[Catalog-sig] PyPI reverse download

2010-07-27 Thread Martin v. Löwis
I'll be implementing a feature for PyPI where you can POST to a certain action (revdownload), and then PyPI will POST the file requested to an URL that was passed; this is need to make blobs work on AppEngine. Any objections? Regards, Martin ___

Re: [Catalog-sig] PyPI reverse download

2010-07-27 Thread Jacob Kaplan-Moss
On Tue, Jul 27, 2010 at 1:25 PM, Martin v. Löwis mar...@v.loewis.de wrote: I'll be implementing a feature for PyPI where you can POST to a certain action (revdownload), and then PyPI will POST the file requested to an URL that was passed; this is need to make blobs work on AppEngine. Any

Re: [Catalog-sig] PyPI reverse download

2010-07-27 Thread Martin v. Löwis
Any objections? Seems like this is rife for abuse -- it's essentially an open relay for POST requests, so I could use it to amplify a DDOS attack. So probably sounds like there needs to be some sort of security, or whitelist of allowed URL (or prefixes?), or somesuch. I guess I restrict it

Re: [Catalog-sig] PyPI reverse download

2010-07-27 Thread Noah Kantrowitz
@python.org] On Behalf Of Martin v. Löwis Sent: Tuesday, July 27, 2010 1:26 PM To: catalog-sig Subject: [Catalog-sig] PyPI reverse download I'll be implementing a feature for PyPI where you can POST to a certain action (revdownload), and then PyPI will POST the file requested to an URL

Re: [Catalog-sig] PyPI reverse download

2010-07-27 Thread Martin v. Löwis
Am 27.07.2010 22:46, schrieb M.-A. Lemburg: Martin v. Löwis wrote: I'll be implementing a feature for PyPI where you can POST to a certain action (revdownload), and then PyPI will POST the file requested to an URL that was passed; this is need to make blobs work on AppEngine. Any

Re: [Catalog-sig] PyPI reverse download

2010-07-27 Thread Noah Kantrowitz
-Original Message- From: catalog-sig-bounces+noah=coderanger@python.org [mailto:catalog-sig-bounces+noah=coderanger@python.org] On Behalf Of Martin v. Löwis Sent: Tuesday, July 27, 2010 2:07 PM To: M.-A. Lemburg Cc: catalog-sig Subject: Re: [Catalog-sig] PyPI reverse

Re: [Catalog-sig] PyPI reverse download

2010-07-27 Thread Martin v. Löwis
However, apps can neither read from nor write to the blobstore. The only way to read from it is to serve the file, and the only way to write to it is through a POST from the outside. I've been able to write to it using urlfetch internally. You just craft a request with the POST from the app

Re: [Catalog-sig] PyPI reverse download

2010-07-27 Thread M.-A. Lemburg
Martin v. Löwis wrote: Am 27.07.2010 22:46, schrieb M.-A. Lemburg: Martin v. Löwis wrote: I'll be implementing a feature for PyPI where you can POST to a certain action (revdownload), and then PyPI will POST the file requested to an URL that was passed; this is need to make blobs work on