Mercurial > libervia-backend
view libervia/cli/cmd_uri.py @ 4212:5f2d496c633f
core: get rid of `pickle`:
Use of `pickle` to serialise data was a technical legacy that was causing trouble to store
in database, to update (if a class was serialised, a change could break update), and to
security (pickle can lead to code execution).
This patch remove all use of Pickle in favour in JSON, notably:
- for caching data, a Pydantic model is now used instead
- for SQLAlchemy model, the LegacyPickle is replaced by JSON serialisation
- in XEP-0373 a class `PublicKeyMetadata` was serialised. New method `from_dict` and
`to_dict` method have been implemented to do serialisation.
- new methods to (de)serialise data can now be specified with Identity data types. It is
notably used to (de)serialise `path` of avatars.
A migration script has been created to convert data (for upgrade or downgrade), with
special care for XEP-0373 case. Depending of size of database, this migration script can
be long to run.
rel 443
author | Goffi <goffi@goffi.org> |
---|---|
date | Fri, 23 Feb 2024 13:31:04 +0100 |
parents | 47401850dec6 |
children | 0d7bb4df2343 |
line wrap: on
line source
#!/usr/bin/env python3 # Libervia CLI # Copyright (C) 2009-2021 Jérôme Poisson (goffi@goffi.org) # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Affero General Public License for more details. # You should have received a copy of the GNU Affero General Public License # along with this program. If not, see <http://www.gnu.org/licenses/>. from . import base from libervia.backend.core.i18n import _ from libervia.cli.constants import Const as C from libervia.backend.tools.common import uri __commands__ = ["Uri"] class Parse(base.CommandBase): def __init__(self, host): base.CommandBase.__init__( self, host, "parse", use_profile=False, use_output=C.OUTPUT_DICT, help=_("parse URI"), ) def add_parser_options(self): self.parser.add_argument( "uri", help=_("XMPP URI to parse") ) async def start(self): await self.output(uri.parse_xmpp_uri(self.args.uri)) self.host.quit() class Build(base.CommandBase): def __init__(self, host): base.CommandBase.__init__( self, host, "build", use_profile=False, help=_("build URI") ) def add_parser_options(self): self.parser.add_argument("type", help=_("URI type")) self.parser.add_argument("path", help=_("URI path")) self.parser.add_argument( "-f", "--field", action="append", nargs=2, dest="fields", metavar=("KEY", "VALUE"), help=_("URI fields"), ) async def start(self): fields = dict(self.args.fields) if self.args.fields else {} self.disp(uri.build_xmpp_uri(self.args.type, path=self.args.path, **fields)) self.host.quit() class Uri(base.CommandBase): subcommands = (Parse, Build) def __init__(self, host): super(Uri, self).__init__( host, "uri", use_profile=False, help=_("XMPP URI parsing/generation") )