OAProc: prevent redirects on callbacks (#2393)

tomkralidis · web-flow · commit fcd3938a6562 · 2026-07-27T12:51:33.000+03:00
diff --git a/pygeoapi/process/manager/base.py b/pygeoapi/process/manager/base.py
@@ -517,7 +517,7 @@ def __do_subscriber_request(self, url: str, data: dict = {}) -> None:
             LOGGER.error(f'{msg}: {url}')
             raise ProcessorExecuteError(msg)
 
-        response = requests.post(url, json=data)
+        response = requests.post(url, json=data, allow_redirects=False)
         LOGGER.debug(
             f'Response: {response.status_code}'
         )
diff --git a/tests/api/test_processes.py b/tests/api/test_processes.py
@@ -397,11 +397,12 @@ def test_execute_process(config, api_):
         rsp_headers, code, response = execute_process(api_, req, 'hello-world')
     assert code == HTTPStatus.OK
     post_mocker.assert_any_call(
-        req_body_7['subscriber']['inProgressUri'], json={}
+        req_body_7['subscriber']['inProgressUri'], json={},
+        allow_redirects=False
     )
     post_mocker.assert_any_call(
         req_body_7['subscriber']['successUri'],
-        json={'id': 'echo', 'value': 'Hello Test!'}
+        json={'id': 'echo', 'value': 'Hello Test!'}, allow_redirects=False
     )
     assert post_mocker.call_count == 2
 

Original file line number	Diff line number	Diff line change
`@@ -517,7 +517,7 @@ def __do_subscriber_request(self, url: str, data: dict = {}) -> None:`
`517`	`517`	`LOGGER.error(f'{msg}: {url}')`
`518`	`518`	`raise ProcessorExecuteError(msg)`
`519`	`519`
`520`		`- response = requests.post(url, json=data)`
	`520`	`+ response = requests.post(url, json=data, allow_redirects=False)`
`521`	`521`	`LOGGER.debug(`
`522`	`522`	`f'Response: {response.status_code}'`
`523`	`523`	`)`
Original file line number	Diff line number	Diff line change
`@@ -397,11 +397,12 @@ def test_execute_process(config, api_):`
`397`	`397`	`rsp_headers, code, response = execute_process(api_, req, 'hello-world')`
`398`	`398`	`assert code == HTTPStatus.OK`
`399`	`399`	`post_mocker.assert_any_call(`
`400`		`- req_body_7['subscriber']['inProgressUri'], json={}`
	`400`	`+ req_body_7['subscriber']['inProgressUri'], json={},`
	`401`	`+ allow_redirects=False`
`401`	`402`	`)`
`402`	`403`	`post_mocker.assert_any_call(`
`403`	`404`	`req_body_7['subscriber']['successUri'],`
`404`		`- json={'id': 'echo', 'value': 'Hello Test!'}`
	`405`	`+ json={'id': 'echo', 'value': 'Hello Test!'}, allow_redirects=False`
`405`	`406`	`)`
`406`	`407`	`assert post_mocker.call_count == 2`
`407`	`408`