renderers.py 39 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075
  1. """
  2. Renderers are used to serialize a response into specific media types.
  3. They give us a generic way of being able to handle various media types
  4. on the response, such as JSON encoded data or HTML output.
  5. REST framework also provides an HTML renderer that renders the browsable API.
  6. """
  7. import base64
  8. from collections import OrderedDict
  9. from urllib import parse
  10. from django import forms
  11. from django.conf import settings
  12. from django.core.exceptions import ImproperlyConfigured
  13. from django.core.paginator import Page
  14. from django.template import engines, loader
  15. from django.urls import NoReverseMatch
  16. from django.utils.html import mark_safe
  17. from rest_framework import VERSION, exceptions, serializers, status
  18. from rest_framework.compat import (
  19. INDENT_SEPARATORS, LONG_SEPARATORS, SHORT_SEPARATORS, coreapi, coreschema,
  20. parse_header_parameters, pygments_css, yaml
  21. )
  22. from rest_framework.exceptions import ParseError
  23. from rest_framework.request import is_form_media_type, override_method
  24. from rest_framework.settings import api_settings
  25. from rest_framework.utils import encoders, json
  26. from rest_framework.utils.breadcrumbs import get_breadcrumbs
  27. from rest_framework.utils.field_mapping import ClassLookupDict
  28. def zero_as_none(value):
  29. return None if value == 0 else value
  30. class BaseRenderer:
  31. """
  32. All renderers should extend this class, setting the `media_type`
  33. and `format` attributes, and override the `.render()` method.
  34. """
  35. media_type = None
  36. format = None
  37. charset = 'utf-8'
  38. render_style = 'text'
  39. def render(self, data, accepted_media_type=None, renderer_context=None):
  40. raise NotImplementedError('Renderer class requires .render() to be implemented')
  41. class JSONRenderer(BaseRenderer):
  42. """
  43. Renderer which serializes to JSON.
  44. """
  45. media_type = 'application/json'
  46. format = 'json'
  47. encoder_class = encoders.JSONEncoder
  48. ensure_ascii = not api_settings.UNICODE_JSON
  49. compact = api_settings.COMPACT_JSON
  50. strict = api_settings.STRICT_JSON
  51. # We don't set a charset because JSON is a binary encoding,
  52. # that can be encoded as utf-8, utf-16 or utf-32.
  53. # See: https://www.ietf.org/rfc/rfc4627.txt
  54. # Also: http://lucumr.pocoo.org/2013/7/19/application-mimetypes-and-encodings/
  55. charset = None
  56. def get_indent(self, accepted_media_type, renderer_context):
  57. if accepted_media_type:
  58. # If the media type looks like 'application/json; indent=4',
  59. # then pretty print the result.
  60. # Note that we coerce `indent=0` into `indent=None`.
  61. base_media_type, params = parse_header_parameters(accepted_media_type)
  62. try:
  63. return zero_as_none(max(min(int(params['indent']), 8), 0))
  64. except (KeyError, ValueError, TypeError):
  65. pass
  66. # If 'indent' is provided in the context, then pretty print the result.
  67. # E.g. If we're being called by the BrowsableAPIRenderer.
  68. return renderer_context.get('indent', None)
  69. def render(self, data, accepted_media_type=None, renderer_context=None):
  70. """
  71. Render `data` into JSON, returning a bytestring.
  72. """
  73. if data is None:
  74. return b''
  75. renderer_context = renderer_context or {}
  76. indent = self.get_indent(accepted_media_type, renderer_context)
  77. if indent is None:
  78. separators = SHORT_SEPARATORS if self.compact else LONG_SEPARATORS
  79. else:
  80. separators = INDENT_SEPARATORS
  81. ret = json.dumps(
  82. data, cls=self.encoder_class,
  83. indent=indent, ensure_ascii=self.ensure_ascii,
  84. allow_nan=not self.strict, separators=separators
  85. )
  86. # We always fully escape \u2028 and \u2029 to ensure we output JSON
  87. # that is a strict javascript subset.
  88. # See: https://gist.github.com/damncabbage/623b879af56f850a6ddc
  89. ret = ret.replace('\u2028', '\\u2028').replace('\u2029', '\\u2029')
  90. return ret.encode()
  91. class TemplateHTMLRenderer(BaseRenderer):
  92. """
  93. An HTML renderer for use with templates.
  94. The data supplied to the Response object should be a dictionary that will
  95. be used as context for the template.
  96. The template name is determined by (in order of preference):
  97. 1. An explicit `.template_name` attribute set on the response.
  98. 2. An explicit `.template_name` attribute set on this class.
  99. 3. The return result of calling `view.get_template_names()`.
