mirror of
https://github.com/zulip/zulip.git
synced 2025-11-07 15:33:30 +00:00
02ae71f27f
As part of our effort to change the data model away from each user having a single API key, we're eliminating the couple requests that were made from Django to Tornado (as part of a /register or home request) where we used the user's API key grabbed from the database for authentication. Instead, we use the (already existing) internal_notify_view authentication mechanism, which uses the SHARED_SECRET setting for security, for these requests, and just fetch the user object using get_user_profile_by_id directly. Tweaked by Yago to include the new /api/v1/events/internal endpoint in the exempt_patterns list in test_helpers, since it's an endpoint we call through Tornado. Also added a couple missing return type annotations.
35 lines
1.3 KiB
Python
35 lines
1.3 KiB
Python
|
|
import atexit
|
|
|
|
import tornado.web
|
|
from django.conf import settings
|
|
from tornado import ioloop
|
|
from zerver.tornado import autoreload
|
|
|
|
from zerver.lib.queue import get_queue_client
|
|
from zerver.tornado.handlers import AsyncDjangoHandler
|
|
from zerver.tornado.socket import get_sockjs_router
|
|
|
|
def setup_tornado_rabbitmq() -> None: # nocoverage
|
|
# When tornado is shut down, disconnect cleanly from rabbitmq
|
|
if settings.USING_RABBITMQ:
|
|
queue_client = get_queue_client()
|
|
atexit.register(lambda: queue_client.close())
|
|
autoreload.add_reload_hook(lambda: queue_client.close())
|
|
|
|
def create_tornado_application() -> tornado.web.Application:
|
|
urls = (
|
|
r"/notify_tornado",
|
|
r"/json/events",
|
|
r"/api/v1/events",
|
|
r"/api/v1/events/internal",
|
|
)
|
|
|
|
# Application is an instance of Django's standard wsgi handler.
|
|
return tornado.web.Application(([(url, AsyncDjangoHandler) for url in urls] +
|
|
get_sockjs_router().urls),
|
|
debug=settings.DEBUG,
|
|
autoreload=False,
|
|
# Disable Tornado's own request logging, since we have our own
|
|
log_function=lambda x: None)
|