Moved
This commit is contained in:
Yûki VACHOT
parent
bc62ef4f0d
commit
a18333c2c3
101 changed files with 54 additions and 59 deletions
|
|
@ -1,6 +0,0 @@
|
|||
FROM python:latest
|
||||
WORKDIR /data/backend
|
||||
COPY requirements.txt requirements.txt
|
||||
RUN pip install --upgrade pip
|
||||
RUN pip install -r requirements.txt
|
||||
COPY . .
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
from application import create_app
|
||||
import os
|
||||
|
||||
app = create_app(os.environ.get('FLASK_ENV', None))
|
||||
|
||||
if __name__ == "__main__":
|
||||
PORT = os.environ.get('PORT', 33507)
|
||||
app.run(host='0.0.0.0', port=PORT, DEBUG=True)
|
||||
|
|
@ -1,35 +0,0 @@
|
|||
from flask import Flask
|
||||
from flask_sqlalchemy import SQLAlchemy
|
||||
from flask_cors import CORS
|
||||
import sys
|
||||
|
||||
db = SQLAlchemy()
|
||||
|
||||
|
||||
def create_app(flask_env='development'):
|
||||
app = Flask(__name__, instance_relative_config=False)
|
||||
origin = app.config.get('ALLOW_ORIGIN')
|
||||
if origin is None:
|
||||
origin = ['http://127.0.0.1:4200', 'http://localhost:4200']
|
||||
CORS(app, supports_credentials=True, origins=origin)
|
||||
if flask_env == 'production':
|
||||
app.config.from_object("config.ProductionConfig")
|
||||
elif flask_env == 'testing':
|
||||
app.config.from_object("config.TestingConfig")
|
||||
elif flask_env == 'development':
|
||||
app.config.from_object("config.DevelopmentConfig")
|
||||
else:
|
||||
app.config.from_object("config.Config")
|
||||
|
||||
if app.config['SQLALCHEMY_DATABASE_URI_1'] is None or app.config['SQLALCHEMY_DATABASE_URI_2'] is None:
|
||||
print('No ENV Variable for DATABASE_URL_USERS or DATABASE_URL_LOGS')
|
||||
sys.exit(1)
|
||||
else:
|
||||
print('ENV Variables passed : ', app.config['SQLALCHEMY_BINDS'])
|
||||
|
||||
db.init_app(app)
|
||||
with app.app_context():
|
||||
from . import routes
|
||||
app.register_blueprint(routes.bp)
|
||||
db.create_all()
|
||||
return app
|
||||
|
|
@ -1,35 +0,0 @@
|
|||
from flask import current_app as app
|
||||
import json
|
||||
|
||||
|
||||
def send_error(status_code, message, token=None):
|
||||
data_json = {
|
||||
'status': 'error',
|
||||
'message': message
|
||||
}
|
||||
res = app.response_class(
|
||||
response=json.dumps(data_json),
|
||||
status=status_code,
|
||||
mimetype='application/json'
|
||||
)
|
||||
if token is not None:
|
||||
res.set_cookie('SESSIONID', token)
|
||||
return res
|
||||
|
||||
|
||||
def send_message(message, data, token=None, token_delete=False):
|
||||
data_json = {
|
||||
'status': 'success',
|
||||
'message': message,
|
||||
'data': data
|
||||
}
|
||||
res = app.response_class(
|
||||
response=json.dumps(data_json),
|
||||
status=200,
|
||||
mimetype='application/json'
|
||||
)
|
||||
if token is not None:
|
||||
res.set_cookie('SESSIONID', token)
|
||||
if token_delete:
|
||||
res.delete_cookie('SESSIONID')
|
||||
return res
|
||||
|
|
@ -1,340 +0,0 @@
|
|||
from flask import request, Blueprint, render_template, current_app as app
|
||||
from werkzeug.exceptions import HTTPException
|
||||
from .responses import send_message, send_error
|
||||
import requests
|
||||
from .sessionJWT import create_auth_token, check_auth_token
|
||||
|
||||
|
||||
# Request Post
|
||||
def request_post(url, data_json):
|
||||
return requests.post(app.config['SQLALCHEMY_BINDS'] + url, json=data_json)
|
||||
|
||||
|
||||
# Request Put
|
||||
def request_put(url, data_json):
|
||||
return requests.put(app.config['SQLALCHEMY_BINDS'] + url, json=data_json)
|
||||
|
||||
|
||||
# Request Get
|
||||
def request_get(url):
|
||||
return requests.get(app.config['SQLALCHEMY_BINDS'] + url)
|
||||
|
||||
|
||||
# Request Delete
|
||||
def request_delete(url, data_json):
|
||||
return requests.delete(app.config['SQLALCHEMY_BINDS'] + url, json=data_json)
|
||||
|
||||
|
||||
bp = Blueprint('myapp', __name__)
|
||||
|
||||
|
||||
@bp.app_errorhandler(HTTPException)
|
||||
def handle_exception(e):
|
||||
return send_error(e.code, e.name)
|
||||
|
||||
|
||||
@bp.route('/', methods=['GET'])
|
||||
def root():
|
||||
return render_template('index.html')
|
||||
|
||||
|
||||
# Login
|
||||
@bp.route('/api/login', methods=['POST'])
|
||||
def login():
|
||||
post_json = request.json
|
||||
try:
|
||||
post_email = str(post_json['email'])
|
||||
post_password = str(post_json['password'])
|
||||
if post_email != '' and post_password != '':
|
||||
ip = request.remote_addr
|
||||
# res = db_login(ip, post_email, post_password)
|
||||
res = request_post('login', {'ip': ip, 'email': post_email, 'password': post_password}).json()
|
||||
if res['status'] == 0:
|
||||
user = res['data']
|
||||
token = create_auth_token(user)
|
||||
return send_message(res['message'], user, token)
|
||||
elif res['status'] == 1:
|
||||
user = None
|
||||
token = create_auth_token(user)
|
||||
return send_error(400, res['message'], token)
|
||||
else:
|
||||
return send_error(400, 'Empty email and/or password fields.')
