diff options
author | Maxim Cournoyer <maxim.cournoyer@gmail.com> | 2023-03-31 10:48:54 -0400 |
---|---|---|
committer | Maxim Cournoyer <maxim.cournoyer@gmail.com> | 2023-03-31 10:48:54 -0400 |
commit | 99b25b131355497e263c7687453f36688ec838a1 (patch) | |
tree | 23dd954ce0d3515bc0cee10db0436b7eeb2f3137 /gnu/packages/python-web.scm | |
parent | 3d9a57e128369c225df1cbbc57aab22fd5895120 (diff) | |
parent | 47ea688fd27d0ce0c8ea5481f1f94d0ebc3e37eb (diff) |
Merge branch 'master' into staging
Diffstat (limited to 'gnu/packages/python-web.scm')
-rw-r--r-- | gnu/packages/python-web.scm | 83 |
1 files changed, 82 insertions, 1 deletions
diff --git a/gnu/packages/python-web.scm b/gnu/packages/python-web.scm index d186653544..d84b5efdf9 100644 --- a/gnu/packages/python-web.scm +++ b/gnu/packages/python-web.scm @@ -49,7 +49,7 @@ ;;; Copyright © 2021 Alice Brenon <alice.brenon@ens-lyon.fr> ;;; Copyright © 2022 John Kehayias <john.kehayias@protonmail.com> ;;; Copyright © 2022 Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org> -;;; Copyright © 2022 Felix Gruber <felgru@posteo.net> +;;; Copyright © 2022, 2023 Felix Gruber <felgru@posteo.net> ;;; Copyright © 2022 Peter Polidoro <peter@polidoro.io> ;;; Copyright © 2022 Antero Mejr <antero@mailbox.org> ;;; Copyright © 2022 Luis Henrique Gomes Higino <luishenriquegh2701@gmail.com> @@ -570,6 +570,87 @@ communicate with each other, and positioned as an asynchronous successor to WSGI. This package includes libraries for implementing ASGI servers.") (license license:bsd-3))) +(define-public python-asgi-csrf + (package + (name "python-asgi-csrf") + (version "0.9") + (source (origin + (method git-fetch) ;for tests + (uri (git-reference + (url "https://github.com/simonw/asgi-csrf") + (commit version))) + (file-name (git-file-name name version)) + (sha256 + (base32 + "1j134mjh0ff61rvkm3q67m463j1bhyxc9dwsdany3scnd4vsqqws")))) + (build-system pyproject-build-system) + (arguments + (list #:test-flags + ;; Provide a null config to avoid the extraneous dependency on + ;; python-pytest-coverage. + #~(list "-c" "/dev/null" + ;; Disable two failing tests (see: + ;; https://github.com/simonw/asgi-csrf/issues/24). + "-k" (string-append + "not (test_multipart " + "or test_multipart_failure_wrong_token)")))) + (propagated-inputs (list python-itsdangerous python-multipart)) + (native-inputs (list python-asgi-lifespan + python-httpx + python-pytest + python-pytest-asyncio + python-starlette)) + (home-page "https://github.com/simonw/asgi-csrf") + (synopsis "ASGI middleware for protecting against CSRF attacks") + (description "This Asynchronous Server Gateway Interface (ASGI) +middleware protects against Cross-site request forgery (CSRF) attacks. +It implements the Double Submit Cookie pattern, where a cookie is set +that is then compared to a @code{csrftoken} hidden form field or a +@code{x-csrftoken} HTTP header.") + (license license:asl2.0))) + +(define-public python-asgi-lifespan + (package + (name "python-asgi-lifespan") + (version "1.0.1") + (source (origin + (method git-fetch) ;for tests + (uri (git-reference + (url "https://github.com/florimondmanca/asgi-lifespan") + (commit version))) + (file-name (git-file-name name version)) + (sha256 + (base32 + "10a5ci9ddr8wnjf3wai7xifbbplirhyrgvw4p28q0ha63cvhb2j2")))) + (build-system pyproject-build-system) + (arguments + (list + #:test-flags + '(list "-c" "/dev/null" ;ignore coverage-related options + "-k" + (string-append + ;; XXX: Some tests fail because of a 'lifespan.shutdown.failed' + ;; extra event, perhaps because our version of trio is older. + "not (test_lifespan_manager[asyncio-None-ValueError-None]" + " or test_lifespan_manager[asyncio-ValueError-None-None]" + " or test_lifespan_manager[asyncio-ValueError-ValueError-None]" + " or test_lifespan_manager[trio-None-ValueError-None]" + " or test_lifespan_manager[trio-ValueError-None-None]" + " or test_lifespan_manager[trio-ValueError-ValueError-None])")))) + (native-inputs (list python-pytest + python-pytest-asyncio + python-pytest-trio + python-starlette)) + (propagated-inputs (list python-sniffio)) + (home-page "https://github.com/florimondmanca/asgi-lifespan") + (synopsis "Programmatic startup/shutdown of ASGI apps") + (description "Programmatically send startup/shutdown lifespan events +into Asynchronous Server Gateway Interface (ASGI) applications. When +used in combination with an ASGI-capable HTTP client such as HTTPX, this +allows mocking or testing ASGI applications without having to spin up an +ASGI server.") + (license license:expat))) + (define-public python-css-html-js-minify (package (name "python-css-html-js-minify") |