2\c@sdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z y$ddl m Z ddlmZWn1ek rddlm Z ddlmZnXyddlmZWn!ek rddlmZnXddlmZddlmZmZmZmZddlmZddlZdd lm Z dd l!m"Z"dd l#m$Z$dd l%m&Z&m'Z'ddl(Z(dd l)m*Z*ddl+m,Z,ddl-m.Z.m/Z/m0Z0m1Z1ddl2m3Z3ej4dZ5e6a7dZ8dZ9dej:fdYZ;de;fdYZ<de<fdYZ=de<fdYZ>de<ej?fdYZ@dZAejBZBde<ej?fd YZCd!e=fd"YZDd#ej:fd$YZEd%e<fd&YZFd'ej:fd(YZGd)e<fd*YZHd+ZId,eEfd-eDfd.ej?fd/eHfgZJdS(0s.Base Tornado handlers for the notebook server.iN(t responses(tMorsel(turlparse(tTemplateNotFound(twebtgentescapethttputil(tapp_log(t get_sys_info(t Application(tfilefind(t string_typestPY3(tutcnow(tcombine_translations(t is_hiddent url_path_jointurl_is_absolutet url_escape(tcsp_report_uris [^A-Za-z0-9]cCs%tdkr!tjtantS(N(t_sys_info_cachetNonetjsontdumpsR (((s5lib/python2.7/site-packages/notebook/base/handlers.pyt json_sys_info4s cCs!tjrtjjStSdS(N(R t initializedtinstancetlogR(((s5lib/python2.7/site-packages/notebook/base/handlers.pyR:s  tAuthenticatedHandlercBseZdZedZdZdddZdZdZ dZ edZ ed Z ed Z ed Zed Zed ZRS(s,A RequestHandler with an authenticated user.cCs\d|jjdikr*|jddSdjdd|jjdt|jtgS(sThe default Content-Security-Policy header Can be overridden by defining Content-Security-Policy in settings['headers'] sContent-Security-Policytheaderss; sframe-ancestors 'self's report-uri R(tsettingstgettjoinRtbase_urlR(tself((s5lib/python2.7/site-packages/notebook/base/handlers.pytcontent_security_policyCs cCsi}d|d<|j|jjdi|j|d(R#R?R3((s5lib/python2.7/site-packages/notebook/base/handlers.pytclear_login_cookie}s cCs#|jdkrdS|jj|S(Nt anonymous(t login_handlerRtget_user(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pytget_current_userscCsM|jjdkrtS|jdks8t|jd r<tS|jj| S(sAsk my login_handler if I should skip the origin_check For example: in the default LoginHandler, if a request is token-authenticated, origin checking should be skipped. tOPTIONStshould_check_originN(trequesttmethodtTrueRERthasattrtFalseRI(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pytskip_check_origins "cCs6|jdks"t|jd r&tS|jj|S(s'Have I been authenticated with a token?tis_token_authenticatedN(RERRMRNRP(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyttoken_authenticateds"cCs4tjddj|jj}|jjd|S(Nt-s username-{}RB(t non_alphanumtsubtformatRJthostRR (R#tdefault_cookie_name((s5lib/python2.7/site-packages/notebook/base/handlers.pyRBscCs|j}|o|dk S(sIs a user currently logged in?RD(RG(R#tuser((s5lib/python2.7/site-packages/notebook/base/handlers.pyt logged_ins cCs|jjddS(s6Return the login handler for this application, if any.tlogin_handler_classN(RR R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyREscCs|jjddS(s4Return the login token for this application, if any.ttokenN(RR R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyR[scCs,|jdkrtSt|jj|jS(sMay a user proceed to log in? This returns True if login capability is available, irrespective of whether the user is already logged in or not. N(RERRNtbooltget_login_availableR(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pytlogin_availablesN(t__name__t __module__t__doc__tpropertyR$R.RR>RCRGRORQRBRYRER[R^(((s5lib/python2.7/site-packages/notebook/base/handlers.pyR@s   tIPythonHandlercBseZdZedZedZedZedZedZedZ edZ edZ ed Z ed Z ed Zed Zed ZedZedZedZedZedZedZedZdZdZdZddZdZdZdZdZdZ dZ!ed Z"d!Z#d"Z$RS(#s{IPython-specific extensions to authenticated handling Mostly property shortcuts to IPython-specific settings. cCs|jjdtS(sWether to user bundle in template. (*.min files) Mainly use for development and avoid file recompilation tignore_minified_js(RR