travis-api/lib/travis/api/app
Piotr Sarnacki 260c46181d Add hack to allow handling redirect to logs on the client properly.
This hack is temporary and should be removed when we find better
solution.

TL;DR: we can't handle redirects to S3 using CORS, so in case we want to
get logs from S3 without additional requests to API, we need to return
status that will not be automatically redirected (in this case 204 seems
like the best answer).

Longer rationale:

Old logs are hosted on S3 now and in case log is not available in the
database, we would like to redirect to the archived log. Although S3
support CORS, our use case breaks on some browsers:

  * when request is triggered to /jobs/:id/log and log is archived, api
    returns 302 redirect, Location header points to the log on S3
  * browser transparently redirects to given url, but it sets Origin to
    null, for security reasons
  * "Origin: null" is ok, because we allow every origin by setting
    AllowedOrigin to "*"
  * S3 returns "Access-Control-Allow-Origin: null" header, which breaks
    some browsers (I confirmed it for webkit based browsers)

In order to fix this, S3 would need to return * in
Access-Control-Allow-Origin header or we would need to tell the browser
to not follow redirect. Both solutions are not achiveable.

Another option would be to return log information in job payload - we
could send log_url field which should be either log url on amazon or
null, but in such case we would need to query artifacts table in each
job request. This is something that should be avoided as archived logs
are not frequently requested - slowing down every request to get info
for it would be a waste.
2013-01-29 03:51:22 +01:00
..
endpoint Add hack to allow handling redirect to logs on the client properly. 2013-01-29 03:51:22 +01:00
extensions pass if scope does not match 2013-01-13 20:08:56 +01:00
helpers Allow to download logs in plain text 2013-01-15 02:23:02 +01:00
middleware keep query string when redirecting in rewrite middleware 2013-01-28 15:47:28 +01:00
responders add Pragma header for caches that do not understand Cache-Control, see 2013-01-21 21:18:16 +01:00
access_token.rb add travis_token scope 2012-12-12 17:11:25 +01:00
base.rb Fix syntax error 2013-01-26 00:02:15 +01:00
cors.rb Move CORS middleware in front of the stack 2012-11-05 21:48:13 +01:00
endpoint.rb use Services::Helpers 2012-11-23 21:16:21 +01:00
extensions.rb rewrite all the things 2012-07-27 15:55:57 +02:00
helpers.rb rewrite all the things 2012-07-27 15:55:57 +02:00
middleware.rb rename Responder to Base (resembles Sinatra::Base and i can't come up with another name for a common base class of Middleware and Endpoint) 2012-10-09 18:31:51 +02:00
responders.rb Allow to download logs in plain text 2013-01-15 02:23:02 +01:00