Method post

apps/plugins/api_views.py:875–947

(self, request)

        })},
    )
    def post(self, request):
        url = (request.data.get("url") or "").strip()
        public_key = (request.data.get("public_key") or "").strip()
        if not url:
            return Response(
                {"error": "url is required"},
                status=status.HTTP_400_BAD_REQUEST,
            )
        try:
            key_text = public_key or None
            data, verified = _fetch_manifest(url, public_key_text=key_text)
            manifest_inner = data.get("manifest", data)
            registry_name = (manifest_inner.get("registry_name") or "").strip()
            registry_url = (manifest_inner.get("registry_url") or "").strip()
            plugin_count = len(manifest_inner.get("plugins", []))
            errors = []
            if not registry_name:
                errors.append("Manifest is missing a 'registry_name'.")
            elif _is_official_sounding(registry_name):
                errors.append(f"The registry name '{registry_name}' is not allowed because it may be confused with an official repo.")
            if PluginRepo.objects.filter(url=url).exists():
                errors.append("This manifest URL has already been added.")
            return Response({
                "valid": len(errors) == 0,
                "registry_name": registry_name,
                "registry_url": registry_url,
                "signature_verified": verified,
                "plugin_count": plugin_count,
                "errors": errors,
            })
        except http_requests.exceptions.Timeout:
            return Response(
                {"valid": False, "errors": ["The request timed out. Check the URL and try again."]},
                status=status.HTTP_200_OK,
            )
        except http_requests.exceptions.ConnectionError:
            return Response(
                {"valid": False, "errors": ["Could not connect to the server. Check the URL and your network connection."]},
                status=status.HTTP_200_OK,
            )
        except http_requests.exceptions.HTTPError as e:
            code = e.response.status_code if e.response is not None else None
            if code == 404:
                msg = "Manifest not found (404). Check that the URL points to a valid manifest file."
            elif code == 403:
                msg = "Access denied (403). The server refused the request."
            elif code is not None:
                msg = f"The server returned an error ({code}). Check the URL and try again."
            else:
                msg = "The server returned an unexpected error. Check the URL and try again."
            return Response(
                {"valid": False, "errors": [msg]},
                status=status.HTTP_200_OK,
            )
        except (json.JSONDecodeError, ValueError) as e:
            msg = str(e)
            # Pass through messages from _validate_fetch_url and _fetch_manifest
            # as-is; only substitute the generic JSON message for actual parse errors.