  100. For example:
  101. data = {'users': User.objects.all()}
  102. return Response(data, template_name='users.html')
  103. For pre-rendered HTML, see StaticHTMLRenderer.
  104. """
  105. media_type = 'text/html'
  106. format = 'html'
  107. template_name = None
  108. exception_template_names = [
  109. '%(status_code)s.html',
  110. 'api_exception.html'
  111. ]
  112. charset = 'utf-8'
  113. def render(self, data, accepted_media_type=None, renderer_context=None):
  114. """
  115. Renders data to HTML, using Django's standard template rendering.
  116. The template name is determined by (in order of preference):
  117. 1. An explicit .template_name set on the response.
  118. 2. An explicit .template_name set on this class.
  119. 3. The return result of calling view.get_template_names().
  120. """
  121. renderer_context = renderer_context or {}
  122. view = renderer_context['view']
  123. request = renderer_context['request']
  124. response = renderer_context['response']
  125. if response.exception:
  126. template = self.get_exception_template(response)
  127. else:
  128. template_names = self.get_template_names(response, view)
  129. template = self.resolve_template(template_names)
  130. if hasattr(self, 'resolve_context'):
  131. # Fallback for older versions.
  132. context = self.resolve_context(data, request, response)
  133. else:
  134. context = self.get_template_context(data, renderer_context)
  135. return template.render(context, request=request)
  136. def resolve_template(self, template_names):
  137. return loader.select_template(template_names)
  138. def get_template_context(self, data, renderer_context):
  139. response = renderer_context['response']
  140. if response.exception:
  141. data['status_code'] = response.status_code
  142. return data
  143. def get_template_names(self, response, view):
  144. if response.template_name:
  145. return [response.template_name]
  146. elif self.template_name:
  147. return [self.template_name]
  148. elif hasattr(view, 'get_template_names'):
  149. return view.get_template_names()
  150. elif hasattr(view, 'template_name'):
  151. return [view.template_name]
  152. raise ImproperlyConfigured(
  153. 'Returned a template response with no `template_name` attribute set on either the view or response'
  154. )
  155. def get_exception_template(self, response):
  156. template_names = [name % {'status_code': response.status_code}
  157. for name in self.exception_template_names]
  158. try:
  159. # Try to find an appropriate error template
  160. return self.resolve_template(template_names)
  161. except Exception:
  162. # Fall back to using eg '404 Not Found'
  163. body = '%d %s' % (response.status_code, response.status_text.title())
  164. template = engines['django'].from_string(body)
  165. return template
  166. # Note, subclass TemplateHTMLRenderer simply for the exception behavior
  167. class StaticHTMLRenderer(TemplateHTMLRenderer):
  168. """
  169. An HTML renderer class that simply returns pre-rendered HTML.
  170. The data supplied to the Response object should be a string representing
  171. the pre-rendered HTML content.
  172. For example:
  173. data = '<html><body>example</body></html>'
  174. return Response(data)
  175. For template rendered HTML, see TemplateHTMLRenderer.
  176. """
  177. media_type = 'text/html'
  178. format = 'html'
  179. charset = 'utf-8'
  180. def render(self, data, accepted_media_type=None, renderer_context=None):
  181. renderer_context = renderer_context or {}
  182. response = renderer_context.get('response')
  183. if response and response.exception:
  184. request = renderer_context['request']
  185. template = self.get_exception_template(response)
  186. if hasattr(self, 'resolve_context'):
  187. context = self.resolve_context(data, request, response)
  188. else:
  189. context = self.get_template_context(data, renderer_context)
  190. return template.render(context, request=request)
  191. return data
  192. class HTMLFormRenderer(BaseRenderer):
  193. """
  194. Renderers serializer data into an HTML form.
  195. If the serializer was instantiated without an object then this will
  196. return an HTML form not bound to any object,
  197. otherwise it will return an HTML form with the appropriate initial data
  198. populated from the object.
