flaskr.py 5.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213
  1. """
  2. Simple flask thing
  3. """
  4. import random
  5. import string
  6. from flask import render_template, request, redirect, \
  7. flash, url_for, abort, json
  8. from flask_breadcrumbs import Breadcrumbs, register_breadcrumb
  9. from flask_menu import Menu, register_menu
  10. from flask_login import login_required, login_user, logout_user
  11. from app import app, login_manager, db, rrclient, alt_rrclient
  12. from app.models import User, Request, Log, Key
  13. Menu(app=app)
  14. Breadcrumbs(app=app)
  15. @register_breadcrumb(app, '.login', 'Login')
  16. @app.route("/login", methods=["GET", "POST"])
  17. def login():
  18. """Handle login page and data"""
  19. if request.method == 'POST':
  20. email = request.form['email']
  21. password = request.form['password']
  22. user = User.query.filter(User.email == email).first()
  23. if user is not None:
  24. if user.password == password:
  25. login_user(user)
  26. flash('You were successfully logged in', 'success')
  27. if request.args.get("next") is not None:
  28. return redirect(request.args.get("next"))
  29. else:
  30. return redirect(url_for('index'))
  31. else:
  32. flash('Incorrect password', 'danger')
  33. else:
  34. flash('User not found', 'danger')
  35. return redirect(url_for('login'))
  36. else:
  37. return render_template('site/login.html')
  38. @app.route("/register", methods=["POST"])
  39. def register():
  40. """Register a new user"""
  41. user = User()
  42. user.name = request.form['name']
  43. user.email = request.form['email']
  44. user.password = request.form['password']
  45. db.session.add(user)
  46. db.session.commit()
  47. login_user(user)
  48. flash('Succesfully registered account', 'success')
  49. if request.args.get("next") is not None:
  50. return redirect(request.args.get("next"))
  51. else:
  52. return redirect(url_for('index'))
  53. @app.route("/logout")
  54. @login_required
  55. def logout():
  56. """Logout function for users"""
  57. logout_user()
  58. flash('succesfully logged out', 'success')
  59. return redirect(url_for('login'))
  60. @app.route('/')
  61. @register_menu(app, '.', 'Home')
  62. @register_breadcrumb(app, '.', 'Home')
  63. def index():
  64. """Show homepage"""
  65. # users = User.query.count()
  66. return render_template('site/index.html')
  67. # return render_template('site/index.html', users=users)
  68. @app.route('/users')
  69. @register_menu(app, 'users', 'Users')
  70. @register_breadcrumb(app, '.users', 'Users')
  71. @login_required
  72. def user_index():
  73. """Show users"""
  74. users = User.query.all()
  75. return render_template('user/index.html', users=users)
  76. def user_overview_dlc(*args, **kwargs):
  77. """Generate dynamic_list for user"""
  78. id = request.view_args['id']
  79. user = User.query.get(id)
  80. return [{'text': user.email, 'url': user.name}]
  81. @app.route('/user/<int:id>')
  82. @register_breadcrumb(app, '.users.id', '',
  83. dynamic_list_constructor=user_overview_dlc)
  84. @login_required
  85. def user_overview(id):
  86. """Show user overview"""
  87. id = int(id)
  88. user = User.query.get(id)
  89. return render_template('user/overview.html', user=user)
  90. @app.route('/user/<int:id>/generate_key')
  91. @login_required
  92. def user_generate_key(id):
  93. """Generate new key for user"""
  94. user = User.query.get(id)
  95. key = Key()
  96. key.key = ''.join(random.choices(
  97. string.ascii_letters + string.digits, k=64
  98. ))
  99. key.user_id = user.id
  100. db.session.add(key)
  101. db.session.commit()
  102. flash('Succesfully generated key', 'success')
  103. return redirect(url_for('user_overview', id=user.id))
  104. @app.route('/user/<int:user_id>/key/<int:key_id>/activate')
  105. @login_required
  106. def user_toogle_key(user_id, key_id):
  107. """Activate key"""
  108. user = User.query.get(user_id)
  109. key = Key.query.get(key_id)
  110. key.active = not key.active
  111. db.session.add(key)
  112. db.session.commit()
  113. if key.active:
  114. flash('Activated key', 'success')
  115. else:
  116. flash('Deactivated key', 'success')
  117. return redirect(url_for('user_overview', id=user.id))
  118. @app.route('/api/authenticated', methods=["POST"])
  119. def api_authenticated():
  120. """Check key"""
  121. if 'Authorization' not in request.headers:
  122. return abort(403)
  123. authorization = request.headers['authorization']
  124. key = Key.query.filter(Key.key == authorization).count()
  125. if key:
  126. return json.dumps(True)
  127. return json.dumps(False)
  128. @app.route('/api/request/<path:url_path>', methods=["GET"])
  129. def api_get(url_path):
  130. """Check key"""
  131. if 'Authorization' not in request.headers:
  132. return abort(403)
  133. authorization = request.headers['authorization']
  134. key = Key.query.filter(Key.key == authorization).first()
  135. if not key or not key.active:
  136. return abort(403)
  137. log = Log()
  138. db.session.add(log)
  139. db.session.commit()
  140. alt = request.args.get('alt')
  141. if alt:
  142. result = alt_rrclient.get(url_path)
  143. else:
  144. result = rrclient.get(url_path)
  145. log.succes = True
  146. db.session.commit()
  147. return result
  148. @app.route('/api/request/<path:url_path>', methods=["POST"])
  149. def api_post(url_path):
  150. """Check key"""
  151. if 'Authorization' not in request.headers:
  152. return abort(403)
  153. authorization = request.headers['authorization']
  154. key = Key.query.filter(Key.key == authorization).first()
  155. if not key or not key.active:
  156. return abort(403)
  157. log = Log()
  158. db.session.add(log)
  159. db.session.commit()
  160. if request.json:
  161. data = request.json
  162. else:
  163. data = {}
  164. alt = request.args.get('alt')
  165. if alt:
  166. result = alt_rrclient.post(url_path, data=data)
  167. else:
  168. result = rrclient.post(url_path, data=data)
  169. log.succes = True
  170. db.session.commit()
  171. return result