in pysteve/www/wsgi/rest_voter.py [0:0]
def application (environ, start_response):
pathinfo = environ['PATH_INFO'] if 'PATH_INFO' in environ else None
whoami = environ['REMOTE_USER'] if 'REMOTE_USER' in environ else None
karma = 0
if whoami and config.has_option("karma", whoami):
karma = int(config.get("karma", whoami))
form = cgi.FieldStorage(
fp=environ['wsgi.input'],
environ=environ,
keep_blank_values=True
)
# Figure out what to do and where
if pathinfo:
l = pathinfo.split("/")
if l[0] == "":
l.pop(0)
action = l[0]
electionID = l[1] if len(l) > 1 else None
issueID = l[2] if len(l) > 2 else None
voterID = form.getvalue('uid')
if not voterID and karma < 3 and (action != "request" and action != "peek"):
return response.wsgirespond(start_response, 403, {'message': "Voter UID missing"})
elif electionID and re.search(r"([^A-Za-z0-9-.])", electionID):
return response.wsgirespond(start_response, 400, {'message': "Invalid election ID specified"})
elif issueID and re.search(r"([^A-Za-z0-9-.])", issueID):
return response.wsgirespond(start_response, 400, {'message': "Invalid issue ID specified"})
elif action == "view":
# View a list of issues for an election
if electionID and not issueID:
js = []
if election.exists(electionID):
try:
basedata = election.getBasedata(electionID)
if not basedata:
raise Exception("Could not load base data")
if karma < 3 and not voter.get(electionID, basedata, voterID):
raise Exception("Invalid voter ID presented")
if 'closed' in basedata and basedata['closed'] == True:
raise Exception("This election has closed")
for issueID in election.listIssues(electionID):
try:
entry = election.getIssue(electionID, issueID)
entry['hasVoted'] = voter.hasVoted(electionID, issueID, voterID)
js.append(entry)
except Exception as err:
return response.wsgirespond(start_response, 500, {'message': 'Could not load issues: %s' % err})
except Exception as err:
return response.wsgirespond(start_response, 500, {'message': 'Could not load base data: %s' % err})
if 'hash' in basedata:
del basedata['hash']
return response.wsgirespond(start_response, 200, {'base_data': basedata, 'issues': js, 'baseurl': config.get("general", "rooturl")})
else:
return response.wsgirespond(start_response, 404, {'message': 'No such election'})
# View a speficic issue
elif electionID and issueID:
js = []
issuedata = election.getIssue(electionID, issueID)
if issuedata:
try:
basedata = election.getBasedata(electionID)
if karma < 3 and not voter.get(electionID, basedata, voterID):
raise Exception("Invalid voter ID presented")
if 'closed' in basedata and basedata['closed'] == True:
raise Exception("This election has closed")
entry = election.getIssue(electionID, issueID)
return response.wsgirespond(start_response, 200, {'issue': entry})
except Exception as err:
return response.wsgirespond(start_response, 500, {'message': "Could not load issue: %s" % err})
else:
return response.wsgirespond(start_response, 404, {'message': 'No such issue'})
else:
return response.wsgirespond(start_response, 404, {'message': 'No election ID supplied'})
elif action == "vote" and electionID and issueID and voterID:
try:
basedata = election.getBasedata(electionID)
issuedata = election.getIssue(electionID, issueID)
if basedata and issuedata:
if 'closed' in basedata and basedata['closed'] == True:
raise Exception("This election has closed")
email = voter.get(electionID, basedata, voterID)
if not email:
return response.wsgirespond(start_response, 403, {'message': 'Could not save vote: Invalid voter ID presented'})
else:
vote = form.getvalue('vote')
if not vote:
return response.wsgirespond(start_response, 500, {'message': 'Please specify a vote'})
else:
invalid = election.invalidate(issuedata, vote)
if invalid:
return response.wsgirespond(start_response, 500, {'message': invalid})
else:
votehash = election.vote(electionID, issueID, voterID, vote)
voteuid = hashlib.sha224(voterID).hexdigest()
# Catch proxy-emails
m = re.match(r"^(.+@.*?[a-zA-Z])-.+$", email)
if m:
email = m.group(1)
voter.email(email, "Vote registered: %s (%s)" % (issueID, issuedata['title']), "This is a receipt that your vote was registered for issue #%s:\n\nElection: %s (%s)\nIssue: %s (%s)\nVote cryptohash: %s\nVote UID: %s" % (issueID, basedata['title'], electionID, issuedata['title'], issueID, votehash, voteuid))
return response.wsgirespond(start_response, 200, {'message': 'Vote saved!'})
else:
return response.wsgirespond(start_response, 404, {'message': 'Could not save vote: No such election or issue'})
except Exception as err:
return response.wsgirespond(start_response, 500, {'message': 'Could not save vote: %s' % err})
elif action == "request" and election:
email = form.getvalue('email')
if not email or len(email) > 300 or not re.match(r"([^@]+@[^@]+)", email):
return response.wsgirespond(start_response, 400, {'message': 'Could not request voter ID: Invalid email address specified'})
else:
try:
basedata = election.getBasedata(electionID)
if basedata:
if 'closed' in basedata and basedata['closed'] == True:
raise Exception("This election has closed")
if 'open' in basedata and basedata['open'] == "true":
uid, xhash = voter.add(electionID, basedata, email)
voter.email(email, "Your voter link for %s" % basedata['title'], "Your personal vote link is: %s/election.html?%s/%s\nDo not share this link with anyone." % (config.get("general", "rooturl"), electionID, uid))
return response.wsgirespond(start_response, 200, {'message': "Voter ID sent via email"})
else:
return response.wsgirespond(start_response, 403, {'message': "Could not request voter ID: This eleciton is closed for the public"})
else:
return response.wsgirespond(start_response, 404, {'message': 'Could not request voter ID: No such election'})
except Exception as err:
return response.wsgirespond(start_response, 500, {'message': 'Could not create voter ID: %s' % err})
elif action == "peek" and election:
try:
basedata = election.getBasedata(electionID, hideHash=True)
if basedata:
if 'closed' in basedata and basedata['closed'] == True:
raise Exception("This election has closed")
if 'open' in basedata and basedata['open'] == "true":
return response.wsgirespond(start_response, 200, { 'base_data': basedata } )
else:
return response.wsgirespond(start_response, 403, {'message': 'This election is not open to the public'})
else:
return response.wsgirespond(start_response, 404, {'message': 'Could not request data: No such election'})
except Exception as err:
return response.wsgirespond(start_response, 500, {'message': 'Could not load election data: %s' % err})
else:
return response.wsgirespond(start_response, 400, {'message': 'Invalid action supplied'})
else:
return response.wsgirespond(start_response, 500, {'message': 'No path info supplied, aborting'})