  199. Note that rendering of field and form errors is not currently supported.
  200. """
  201. media_type = 'text/html'
  202. format = 'form'
  203. charset = 'utf-8'
  204. template_pack = 'rest_framework/vertical/'
  205. base_template = 'form.html'
  206. default_style = ClassLookupDict({
  207. serializers.Field: {
  208. 'base_template': 'input.html',
  209. 'input_type': 'text'
  210. },
  211. serializers.EmailField: {
  212. 'base_template': 'input.html',
  213. 'input_type': 'email'
  214. },
  215. serializers.URLField: {
  216. 'base_template': 'input.html',
  217. 'input_type': 'url'
  218. },
  219. serializers.IntegerField: {
  220. 'base_template': 'input.html',
  221. 'input_type': 'number'
  222. },
  223. serializers.FloatField: {
  224. 'base_template': 'input.html',
  225. 'input_type': 'number'
  226. },
  227. serializers.DateTimeField: {
  228. 'base_template': 'input.html',
  229. 'input_type': 'datetime-local'
  230. },
  231. serializers.DateField: {
  232. 'base_template': 'input.html',
  233. 'input_type': 'date'
  234. },
  235. serializers.TimeField: {
  236. 'base_template': 'input.html',
  237. 'input_type': 'time'
  238. },
  239. serializers.FileField: {
  240. 'base_template': 'input.html',
  241. 'input_type': 'file'
  242. },
  243. serializers.BooleanField: {
  244. 'base_template': 'checkbox.html'
  245. },
  246. serializers.ChoiceField: {
  247. 'base_template': 'select.html', # Also valid: 'radio.html'
  248. },
  249. serializers.MultipleChoiceField: {
  250. 'base_template': 'select_multiple.html', # Also valid: 'checkbox_multiple.html'
  251. },
  252. serializers.RelatedField: {
  253. 'base_template': 'select.html', # Also valid: 'radio.html'
  254. },
  255. serializers.ManyRelatedField: {
  256. 'base_template': 'select_multiple.html', # Also valid: 'checkbox_multiple.html'
  257. },
  258. serializers.Serializer: {
  259. 'base_template': 'fieldset.html'
  260. },
  261. serializers.ListSerializer: {
  262. 'base_template': 'list_fieldset.html'
  263. },
  264. serializers.ListField: {
  265. 'base_template': 'list_field.html'
  266. },
  267. serializers.DictField: {
  268. 'base_template': 'dict_field.html'
  269. },
  270. serializers.FilePathField: {
  271. 'base_template': 'select.html',
  272. },
  273. serializers.JSONField: {
  274. 'base_template': 'textarea.html',
  275. },
  276. })
  277. def render_field(self, field, parent_style):
  278. if isinstance(field._field, serializers.HiddenField):
  279. return ''
  280. style = self.default_style[field].copy()
  281. style.update(field.style)
  282. if 'template_pack' not in style:
  283. style['template_pack'] = parent_style.get('template_pack', self.template_pack)
  284. style['renderer'] = self
  285. # Get a clone of the field with text-only value representation.
  286. field = field.as_form_field()
  287. if style.get('input_type') == 'datetime-local' and isinstance(field.value, str):
  288. field.value = field.value.rstrip('Z')
  289. if 'template' in style:
  290. template_name = style['template']
  291. else:
  292. template_name = style['template_pack'].strip('/') + '/' + style['base_template']
  293. template = loader.get_template(template_name)
  294. context = {'field': field, 'style': style}
  295. return template.render(context)
  296. def render(self, data, accepted_media_type=None, renderer_context=None):
  297. """
  298. Render serializer data and return an HTML form, as a string.
  299. """
  300. renderer_context = renderer_context or {}
  301. form = data.serializer
  302. style = renderer_context.get('style', {})
  303. if 'template_pack' not in style:
  304. style['template_pack'] = self.template_pack
  305. style['renderer'] = self
  306. template_pack = style['template_pack'].strip('/')
  307. template_name = template_pack + '/' + self.base_template
  308. template = loader.get_template(template_name)
  309. context = {
  310. 'form': form,
  311. 'style': style
  312. }
  313. return template.render(context)
  314. class BrowsableAPIRenderer(BaseRenderer):
  315. """
  316. HTML renderer used to self-document the API.
  317. """
  318. media_type = 'text/html'
  319. format = 'api'
  320. template = 'rest_framework/api.html'
  321. filter_template = 'rest_framework/filters/base.html'
  322. code_style = 'emacs'
  323. charset = 'utf-8'
  324. form_renderer_class = HTMLFormRenderer
  325. def get_default_renderer(self, view):
  326. """
  327. Return an instance of the first valid renderer.
  328. (Don't use another documenting renderer.)
  329. """
  330. renderers = [renderer for renderer in view.renderer_classes
  331. if not issubclass(renderer, BrowsableAPIRenderer)]
  332. non_template_renderers = [renderer for renderer in renderers
  333. if not hasattr(renderer, 'get_template_names')]
  334. if not renderers:
  335. return None
  336. elif non_template_renderers:
  337. return non_template_renderers[0]()
  338. return renderers[0]()
  339. def get_content(self, renderer, data,
  340. accepted_media_type, renderer_context):
  341. """
  342. Get the content as if it had been rendered by the default
  343. non-documenting renderer.