RN(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRdscCs|jjddS(Ntconfig(RR R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRescCstS(s@use the IPython log by default, falling back on tornado's logger(R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRscCs|jjdiS(s2User-supplied values to supply to jinja templates.tjinja_template_vars(RR (R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRfscCs|jjddS(s8The version hash to use for cache hints for static filest version_hashR1(RR (R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRgscCs<|jjdd}| s(t|r,|St|j|S(Nt mathjax_urlR1(RR RRR"(R#turl((s5lib/python2.7/site-packages/notebook/base/handlers.pyRhscCs|jjddS(Ntmathjax_configsTeX-AMS-MML_HTMLorMML-full,Safe(RR (R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRjscCs|jjddS(NR"R/(RR (R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyR"scCs|jjddS(Nt default_urlR1(RR (R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRkscCs|jjddS(Nt websocket_urlR1(RR (R#((s5lib/python2.7/site-packages/notebook/base/handlers.pytws_urlscCs5|jjd|jjdd|jjddS(NsUsing contents: %stcontents_js_sourcesservices/contents(RR*RR (R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRns cCs |jdS(Ntkernel_manager(R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRo scCs |jdS(Ntcontents_manager(R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRpscCs |jdS(Ntsession_manager(R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRqscCs |jdS(Ntterminal_manager(R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRrscCs |jdS(Ntkernel_spec_manager(R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRsscCs |jdS(Ntconfig_manager(R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRtscCs|jjddS(s"Normal Access-Control-Allow-Origint allow_originR1(RR (R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRu'scCs|jjddS(s*Regular expression version of allow_origintallow_origin_patN(RR R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRv,scCs|jjdtS(s/Whether to set Access-Control-Allow-Credentialstallow_credentials(RR RN(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRw1scCstt|j|jr2|jd|jn|jru|j}|r|jj|r|jd|qnI|jrd|j j dikr|jd|j j j ddn|j r|jddndS(sAdd CORS headers, if definedsAccess-Control-Allow-OriginRtOriginR1s Access-Control-Allow-CredentialsttrueN(tsuperRcR.RuR(Rvt get_origintmatchRQRR RJRRw(R#torigin((s5lib/python2.7/site-packages/notebook/base/handlers.pyR.6s      cCs,t|}|jddjd|dS(spSet Content-Disposition: attachment header As a method to ensure handling of filename encoding sContent-Dispositions#attachment; filename*=utf-8''{utf8}tutf8N(RR(RU(R#tfilenametescaped_filename((s5lib/python2.7/site-packages/notebook/base/handlers.pytset_attachment_headerLs   cCsFd|jjkr*|jjjd}n|jjjdd}|S(NRxsSec-Websocket-Origin(RJRR R(R#R}((s5lib/python2.7/site-packages/notebook/base/handlers.pyR{ZsR1cCs|jdks|jrtS|jjjd}|jjjd}|dksa|dkretS|j}t|j }||krtS|jr|j|k}n*|j rt |j j |}nt }|s|jjd|jj||n|S(sCheck Origin for cross-site API requests, including websockets Copied from WebSocket with changes: - allow unspecified host/origin (e.g. scripts) - allow token-authenticated requests t*tHostRxs?Blocking Cross Origin API request for %s. Origin: %s, Host: %sN(RuRORLRJRR RtlowerRtnetlocRvR\R|RNRtwarningR3(R#torigin_to_satisfy_tornadoRVR}t origin_hosttallow((s5lib/python2.7/site-packages/notebook/base/handlers.pyt check_origings&     cCs |jjjd}|jjjd}|sD|jjdtS|s^|jjdtSt|}|j}||krtSdj |j |j}|j r|j |k}n*|j rt |j j|}nt}|s|jjd|jj||n|S(s^Check Referer for cross-site requests. Disables requests to certain endpoints with external or missing Referer. If set, allow_origin