cardinal_pythonlib.wsgi.reverse_proxied_mw

Original code copyright (C) 2009-2022 Rudolf Cardinal (rudolf@pobox.com).

This file is part of cardinal_pythonlib.

Licensed under the Apache License, Version 2.0 (the “License”); you may not use this file except in compliance with the License. You may obtain a copy of the License at

https://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an “AS IS” BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Middleware to set SCRIPT_NAME environment variable etc. when behind a reverse proxy.

class cardinal_pythonlib.wsgi.reverse_proxied_mw.ReverseProxiedConfig(trusted_proxy_headers: List[str] | None = None, http_host: str | None = None, remote_addr: str | None = None, script_name: str | None = None, server_name: str | None = None, server_port: int | None = None, url_scheme: str | None = None, rewrite_path_info: bool = False)[source]

Class to hold information about a reverse proxy configuration.

Parameters:

trusted_proxy_headers¶ – list of headers, from ReverseProxiedMiddleware.ALL_CANDIDATES, that the middleware will treat as trusted and obey. All others from this list will be stripped.
http_host¶ – Value to write to the HTTP_HOST WSGI variable. If not specified, an appropriate trusted header will be used (if there is one).
remote_addr¶ – … similarly for REMOTE_ADDR
script_name¶ – … similarly for SCRIPT_NAME
server_name¶ – … similarly for SERVER_NAME
server_port¶ – … similarly for SERVER_PORT
url_scheme¶ – … similarly for URL_SCHEME (e.g. "https")
rewrite_path_info¶ –
If True, then if the middleware sets SCRIPT_NAME and PATH_INFO starts with SCRIPT_NAME, the SCRIPT_NAME will be stripped off the front of PATH_INFO.

This is appropriate for front-end web servers that fail to rewrite the incoming URL properly. (Do not use for Apache with ProxyPass; ProxyPass rewrites the URLs properly for you.)

… as per e.g. http://flask.pocoo.org/snippets/35/

necessary() → bool[source]: Is any special handling (e.g. the addition of ReverseProxiedMiddleware) necessary for thie config?

class cardinal_pythonlib.wsgi.reverse_proxied_mw.ReverseProxiedMiddleware(app: Callable[[Dict[str, str], Callable[[str, List[Tuple[str, str]], Tuple[Type[BaseException] | None, BaseException | None, TracebackType | None] | None], Callable[[str], None]]], Iterable[bytes]], config: ReverseProxiedConfig, debug: bool = False)[source]

WSGI middleware to set the SCRIPT_NAME and PATH_INFO WSGI environment variables (etc.) correctly when behind a reverse proxy.

Note that the WSGI environment variables HTTP_* are clones of HTTP headers; for example, X-Forwarded-For in HTTP becomes HTTP_X_FORWARDED_FOR in WSGI.