  344. """
  345. if not renderer:
  346. return '[No renderers were found]'
  347. renderer_context['indent'] = 4
  348. content = renderer.render(data, accepted_media_type, renderer_context)
  349. render_style = getattr(renderer, 'render_style', 'text')
  350. assert render_style in ['text', 'binary'], 'Expected .render_style ' \
  351. '"text" or "binary", but got "%s"' % render_style
  352. if render_style == 'binary':
  353. return '[%d bytes of binary content]' % len(content)
  354. return content.decode('utf-8') if isinstance(content, bytes) else content
  355. def show_form_for_method(self, view, method, request, obj):
  356. """
  357. Returns True if a form should be shown for this method.
  358. """
  359. if method not in view.allowed_methods:
  360. return # Not a valid method
  361. try:
  362. view.check_permissions(request)
  363. if obj is not None:
  364. view.check_object_permissions(request, obj)
  365. except exceptions.APIException:
  366. return False # Doesn't have permissions
  367. return True
  368. def _get_serializer(self, serializer_class, view_instance, request, *args, **kwargs):
  369. kwargs['context'] = {
  370. 'request': request,
  371. 'format': self.format,
  372. 'view': view_instance
  373. }
  374. return serializer_class(*args, **kwargs)
  375. def get_rendered_html_form(self, data, view, method, request):
  376. """
  377. Return a string representing a rendered HTML form, possibly bound to
  378. either the input or output data.
  379. In the absence of the View having an associated form then return None.
  380. """
  381. # See issue #2089 for refactoring this.
  382. serializer = getattr(data, 'serializer', None)
  383. if serializer and not getattr(serializer, 'many', False):
  384. instance = getattr(serializer, 'instance', None)
  385. if isinstance(instance, Page):
  386. instance = None
  387. else:
  388. instance = None
  389. # If this is valid serializer data, and the form is for the same
  390. # HTTP method as was used in the request then use the existing
  391. # serializer instance, rather than dynamically creating a new one.
  392. if request.method == method and serializer is not None:
  393. try:
  394. kwargs = {'data': request.data}
  395. except ParseError:
  396. kwargs = {}
  397. existing_serializer = serializer
  398. else:
  399. kwargs = {}
  400. existing_serializer = None
  401. with override_method(view, request, method) as request:
  402. if not self.show_form_for_method(view, method, request, instance):
  403. return
  404. if method in ('DELETE', 'OPTIONS'):
  405. return True # Don't actually need to return a form
  406. has_serializer = getattr(view, 'get_serializer', None)
  407. has_serializer_class = getattr(view, 'serializer_class', None)
  408. if (
  409. (not has_serializer and not has_serializer_class) or
  410. not any(is_form_media_type(parser.media_type) for parser in view.parser_classes)
  411. ):
  412. return
  413. if existing_serializer is not None:
  414. try:
  415. return self.render_form_for_serializer(existing_serializer)
  416. except TypeError:
  417. pass
  418. if has_serializer:
  419. if method in ('PUT', 'PATCH'):
  420. serializer = view.get_serializer(instance=instance, **kwargs)
  421. else:
  422. serializer = view.get_serializer(**kwargs)
  423. else:
  424. # at this point we must have a serializer_class
  425. if method in ('PUT', 'PATCH'):
  426. serializer = self._get_serializer(view.serializer_class, view,
  427. request, instance=instance, **kwargs)
  428. else:
  429. serializer = self._get_serializer(view.serializer_class, view,
  430. request, **kwargs)
  431. return self.render_form_for_serializer(serializer)
  432. def render_form_for_serializer(self, serializer):
  433. if hasattr(serializer, 'initial_data'):
  434. serializer.is_valid()
  435. form_renderer = self.form_renderer_class()
  436. return form_renderer.render(
  437. serializer.data,
  438. self.accepted_media_type,
  439. {'style': {'template_pack': 'rest_framework/horizontal'}}
  440. )
  441. def get_raw_data_form(self, data, view, method, request):
  442. """
  443. Returns a form that allows for arbitrary content types to be tunneled
  444. via standard HTML forms.
  445. (Which are typically application/x-www-form-urlencoded)
  446. """
  447. # See issue #2089 for refactoring this.
  448. serializer = getattr(data, 'serializer', None)
  449. if serializer and not getattr(serializer, 'many', False):
  450. instance = getattr(serializer, 'instance', None)
  451. if isinstance(instance, Page):
  452. instance = None
  453. else:
  454. instance = None
  455. with override_method(view, request, method) as request:
  456. # Check permissions
  457. if not self.show_form_for_method(view, method, request, instance):
  458. return
  459. # If possible, serialize the initial content for the generic form
  460. default_parser = view.parser_classes[0]
  461. renderer_class = getattr(default_parser, 'renderer_class', None)
  462. if hasattr(view, 'get_serializer') and renderer_class:
  463. # View has a serializer defined and parser class has a
  464. # corresponding renderer that can be used to render the data.
