Python EVE: - 阻止POST方法并为Python EVE中的某些端点启用PUT方法

时间:2015-06-27 03:55:29

标签: python web-services eve

我最初写了webservice以允许两者同时获得' GET'和所有端点上允许的POST方法。现在我们的Web服务工作流程发生了一些变化,我们希望阻止某些端点的POST端点,并为其启用PUT,某些端点仍然会启用POST

我将通过添加settings.py

的代码段来解释更多内容
__author__ = 'sappal'

# pulling DBSchema from DBTableSchema
from DBSchema.DBTableSchema import DBTableSchema
from Configs import Configs

dbtableSchema = DBTableSchema()


# Let's just use the local mongod instance. Edit as needed.
# Please note that MONGO_HOST and MONGO_PORT could very well be left
# out as they already default to a bare bones local 'mongod' instance.

## LOCALHOST ENTRIES
MONGO_HOST = Configs.MONGO_DB_HOST
MONGO_PORT = Configs.MONGO_DB_PORT
MONGO_USERNAME = Configs.MONGO_DB_USER_NAME
MONGO_PASSWORD = Configs.MONGO_DB_PASSWORD
MONGO_DBNAME = Configs.MONGO_DB

# Enable reads (GET), inserts (POST) and DELETE for resources/collections
# (if you omit this line, the API will default to ['GET'] and provide
# read-only access to the endpoint).
RESOURCE_METHODS = ['GET', 'PATCH', 'POST', 'DELETE']

# Enable reads (GET), edits (PATCH), replacements (PUT) and deletes of
# individual items  (defaults to read-only item access).
ITEM_METHODS = ['GET', 'PATCH', 'PUT', 'DELETE', 'POST']

# Used for implementing user-resource restricted access.
# Returns the documents which are associated with particular user

AUTH_FIELD = 'userid'

people = {
    'item_title': 'person',
    'cache_control': 'max-age=10,must-revalidate',
    'cache_expires': 10,
    'resource_methods': ['GET', 'POST'],
    'schema': dbtableSchema.schema_people,
    'public_methods': ['POST']
}

org = {
    'item_title': 'org',
    'cache_control': 'max-age=10,must-revalidate',
    'cache_expires': 10,
    'resource_methods': ['GET', 'PATCH'],
    'schema': dbtableSchema.schema_people_org
}

puburl = {
    'item_title': 'puburl',
    'cache_control': 'max-age=10,must-revalidate',
    'cache_expires': 10,
    'resource_methods': ['GET', 'PATCH'],
    'schema': dbtableSchema.schema_people_pub_url
}

address = {
    'item_title': 'address',
    'cache_control': 'max-age=10,must-revalidate',
    'cache_expires': 10,
    'resource_methods': ['GET', 'PATCH'],
    'schema': dbtableSchema.schema_people_address
}

contactnumber = {
    'item_title': 'contactnumber',
    'cache_control': 'max-age=10,must-revalidate',
    'cache_expires': 10,
    'resource_methods': ['GET', 'PATCH'],
    'schema': dbtableSchema.schema_people_contact_number
}

template = {
    'item_title': 'template',
    'cache_control': 'max-age=10,must-revalidate',
    'cache_expires': 10,
    'resource_methods': ['GET', 'POST'],
    'schema': dbtableSchema.schema_template
}

usersharedcontacts = {
    'item_title': 'usersharedcontacts',
    'cache_control': 'max-age=10,must-revalidate',
    'cache_expires': 10,
    'resource_methods': ['GET', 'PATCH'],
    'schema': dbtableSchema.schema_people_with_user_shared_contacts
}

cardholder = {
    'item_title': 'cardholder',
    'cache_control': 'max-age=10,must-revalidate',
    'cache_expires': 10,
    'resource_methods': ['GET', 'PATCH'],
    'schema': dbtableSchema.schema_people_card_holder
}

DOMAIN = {
   'people': people,
   'org': org,
   'puburl': puburl,
   'address': address,
   'contactnumber': contactnumber,
   'template': template,
   'usersharedcontacts': usersharedcontacts,
   'cardholder': cardholder
}

我想为POSTpeople端点启用template方法,因为您可以看到我为上述端点进行了此配置'resource_methods': ['GET', 'POST']。< / p>

我还想为剩余的端点禁用POST方法,因此我为剩余的端点'resource_methods': ['GET', 'PATCH'],配置了以下内容。

我还配置了RESOURCE_METHODS = ['GET', 'PATCH', 'POST', 'DELETE']

但是当我尝试运行应用程序时,我在以下类型的控制台上收到错误

eve.exceptions.ConfigException: Unallowed [usersharedcontacts] resource    method(s): PATCH. Supported: GET, POST, DELETE

Process finished with exit code 1

1 个答案:

答案 0 :(得分:3)

PATCH是一种文档(项目)方法,而不是资源方法,这就是您获得不允许的异常的原因。试试:

'resource_methods': ['GET'],  # read-only resource endpoint
'item_methods': ['PATCH']     # still allow edits at the document endpoint

有关详细信息,请参阅文档中的CRUD Operations表。