settings are applied to the Referer to whitelist specific cross-origin sites. Used on GET for api endpoints and /files/ to block cross-site inclusion (XSSI). RtReferersBlocking request with no hosts Blocking request with no referers{}://{}s<Blocking Cross Origin request for %s. Referer: %s, Host: %s(RJRR RRRNRRRLRUtschemeRuRvR\R|R3(R#RVtreferert referer_urlt referer_hostR}R((s5lib/python2.7/site-packages/notebook/base/handlers.pyt check_referers,       cCs|js|jjdtr"dSytt|jSWntjk r}|j j ddhkr|j s|j j jd}|rdj |}nd}tjd|qqnXdS( s2Bypass xsrf cookie checks when token-authenticatedtdisable_check_xsrfNtGETtHEADRs&Blocking Cross Origin request from {}.s$Blocking request from unknown origini(RQRR RNRzRctcheck_xsrf_cookieRt HTTPErrorRJRKRRRU(R#R-Rtmsg((s5lib/python2.7/site-packages/notebook/base/handlers.pyRs cCs|jjdtrtStjd|jjjd}|j drh|j drh|dd!}nt s|j dd}nyt j|}Wn/tk r||jjd d gk}n X|j}|s|jjd ||jjn|S( sCheck the host header if remote access disallowed. Returns True if the request should continue, False otherwise. tallow_remote_accesss^(.*?)(:\d+)?$it[t]iR~treplacetlocal_hostnamest localhostsBlocking request with non-local 'Host' %s (%s). If the notebook should be accessible at that name, set NotebookApp.allow_remote_access to disable the check.(RR RNRLtreR|RJRVtgroupt startswithtendswithR tdecodet ipaddresst ip_addresst ValueErrort is_loopbackRR(R#RVtaddrR((s5lib/python2.7/site-packages/notebook/base/handlers.pyt check_hosts"! "  cCs1|jstjdntt|jS(Ni(RRRRzRctprepare(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRs cCs|jdj|S(s1Return the jinja template object for a given namet jinja2_env(Rt get_template(R#R<((s5lib/python2.7/site-packages/notebook/base/handlers.pyRscKs,|j|j|j|}|j|S(N(R&ttemplate_namespaceRtrender(R#R<tnsttemplate((s5lib/python2.7/site-packages/notebook/base/handlers.pytrender_templatesc%Cstd|jd|jd|jd|jd|jjdd|jdt|j d|j d t d |j d |j d |jd |jd|j d|jjddtjt|jjjdd|jS(NR"RkRmRYtallow_password_changeR^ttoken_availablet static_urltsys_infoRnRgRdtxsrf_form_htmlR[t xsrf_tokenR~tnbjs_translationssAccept-LanguageR1(tdictR"RkRmRYRR R^R\R[RRRnRgRdRRRRRRRJRRf(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyR s&             cCs|jjsdS|jjjjd}ytj|}WnLtk r|jj d||jj ddt t j ddnX|S(s,Return the body of the request as JSON data.uutf-8s Bad JSON: %rsCouldn't parse JSONtexc_infoiuInvalid JSON in body of requestN(RJtbodyRtstripRRtloadsR)RR*terrorRLRR(R#Rtmodel((s5lib/python2.7/site-packages/notebook/base/handlers.pyt get_json_body s  c Ks |jd}d}tj|d}d}|r|d}y|j|j}Wntk rdnXt|dd}|r|}qntd|d|d |d |}|jd d y|jd ||} Wn#t k r|jd|} nX|j | dS(srender custom error pagesRR1sUnknown HTTP Errors (unknown)itreasont status_codetstatus_messagetmessaget exceptions Content-Types text/htmls%s.htmls error.htmlN( R Rt log_messagetargsR)tgetattrRR(RRtwrite( R#RtkwargsRRRRRRthtml((s5lib/python2.7/site-packages/notebook/base/handlers.pyt write_error.s0     (%R_R`RaRbRdReRRfRgRhRjR"RkRmRnRoRpRqRrRsRtRuRvRwR.RR{RRRRRRRRRR(((s5lib/python2.7/site-packages/notebook/base/handlers.pyRcsD     , +  $   t APIHandlercBsbeZdZdZdZdZdZedZe Z dZ dZ dZ RS( sBase class for API handlerscCs1|jstjdntt|jS(Ni(RRRRzRR(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRVs cKs|jddtj|d}i|d6}|jd}|r|d}t|tr|jpi||d<|j|dssAccess-Control-Allow-OriginRx( RR R(RJRtsplittanyR^RuRv(R#RRtrequested_headers((s5lib/python2.7/site-packages/notebook/base/handlers.pytoptionss   !      (R_R`RaRRRGRRbR$RLRRRR(((s5lib/python2.7/site-packages/notebook/base/handlers.pyRSs       t Template404cBseZdZdZRS(sRender our 404 templatecCstjddS(Ni(RR(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRs(R_R`RaR(((s5lib/python2.7/site-packages/notebook/base/handlers.pyRstAuthenticatedFileHandlercBseeZdZedZejdZejdZdZ dZ dZ dZ RS(s5static files should only be accessible when logged incCstt|jdS(Ns; sandbox allow-scripts(RzRR$(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyR$scCs |jtt|j|S(N(RRzRthead(R#R3((s5lib/python2.7/site-packages/notebook/base/handlers.pyRs cCsq|jtjj|ddks8|jdtr^|jddd}|j|ntj j ||S(Nis.ipynbtdownloadR/i( RtosR3tsplitextt get_argumentRNtrsplitRRtStaticFileHandlerR (R#R3R<((s5lib/python2.7/site-packages/notebook/base/handlers.pyR s  .cCs|jjd}d|kr9|jdd\}}n|}|jdrRdStj|d}|dkrudStt|jSdS(NR/is.ipynbsapplication/x-ipynb+jsonis text/plainstext/plain; charset=UTF-8( t absolute_pathRRRt mimetypest guess_typeRzRtget_content_type(R#R3t_R<tcur_mime((s5lib/python2.7/site-packages/notebook/base/handlers.pyRs  cCs<tt|jd|jjkr8|jddndS(Ntvs Cache-Controlsno-cache(RzRt set_headersRJt argumentsR:(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyRscCsdS(N(R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyt compute_etagscCsott|j||}tjj|}t||rk|jj rk|j j dt j dn|S(sValidate and return the absolute path. Requires tornado 3.1 Adding to tornado's own handling, forbids the serving of hidden files. s_Refusing to serve hidden file, via 404 Error, use flag 'ContentsManager.allow_hidden' to enablei( RzRtvalidate_absolute_pathRR3tabspathRRpt allow_hiddenRtinfoRR(R#trootRtabs_pathtabs_root((s5lib/python2.7/site-packages/notebook/base/handlers.pyRs ( R_R`RaRbR$Rt authenticatedRR RRRR(((s5lib/python2.7/site-packages/notebook/base/handlers.pyRs   cs8tjdtddtjfd}|S(sDecorate methods with this to return GitHub style JSON errors. This should be used on any JSON API on any handler method that can raise HTTPErrors. This will grab the latest HTTPError exception using sys.exc_info and then: 1. Set the HTTP status code based on the HTTPError 2. Create and return a JSON body with a message field describing the error in a human readable form. sJ@json_errors is deprecated in notebook 5.2.0. Subclass APIHandler instead.t stacklevelics(tjtj||_|||S(N(ttypest MethodTypeRR(R#RR(RK(s5lib/python2.7/site-packages/notebook/base/handlers.pytwrapper s(twarningstwarntDeprecationWarningt functoolstwraps(RKR((RKs5lib/python2.7/site-packages/notebook/base/handlers.pyt json_errorss tFileFindHandlercBsMeZdZiZdZdddZdZedZ dZ RS(sBsubclass of StaticFileHandler for serving files from a search pathcs[ttjdjjksDtfdjDrWjddndS(NRc3s$|]}jjj|VqdS(N(RJR3R(RR3(R#(s5lib/python2.7/site-packages/notebook/base/handlers.pys $ss Cache-Controlsno-cache(RzRRRJRRtno_cache_pathsR((R#((R#s5lib/python2.7/site-packages/notebook/base/handlers.pyR scCsP|p g|_t|tr*|g}ntd|D|_||_dS(Ncss4|]*}tjjtjj|tjVqdS(N(RR3Rt expandusertsep(Rtp((s5lib/python2.7/site-packages/notebook/base/handlers.pys .s(RRR ttupleRtdefault_filename(R#R3R R((s5lib/python2.7/site-packages/notebook/base/handlers.pyt initialize's  cCsdS(N(R(R#((s5lib/python2.7/site-packages/notebook/base/handlers.pyR2sc Cs|j~||jkr$|j|Sytjjt||}Wntk rWdSX||j|(?:(?:/[^/]+)+|/?))s.*/tapis/(robots\.txt|favicon\.ico)s/metrics(KRaR6RRRRRRtsysRRRt http.clientRt http.cookiesRt ImportErrorthttplibtCookiet urllib.parseRtjinja2RttornadoRRRRt tornado.logRR1tnotebook._sysinfoR ttraitlets.configR tipython_genutils.pathR tipython_genutils.py3compatR R Rt notebook._tzRt notebook.i18nRtnotebook.utilsRRRRtnotebook.services.securityRtcompileRSRRRRtRequestHandlerRRcRRRRRRRRRRR)R0t path_regextdefault_handlers(((s5lib/python2.7/site-packages/notebook/base/handlers.pytsr             "  "  b@  9 $