  465. if method in ('PUT', 'PATCH'):
  466. serializer = view.get_serializer(instance=instance)
  467. else:
  468. serializer = view.get_serializer()
  469. # Render the raw data content
  470. renderer = renderer_class()
  471. accepted = self.accepted_media_type
  472. context = self.renderer_context.copy()
  473. context['indent'] = 4
  474. # strip HiddenField from output
  475. data = serializer.data.copy()
  476. for name, field in serializer.fields.items():
  477. if isinstance(field, serializers.HiddenField):
  478. data.pop(name, None)
  479. content = renderer.render(data, accepted, context)
  480. # Renders returns bytes, but CharField expects a str.
  481. content = content.decode()
  482. else:
  483. content = None
  484. # Generate a generic form that includes a content type field,
  485. # and a content field.
  486. media_types = [parser.media_type for parser in view.parser_classes]
  487. choices = [(media_type, media_type) for media_type in media_types]
  488. initial = media_types[0]
  489. class GenericContentForm(forms.Form):
  490. _content_type = forms.ChoiceField(
  491. label='Media type',
  492. choices=choices,
  493. initial=initial,
  494. widget=forms.Select(attrs={'data-override': 'content-type'})
  495. )
  496. _content = forms.CharField(
  497. label='Content',
  498. widget=forms.Textarea(attrs={'data-override': 'content'}),
  499. initial=content,
  500. required=False
  501. )
  502. return GenericContentForm()
  503. def get_name(self, view):
  504. return view.get_view_name()
  505. def get_description(self, view, status_code):
  506. if status_code in (status.HTTP_401_UNAUTHORIZED, status.HTTP_403_FORBIDDEN):
  507. return ''
  508. return view.get_view_description(html=True)
  509. def get_breadcrumbs(self, request):
  510. return get_breadcrumbs(request.path, request)
  511. def get_extra_actions(self, view, status_code):
  512. if (status_code in (status.HTTP_401_UNAUTHORIZED, status.HTTP_403_FORBIDDEN)):
  513. return None
  514. elif not hasattr(view, 'get_extra_action_url_map'):
  515. return None
  516. return view.get_extra_action_url_map()
  517. def get_filter_form(self, data, view, request):
  518. if not hasattr(view, 'get_queryset') or not hasattr(view, 'filter_backends'):
  519. return
  520. # Infer if this is a list view or not.
  521. paginator = getattr(view, 'paginator', None)
  522. if isinstance(data, list):
  523. pass
  524. elif paginator is not None and data is not None:
  525. try:
  526. paginator.get_results(data)
  527. except (TypeError, KeyError):
  528. return
  529. elif not isinstance(data, list):
  530. return
  531. queryset = view.get_queryset()
  532. elements = []
  533. for backend in view.filter_backends:
  534. if hasattr(backend, 'to_html'):
  535. html = backend().to_html(request, queryset, view)
  536. if html:
  537. elements.append(html)
  538. if not elements:
  539. return
  540. template = loader.get_template(self.filter_template)
  541. context = {'elements': elements}
  542. return template.render(context)
  543. def get_context(self, data, accepted_media_type, renderer_context):
  544. """
  545. Returns the context used to render.
  546. """
  547. view = renderer_context['view']
  548. request = renderer_context['request']
  549. response = renderer_context['response']
  550. renderer = self.get_default_renderer(view)
  551. raw_data_post_form = self.get_raw_data_form(data, view, 'POST', request)
  552. raw_data_put_form = self.get_raw_data_form(data, view, 'PUT', request)
  553. raw_data_patch_form = self.get_raw_data_form(data, view, 'PATCH', request)
  554. raw_data_put_or_patch_form = raw_data_put_form or raw_data_patch_form
  555. response_headers = OrderedDict(sorted(response.items()))
  556. renderer_content_type = ''
  557. if renderer:
  558. renderer_content_type = '%s' % renderer.media_type
  559. if renderer.charset:
  560. renderer_content_type += ' ;%s' % renderer.charset
  561. response_headers['Content-Type'] = renderer_content_type
  562. if getattr(view, 'paginator', None) and view.paginator.display_page_controls:
  563. paginator = view.paginator
  564. else:
  565. paginator = None
  566. csrf_cookie_name = settings.CSRF_COOKIE_NAME
  567. csrf_header_name = settings.CSRF_HEADER_NAME
  568. if csrf_header_name.startswith('HTTP_'):
  569. csrf_header_name = csrf_header_name[5:]
  570. csrf_header_name = csrf_header_name.replace('_', '-')
  571. return {
  572. 'content': self.get_content(renderer, data, accepted_media_type, renderer_context),
  573. 'code_style': pygments_css(self.code_style),
  574. 'view': view,
  575. 'request': request,
  576. 'response': response,
  577. 'user': request.user,
  578. 'description': self.get_description(view, response.status_code),
  579. 'name': self.get_name(view),
  580. 'version': VERSION,
  581. 'paginator': paginator,
  582. 'breadcrumblist': self.get_breadcrumbs(request),
  583. 'allowed_methods': view.allowed_methods,
  584. 'available_formats': [renderer_cls.format for renderer_cls in view.renderer_classes],
  585. 'response_headers': response_headers,
  586. 'put_form': self.get_rendered_html_form(data, view, 'PUT', request),
  587. 'post_form': self.get_rendered_html_form(data, view, 'POST', request),
  588. 'delete_form': self.get_rendered_html_form(data, view, 'DELETE', request),
  589. 'options_form': self.get_rendered_html_form(data, view, 'OPTIONS', request),
  590. 'extra_actions': self.get_extra_actions(view, response.status_code),
  591. 'filter_form': self.get_filter_form(data, view, request),
  592. 'raw_data_put_form': raw_data_put_form,
  593. 'raw_data_post_form': raw_data_post_form,
  594. 'raw_data_patch_form': raw_data_patch_form,
  595. 'raw_data_put_or_patch_form': raw_data_put_or_patch_form,
  596. 'display_edit_forms': bool(response.status_code != 403),
  597. 'api_settings': api_settings,
  598. 'csrf_cookie_name': csrf_cookie_name,
  599. 'csrf_header_name': csrf_header_name
  600. }
  601. def render(self, data, accepted_media_type=None, renderer_context=None):
  602. """
