jeans/core
jeans/core
1
0
Fork 0
mirror of https://github.com/home-assistant/core.git synced 2025-07-27 07:07:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Allow non-authenticated calls to supervisor logs during onboarding (#40617)

Browse Source
This commit is contained in:
Joakim Sørensen 2020-09-28 10:10:10 +02:00 committed by GitHub
parent 373a1cabe6
commit 953f6bad46
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
homeassistant/components/hassio/http.py
View File

@ -34,6 +34,10 @@ NO_TIMEOUT = re.compile(
r")$" r")$"
) )
NO_AUTH_ONBOARDING = re.compile(
r"^(?:" r"|supervisor/logs" r"|snapshots/[^/]+/.+" r")$"
)
NO_AUTH = re.compile( NO_AUTH = re.compile(
r"^(?:" r"|app/.*" r"|addons/[^/]+/logo" r"|addons/[^/]+/icon" r")$" r"^(?:" r"|app/.*" r"|addons/[^/]+/logo" r"|addons/[^/]+/icon" r")$"
) )
@ -149,7 +153,7 @@ def _get_timeout(path: str) -> int:
def _need_auth(hass, path: str) -> bool: def _need_auth(hass, path: str) -> bool:
"""Return if a path need authentication.""" """Return if a path need authentication."""
if not async_is_onboarded(hass) and path.startswith("snapshots"): if not async_is_onboarded(hass) and NO_AUTH_ONBOARDING.match(path):
return False return False
if NO_AUTH.match(path): if NO_AUTH.match(path):
return False return False

2
tests/components/hassio/test_http.py
View File

@ -155,6 +155,8 @@ def test_need_auth(hass):
"""Test if the requested path needs authentication.""" """Test if the requested path needs authentication."""
assert not _need_auth(hass, "addons/test/logo") assert not _need_auth(hass, "addons/test/logo")
assert _need_auth(hass, "snapshots/new/upload") assert _need_auth(hass, "snapshots/new/upload")
assert _need_auth(hass, "supervisor/logs")
hass.data["onboarding"] = False hass.data["onboarding"] = False
assert not _need_auth(hass, "snapshots/new/upload") assert not _need_auth(hass, "snapshots/new/upload")
assert not _need_auth(hass, "supervisor/logs")