flaskr.py 4.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181
  1. """
  2. Simple flask thing
  3. """
  4. import random
  5. import string
  6. from datetime import datetime
  7. from flask import render_template, request, redirect, \
  8. flash, url_for, abort, json
  9. from flask_breadcrumbs import Breadcrumbs, register_breadcrumb
  10. from flask_menu import Menu, register_menu
  11. from flask_login import login_required, login_user, logout_user
  12. from app import app, login_manager, db
  13. from app.models import User, Key, Function, Log
  14. Menu(app=app)
  15. Breadcrumbs(app=app)
  16. @login_manager.user_loader
  17. def load_user(id):
  18. """Return user"""
  19. return User.query.get(id)
  20. @register_breadcrumb(app, '.login', 'Login')
  21. @app.route("/login", methods=["GET", "POST"])
  22. def login():
  23. """Handle login page and data"""
  24. if request.method == 'POST':
  25. email = request.form['email']
  26. password = request.form['password']
  27. user = User.query.filter(User.email == email).first()
  28. if user is not None:
  29. if user.password == password:
  30. login_user(user)
  31. flash('You were successfully logged in', 'success')
  32. if request.args.get("next") is not None:
  33. return redirect(request.args.get("next"))
  34. else:
  35. return redirect(url_for('index'))
  36. else:
  37. flash('Incorrect password', 'danger')
  38. else:
  39. flash('User not found', 'danger')
  40. return redirect(url_for('login'))
  41. else:
  42. return render_template('site/login.html')
  43. @app.route("/register", methods=["POST"])
  44. def register():
  45. """Register a new user"""
  46. user = User()
  47. user.name = request.form['name']
  48. user.email = request.form['email']
  49. user.password = request.form['password']
  50. db.session.add(user)
  51. db.session.commit()
  52. login_user(user)
  53. flash('Succesfully registered account', 'success')
  54. if request.args.get("next") is not None:
  55. return redirect(request.args.get("next"))
  56. else:
  57. return redirect(url_for('index'))
  58. @app.route("/logout")
  59. @login_required
  60. def logout():
  61. """Logout function for users"""
  62. logout_user()
  63. flash('succesfully logged out', 'success')
  64. return redirect(url_for('login'))
  65. @app.route('/')
  66. @register_menu(app, '.', 'Home')
  67. @register_breadcrumb(app, '.', 'Home')
  68. def index():
  69. """Show homepage"""
  70. users = User.query.count()
  71. return render_template('site/index.html', users=users)
  72. @app.route('/users')
  73. @register_menu(app, 'users', 'Users')
  74. @register_breadcrumb(app, '.users', 'Users')
  75. @login_required
  76. def user_index():
  77. """Show users"""
  78. users = User.query.all()
  79. return render_template('user/index.html', users=users)
  80. def user_overview_dlc(*args, **kwargs):
  81. """Generate dynamic_list for user"""
  82. id = request.view_args['id']
  83. user = User.query.get(id)
  84. return [{'text': user.email, 'url': user.url}]
  85. @app.route('/user/<int:id>')
  86. @register_breadcrumb(app, '.users.id', '',
  87. dynamic_list_constructor=user_overview_dlc)
  88. @login_required
  89. def user_overview(id):
  90. """Show user overview"""
  91. id = int(id)
  92. user = User.query.get(id)
  93. return render_template('user/overview.html', user=user)
  94. @app.route('/user/<int:id>/generate_key')
  95. @login_required
  96. def user_generate_key(id):
  97. """Generate new key for user"""
  98. user = User.query.get(id)
  99. key = Key()
  100. key.key = ''.join(random.choices(
  101. string.ascii_letters + string.digits, k=64
  102. ))
  103. key.user_id = user.id
  104. db.session.add(key)
  105. db.session.commit()
  106. flash('Succesfully generated key', 'success')
  107. return redirect(url_for('user_overview', id=user.id))
  108. @app.route('/user/<int:user_id>/key/<int:key_id>/activate')
  109. @login_required
  110. def user_toogle_key(user_id, key_id):
  111. """Activate key"""
  112. user = User.query.get(user_id)
  113. key = Key.query.get(key_id)
  114. key.active = not key.active
  115. db.session.add(key)
  116. db.session.commit()
  117. if key.active:
  118. flash('Activated key', 'success')
  119. else:
  120. flash('Deactivated key', 'success')
  121. return redirect(url_for('user_overview', id=user.id))
  122. @app.route('/api/authenticated', methods=["POST"])
  123. def api_authenticated():
  124. """Check key"""
  125. if 'Authorization' not in request.headers:
  126. return abort(403)
  127. authorization = request.headers['authorization']
  128. key = Key.query.filter(Key.key == authorization).count()
  129. if key:
  130. return json.dumps(True)
  131. return json.dumps(False)
  132. @app.route('/api/request', methods=["GET"])
  133. def api_log():
  134. """Check key"""
  135. if 'Authorization' not in request.headers:
  136. return abort(403)
  137. authorization = request.headers['authorization']
  138. key = Key.query.filter(Key.key == authorization).first()
  139. if not key or not key.active:
  140. return abort(403)
  141. log = Log()
  142. db.session.add(log)
  143. db.session.commit()
  144. return json.dumps(True)