  603. Render the HTML for the browsable API representation.
  604. """
  605. self.accepted_media_type = accepted_media_type or ''
  606. self.renderer_context = renderer_context or {}
  607. template = loader.get_template(self.template)
  608. context = self.get_context(data, accepted_media_type, renderer_context)
  609. ret = template.render(context, request=renderer_context['request'])
  610. # Munge DELETE Response code to allow us to return content
  611. # (Do this *after* we've rendered the template so that we include
  612. # the normal deletion response code in the output)
  613. response = renderer_context['response']
  614. if response.status_code == status.HTTP_204_NO_CONTENT:
  615. response.status_code = status.HTTP_200_OK
  616. return ret
  617. class AdminRenderer(BrowsableAPIRenderer):
  618. template = 'rest_framework/admin.html'
  619. format = 'admin'
  620. def render(self, data, accepted_media_type=None, renderer_context=None):
  621. self.accepted_media_type = accepted_media_type or ''
  622. self.renderer_context = renderer_context or {}
  623. response = renderer_context['response']
  624. request = renderer_context['request']
  625. view = self.renderer_context['view']
  626. if response.status_code == status.HTTP_400_BAD_REQUEST:
  627. # Errors still need to display the list or detail information.
  628. # The only way we can get at that is to simulate a GET request.
  629. self.error_form = self.get_rendered_html_form(data, view, request.method, request)
  630. self.error_title = {'POST': 'Create', 'PUT': 'Edit'}.get(request.method, 'Errors')
  631. with override_method(view, request, 'GET') as request:
  632. response = view.get(request, *view.args, **view.kwargs)
  633. data = response.data
  634. template = loader.get_template(self.template)
  635. context = self.get_context(data, accepted_media_type, renderer_context)
  636. ret = template.render(context, request=renderer_context['request'])
  637. # Creation and deletion should use redirects in the admin style.
  638. if response.status_code == status.HTTP_201_CREATED and 'Location' in response:
  639. response.status_code = status.HTTP_303_SEE_OTHER
  640. response['Location'] = request.build_absolute_uri()
  641. ret = ''
  642. if response.status_code == status.HTTP_204_NO_CONTENT:
  643. response.status_code = status.HTTP_303_SEE_OTHER
  644. try:
  645. # Attempt to get the parent breadcrumb URL.
  646. response['Location'] = self.get_breadcrumbs(request)[-2][1]
  647. except KeyError:
  648. # Otherwise reload current URL to get a 'Not Found' page.
  649. response['Location'] = request.full_path
  650. ret = ''
  651. return ret
  652. def get_context(self, data, accepted_media_type, renderer_context):
  653. """
  654. Render the HTML for the browsable API representation.
  655. """
  656. context = super().get_context(
  657. data, accepted_media_type, renderer_context
  658. )
  659. paginator = getattr(context['view'], 'paginator', None)
  660. if paginator is not None and data is not None:
  661. try:
  662. results = paginator.get_results(data)
  663. except (TypeError, KeyError):
  664. results = data
  665. else:
  666. results = data
  667. if results is None:
  668. header = {}
  669. style = 'detail'
  670. elif isinstance(results, list):
  671. header = results[0] if results else {}
  672. style = 'list'
  673. else:
  674. header = results
  675. style = 'detail'
  676. columns = [key for key in header if key != 'url']
  677. details = [key for key in header if key != 'url']
  678. if isinstance(results, list) and 'view' in renderer_context:
  679. for result in results:
  680. url = self.get_result_url(result, context['view'])
  681. if url is not None:
  682. result.setdefault('url', url)
  683. context['style'] = style
  684. context['columns'] = columns
  685. context['details'] = details
  686. context['results'] = results
  687. context['error_form'] = getattr(self, 'error_form', None)
  688. context['error_title'] = getattr(self, 'error_title', None)
  689. return context
  690. def get_result_url(self, result, view):
  691. """
  692. Attempt to reverse the result's detail view URL.
  693. This only works with views that are generic-like (has `.lookup_field`)
  694. and viewset-like (has `.basename` / `.reverse_action()`).
