Use Vary header to avoid caching of pages where login is required/possible

[ipfire.org.git] / src / web / people.py

diff --git a/src/web/people.py b/src/web/people.py
index 45955e6b49f0ae860ca658ed71b5e5a45c9e6551..cd6e932f0519bb9765beaf0e45ecb945cd5f911c 100644 (file)
--- a/src/web/people.py
+++ b/src/web/people.py
@@ -6,18 +6,17 @@ import logging
 import sshpubkeys
 import tornado.web
 
+from . import auth
 from . import handlers_base as base
 from . import ui_modules
 
-class IndexHandler(base.BaseHandler):
+class IndexHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self):
                self.render("people/index.html")
 
 
 class AvatarHandler(base.BaseHandler):
-       always_cache = True
-
        def get(self, uid):
                # Get the desired size of the avatar file
                size = self.get_argument("size", 0)
@@ -54,7 +53,7 @@ class AvatarHandler(base.BaseHandler):
                self.finish(avatar)
 
 
-class CallsHandler(base.BaseHandler):
+class CallsHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self, uid, date=None):
                account = self.backend.accounts.get_by_uid(uid)
@@ -72,7 +71,7 @@ class CallsHandler(base.BaseHandler):
                self.render("people/calls.html", account=account, date=date)
 
 
-class CallHandler(base.BaseHandler):
+class CallHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self, uid, uuid):
                account = self.backend.accounts.get_by_uid(uid)
@@ -88,13 +87,13 @@ class CallHandler(base.BaseHandler):
                self.render("people/call.html", account=account, call=call)
 
 
-class ConferencesHandler(base.BaseHandler):
+class ConferencesHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self):
                self.render("people/conferences.html", conferences=self.backend.talk.conferences)
 
 
-class SearchHandler(base.BaseHandler):
+class SearchHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self):
                q = self.get_argument("q")
@@ -110,7 +109,7 @@ class SearchHandler(base.BaseHandler):
                self.render("people/search.html", q=q, accounts=accounts)
 
 
-class SSHKeysIndexHandler(base.BaseHandler):
+class SSHKeysIndexHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self, uid):
                account = self.backend.accounts.get_by_uid(uid)
@@ -120,7 +119,7 @@ class SSHKeysIndexHandler(base.BaseHandler):
                self.render("people/ssh-keys/index.html", account=account)
 
 
-class SSHKeysDownloadHandler(base.BaseHandler):
+class SSHKeysDownloadHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self, uid, hash_sha256):
                account = self.backend.accounts.get_by_uid(uid)
@@ -138,7 +137,7 @@ class SSHKeysDownloadHandler(base.BaseHandler):
                self.finish(key.keydata)
 
 
-class SSHKeysUploadHandler(base.BaseHandler):
+class SSHKeysUploadHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self, uid):
                account = self.backend.accounts.get_by_uid(uid)
@@ -179,7 +178,7 @@ class SSHKeysUploadHandler(base.BaseHandler):
                self.redirect("/users/%s/ssh-keys" % account.uid)
 
 
-class SSHKeysDeleteHandler(base.BaseHandler):
+class SSHKeysDeleteHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self, uid, hash_sha256):
                account = self.backend.accounts.get_by_uid(uid)
@@ -215,7 +214,7 @@ class SSHKeysDeleteHandler(base.BaseHandler):
                self.redirect("/users/%s/ssh-keys" % account.uid)
 
 
-class SIPHandler(base.BaseHandler):
+class SIPHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self, uid):
                account = self.backend.accounts.get_by_uid(uid)
@@ -229,13 +228,13 @@ class SIPHandler(base.BaseHandler):
                self.render("people/sip.html", account=account)
 
 
-class UsersHandler(base.BaseHandler):
+class UsersHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self):
                self.render("people/users.html")
 
 
-class UserHandler(base.BaseHandler):
+class UserHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self, uid):
                account = self.backend.accounts.get_by_uid(uid)
@@ -245,7 +244,7 @@ class UserHandler(base.BaseHandler):
                self.render("people/user.html", account=account)
 
 
-class UserEditHandler(base.BaseHandler):
+class UserEditHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self, uid):
                account = self.backend.accounts.get_by_uid(uid)
@@ -298,7 +297,7 @@ class UserEditHandler(base.BaseHandler):
                self.redirect("/users/%s" % account.uid)
 
 
-class UserPasswdHandler(base.BaseHandler):
+class UserPasswdHandler(auth.CacheMixin, base.BaseHandler):
        @tornado.web.authenticated
        def get(self, uid):
                account = self.backend.accounts.get_by_uid(uid)