers@lists.galaxyproject.org
 License: MIT
+Keywords: Galaxy
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Natural Language :: English
+Classifier: Operating System :: POSIX
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Software Development
+Classifier: Topic :: Software Development :: Code Generators
+Classifier: Topic :: Software Development :: Testing
 Requires-Python: >=3.10
 Description-Content-Type: text/x-rst
 License-File: LICENSE
@@ -18,6 +33,7 @@ Requires-Dist: pydantic>=2.7.4
 Requires-Dist: requests
 Requires-Dist: Routes
 Requires-Dist: SQLAlchemy!=2.0.41,<2.1,>=2.0.37
+Requires-Dist: starlette
 Requires-Dist: WebOb
 Provides-Extra: test
 Requires-Dist: pytest; extra == "test"
@@ -42,11 +58,39 @@ History
 
 .. to_doc
 
------------
-26.0.1.dev0
------------
+-------------------
+26.0.2 (2026-10-25)
+-------------------
+
+
+=========
+Bug fixes
+=========
+
+* Return 400 for request bodies that webob cannot parse by `@rmz-oz <https://github.com/rmz-oz>`_ in `#23839 <https://github.com/galaxyproject/galaxy/pull/23839>`_
+
+-------------------
+25.1.3 (2026-10-25)
+-------------------
+
 
+=========
+Bug fixes
+=========
+
+* Fix legacy_expose_api error callable returning str instead of bytes by `@mvdbeek <https://github.com/mvdbeek>`_ in `#22106 <https://github.com/galaxyproject/galaxy/pull/22106>`_
+* Return 400 for request bodies that webob cannot parse by `@rmz-oz <https://github.com/rmz-oz>`_ in `#23839 <https://github.com/galaxyproject/galaxy/pull/23839>`_
+
+-------------------
+26.0.1 (2026-06-04)
+-------------------
+
+
+=========
+Bug fixes
+=========
 
+* Add debug middleware and regression tests for blocked main event loop by `@mvdbeek <https://github.com/mvdbeek>`_ in `#22207 <https://github.com/galaxyproject/galaxy/pull/22207>`_
 
 -------------------
 26.0.0 (2026-04-08)

{galaxy_web_framework-26.0.1.dev0 → galaxy_web_framework-26.0.2}/galaxy_web_framework.egg-info/SOURCES.txt

@@ -17,6 +17,7 @@ galaxy/web/framework/helpers/__init__.py
 galaxy/web/framework/helpers/grids.py
 galaxy/web/framework/helpers/tags.py
 galaxy/web/framework/middleware/__init__.py
+galaxy/web/framework/middleware/aiocop_integration.py
 galaxy/web/framework/middleware/error.py
 galaxy/web/framework/middleware/profile.py
 galaxy/web/framework/middleware/remoteuser.py

{galaxy_web_framework-26.0.1.dev0 → galaxy_web_framework-26.0.2}/galaxy_web_framework.egg-info/requires.txt

@@ -7,6 +7,7 @@ pydantic>=2.7.4
 requests
 Routes
 SQLAlchemy!=2.0.41,<2.1,>=2.0.37
+starlette
 WebOb
 
 [test]

galaxy_web_framework-26.0.2/pyproject.toml

@@ -0,0 +1,33 @@
+[build-system]
+build-backend = "setuptools.build_meta"
+requires = ["setuptools"]
+
+[project]
+dynamic = [
+    "authors",
+    "dependencies",
+    "description",
+    "license",
+    "optional-dependencies",
+    "readme",
+    "requires-python",
+    "version",
+]
+name = "galaxy-web-framework"
+classifiers = [
+    "Development Status :: 5 - Production/Stable",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "Natural Language :: English",
+    "Operating System :: POSIX",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
+    "Topic :: Software Development",
+    "Topic :: Software Development :: Code Generators",
+    "Topic :: Software Development :: Testing",
+]
+keywords = ["Galaxy"]

{galaxy_web_framework-26.0.1.dev0 → galaxy_web_framework-26.0.2}/setup.cfg

@@ -1,24 +1,7 @@
 [metadata]
 author = Galaxy Project and Community
 author_email = galaxy-committers@lists.galaxyproject.org
-classifiers = 
-	Development Status :: 5 - Production/Stable
-	Environment :: Console
-	Intended Audience :: Developers
-	Natural Language :: English
-	Operating System :: POSIX
-	Programming Language :: Python :: 3
-	Programming Language :: Python :: 3.10
-	Programming Language :: Python :: 3.11
-	Programming Language :: Python :: 3.12
-	Programming Language :: Python :: 3.13
-	Programming Language :: Python :: 3.14
-	Topic :: Software Development
-	Topic :: Software Development :: Code Generators
-	Topic :: Software Development :: Testing
 description = Galaxy web framework
-keywords = 
-	Galaxy
 license = MIT
 license_files = 
 	LICENSE
@@ -26,7 +9,7 @@ long_description = file: README.rst, HISTORY.rst
 long_description_content_type = text/x-rst
 name = galaxy-web-framework
 url = https://github.com/galaxyproject/galaxy
-version = 26.0.1.dev0
+version = 26.0.2
 
 [options]
 include_package_data = True
@@ -40,6 +23,7 @@ install_requires =
 	requests
 	Routes
 	SQLAlchemy>=2.0.37,<2.1,!=2.0.41
+	starlette
 	WebOb
 packages = find:
 python_requires = >=3.10

galaxy_web_framework-26.0.1.dev0/pyproject.toml

@@ -1,16 +0,0 @@
-[build-system]
-build-backend = "setuptools.build_meta"
-requires = ["setuptools"]
-
-[project]
-dynamic = [
-    "authors",
-    "dependencies",
-    "description",
-    "license",
-    "optional-dependencies",
-    "readme",
-    "requires-python",
-    "version",
-]
-name = "galaxy-web-framework"