  695. """
  696. if not hasattr(view, 'reverse_action') or \
  697. not hasattr(view, 'lookup_field'):
  698. return
  699. lookup_field = view.lookup_field
  700. lookup_url_kwarg = getattr(view, 'lookup_url_kwarg', None) or lookup_field
  701. try:
  702. kwargs = {lookup_url_kwarg: result[lookup_field]}
  703. return view.reverse_action('detail', kwargs=kwargs)
  704. except (KeyError, NoReverseMatch):
  705. return
  706. class DocumentationRenderer(BaseRenderer):
  707. media_type = 'text/html'
  708. format = 'html'
  709. charset = 'utf-8'
  710. template = 'rest_framework/docs/index.html'
  711. error_template = 'rest_framework/docs/error.html'
  712. code_style = 'emacs'
  713. languages = ['shell', 'javascript', 'python']
  714. def get_context(self, data, request):
  715. return {
  716. 'document': data,
  717. 'langs': self.languages,
  718. 'lang_htmls': ["rest_framework/docs/langs/%s.html" % language for language in self.languages],
  719. 'lang_intro_htmls': ["rest_framework/docs/langs/%s-intro.html" % language for language in self.languages],
  720. 'code_style': pygments_css(self.code_style),
  721. 'request': request
  722. }
  723. def render(self, data, accepted_media_type=None, renderer_context=None):
  724. if isinstance(data, coreapi.Document):
  725. template = loader.get_template(self.template)
  726. context = self.get_context(data, renderer_context['request'])
  727. return template.render(context, request=renderer_context['request'])
  728. else:
  729. template = loader.get_template(self.error_template)
  730. context = {
  731. "data": data,
  732. "request": renderer_context['request'],
  733. "response": renderer_context['response'],
  734. "debug": settings.DEBUG,
  735. }
  736. return template.render(context, request=renderer_context['request'])
  737. class SchemaJSRenderer(BaseRenderer):
  738. media_type = 'application/javascript'
  739. format = 'javascript'
  740. charset = 'utf-8'
  741. template = 'rest_framework/schema.js'
  742. def render(self, data, accepted_media_type=None, renderer_context=None):
  743. codec = coreapi.codecs.CoreJSONCodec()
  744. schema = base64.b64encode(codec.encode(data)).decode('ascii')
  745. template = loader.get_template(self.template)
  746. context = {'schema': mark_safe(schema)}
  747. request = renderer_context['request']
  748. return template.render(context, request=request)
  749. class MultiPartRenderer(BaseRenderer):
  750. media_type = 'multipart/form-data; boundary=BoUnDaRyStRiNg'
  751. format = 'multipart'
  752. charset = 'utf-8'
  753. BOUNDARY = 'BoUnDaRyStRiNg'
  754. def render(self, data, accepted_media_type=None, renderer_context=None):
  755. from django.test.client import encode_multipart
  756. if hasattr(data, 'items'):
  757. for key, value in data.items():
  758. assert not isinstance(value, dict), (
  759. "Test data contained a dictionary value for key '%s', "
  760. "but multipart uploads do not support nested data. "
  761. "You may want to consider using format='json' in this "
  762. "test case." % key
  763. )
  764. return encode_multipart(self.BOUNDARY, data)
  765. class CoreJSONRenderer(BaseRenderer):
  766. media_type = 'application/coreapi+json'
  767. charset = None
  768. format = 'corejson'
  769. def __init__(self):
  770. assert coreapi, 'Using CoreJSONRenderer, but `coreapi` is not installed.'
  771. def render(self, data, media_type=None, renderer_context=None):
  772. indent = bool(renderer_context.get('indent', 0))
  773. codec = coreapi.codecs.CoreJSONCodec()
  774. return codec.dump(data, indent=indent)
  775. class _BaseOpenAPIRenderer:
  776. def get_schema(self, instance):
  777. CLASS_TO_TYPENAME = {
  778. coreschema.Object: 'object',
  779. coreschema.Array: 'array',
  780. coreschema.Number: 'number',
  781. coreschema.Integer: 'integer',
  782. coreschema.String: 'string',
  783. coreschema.Boolean: 'boolean',
  784. }
  785. schema = {}
  786. if instance.__class__ in CLASS_TO_TYPENAME:
  787. schema['type'] = CLASS_TO_TYPENAME[instance.__class__]
  788. schema['title'] = instance.title
  789. schema['description'] = instance.description
  790. if hasattr(instance, 'enum'):
  791. schema['enum'] = instance.enum
  792. return schema
  793. def get_parameters(self, link):
  794. parameters = []
  795. for field in link.fields:
  796. if field.location not in ['path', 'query']:
  797. continue
  798. parameter = {
  799. 'name': field.name,
  800. 'in': field.location,
  801. }
  802. if field.required:
  803. parameter['required'] = True
  804. if field.description:
  805. parameter['description'] = field.description
  806. if field.schema:
  807. parameter['schema'] = self.get_schema(field.schema)
  808. parameters.append(parameter)
  809. return parameters
  810. def get_operation(self, link, name, tag):
  811. operation_id = "%s_%s" % (tag, name) if tag else name
  812. parameters = self.get_parameters(link)
  813. operation = {
  814. 'operationId': operation_id,
  815. }
  816. if link.title:
  817. operation['summary'] = link.title
  818. if link.description:
  819. operation['description'] = link.description
  820. if parameters:
  821. operation['parameters'] = parameters
  822. if tag:
  823. operation['tags'] = [tag]
  824. return operation
  825. def get_paths(self, document):
  826. paths = {}
  827. tag = None
  828. for name, link in document.links.items():
  829. path = parse.urlparse(link.url).path
  830. method = link.action.lower()
  831. paths.setdefault(path, {})
  832. paths[path][method] = self.get_operation(link, name, tag=tag)
  833. for tag, section in document.data.items():
  834. for name, link in section.links.items():
  835. path = parse.urlparse(link.url).path
  836. method = link.action.lower()
  837. paths.setdefault(path, {})
  838. paths[path][method] = self.get_operation(link, name, tag=tag)
  839. return paths
  840. def get_structure(self, data):
  841. return {
  842. 'openapi': '3.0.0',
  843. 'info': {
  844. 'version': '',
  845. 'title': data.title,
  846. 'description': data.description
  847. },
  848. 'servers': [{
  849. 'url': data.url
  850. }],
  851. 'paths': self.get_paths(data)
  852. }
  853. class CoreAPIOpenAPIRenderer(_BaseOpenAPIRenderer):
  854. media_type = 'application/vnd.oai.openapi'
  855. charset = None
  856. format = 'openapi'
  857. def __init__(self):
  858. assert coreapi, 'Using CoreAPIOpenAPIRenderer, but `coreapi` is not installed.'
  859. assert yaml, 'Using CoreAPIOpenAPIRenderer, but `pyyaml` is not installed.'
  860. def render(self, data, media_type=None, renderer_context=None):
  861. structure = self.get_structure(data)
  862. return yaml.dump(structure, default_flow_style=False).encode()
  863. class CoreAPIJSONOpenAPIRenderer(_BaseOpenAPIRenderer):
  864. media_type = 'application/vnd.oai.openapi+json'
  865. charset = None
  866. format = 'openapi-json'
  867. ensure_ascii = not api_settings.UNICODE_JSON
  868. def __init__(self):
  869. assert coreapi, 'Using CoreAPIJSONOpenAPIRenderer, but `coreapi` is not installed.'
  870. def render(self, data, media_type=None, renderer_context=None):
  871. structure = self.get_structure(data)
  872. return json.dumps(
  873. structure, indent=4,
  874. ensure_ascii=self.ensure_ascii).encode('utf-8')
  875. class OpenAPIRenderer(BaseRenderer):
  876. media_type = 'application/vnd.oai.openapi'
  877. charset = None
  878. format = 'openapi'
  879. def __init__(self):
  880. assert yaml, 'Using OpenAPIRenderer, but `pyyaml` is not installed.'
  881. def render(self, data, media_type=None, renderer_context=None):
  882. # disable yaml advanced feature 'alias' for clean, portable, and readable output
  883. class Dumper(yaml.Dumper):
  884. def ignore_aliases(self, data):
  885. return True
  886. return yaml.dump(data, default_flow_style=False, sort_keys=False, Dumper=Dumper).encode('utf-8')
  887. class JSONOpenAPIRenderer(BaseRenderer):
  888. media_type = 'application/vnd.oai.openapi+json'
  889. charset = None
  890. encoder_class = encoders.JSONEncoder
  891. format = 'openapi-json'
  892. ensure_ascii = not api_settings.UNICODE_JSON
  893. def render(self, data, media_type=None, renderer_context=None):
  894. return json.dumps(
  895. data, cls=self.encoder_class, indent=2,
  896. ensure_ascii=self.ensure_ascii).encode('utf-8')