|
||||
except KeyError as e:
|
||||
return send_error(400, 'Need email, password fields.')
|
||||
|
||||
|
||||
# Register
|
||||
@bp.route('/api/register', methods=['POST'])
|
||||
def register():
|
||||
post_json = request.json
|
||||
try:
|
||||
post_email = str(post_json['email'])
|
||||
post_nickname = str(post_json['nickname'])
|
||||
post_password = str(post_json['password'])
|
||||
if post_email != '' and post_password != '' and post_nickname != '':
|
||||
ip = request.remote_addr
|
||||
# res = db_register(ip, post_email, post_nickname, post_password)
|
||||
res = request_post('register', {'ip': ip, 'email': post_email, 'nickname': post_nickname,
|
||||
'password': post_password}).json()
|
||||
if res['status'] == 1:
|
||||
return send_error(500, res['message'])
|
||||
elif res['status'] == 0:
|
||||
return send_message(res['message'], res['data'])
|
||||
else:
|
||||
return send_error(400, 'Empty email and/or password and/or nickname fields.')
|
||||
except KeyError as e:
|
||||
return send_error(400, 'Need ' + str(e) + 'field.')
|
||||
|
||||
|
||||
# Logout
|
||||
@bp.route('/api/logout', methods=['DELETE'])
|
||||
def logout():
|
||||
token = check_auth_token(request)
|
||||
if token['success']:
|
||||
ip = request.remote_addr
|
||||
user_id = token['payload']['id']
|
||||
request_post('logout', {'ip': ip, 'user_id': user_id}).json()
|
||||
message = 'User disconnected.'
|
||||
return send_message(message, None, token_delete=True)
|
||||
else:
|
||||
return send_error(500, token['message'])
|
||||
|
||||
|
||||
# Update User (Nickname, Password)
|
||||
@bp.route('/api/user/update', methods=['PUT'])
|
||||
def user_update():
|
||||
token = check_auth_token(request)
|
||||
if token['success']:
|
||||
post_json = request.json
|
||||
post_nickname = None
|
||||
post_password = None
|
||||
fields = ''
|
||||
if 'nickname' in post_json:
|
||||
post_nickname = str(post_json['nickname'])
|
||||
else:
|
||||
fields += 'nickname '
|
||||
|
||||
if 'password' in post_json:
|
||||
post_password = str(post_json['password'])
|
||||
else:
|
||||
fields += 'password '
|
||||
|
||||
if post_nickname is not None or post_password is not None:
|
||||
if post_nickname != '' and post_password != '':
|
||||
ip = request.remote_addr
|
||||
user_id = token['payload']['id']
|
||||
# res = db_user_update(ip, user_id, post_nickname, post_password)
|
||||
res = request_post('user/update', {'ip': ip, 'user_id': user_id, 'nickname': post_nickname,
|
||||
'password': post_password}).json()
|
||||
if res['status'] == 1:
|
||||
return send_error(500, res['message'])
|
||||
elif res['status'] == 0:
|
||||
return send_message(res['message'], res['data'])
|
||||
else:
|
||||
return send_error(400, 'Empty nickname and/or password fields.')
|
||||
else:
|
||||
return send_error(400, 'Need ' + fields + 'field.')
|
||||
else:
|
||||
return send_error(500, token['message'])
|
||||
|
||||
|
||||
# Delete User
|
||||
@bp.route('/api/user/delete', methods=['DELETE'])
|
||||
def user_delete():
|
||||
token = check_auth_token(request)
|
||||
if token['success']:
|
||||
ip = request.remote_addr
|
||||
user_id = token['payload']['id']
|
||||
# res = db_user_delete(ip, user_id)
|
||||
res = request_post('user/delete', {'ip': ip, 'user_id': user_id}).json()
|
||||
if res['status'] != 0:
|
||||
return send_error(500, res['message'])
|
||||
else:
|
||||
return send_message(res['message'], None, token_delete=True)
|
||||
else:
|
||||
return send_error(500, token['message'])
|
||||
|
||||
|
||||
# Admin : Create User
|
||||
@bp.route('/api/admin/create/user', methods=['POST'])
|
||||
def admin_create_user():
|
||||
token = check_auth_token(request)
|
||||
if token['success']:
|
||||
ip = request.remote_addr
|
||||
user_id = token['payload']['id']
|
||||
is_admin = token['payload']['is_admin']
|
||||
if is_admin:
|
||||
post_json = request.json
|
||||
post_email = None
|
||||
post_nickname = None
|
||||
post_password = None
|
||||
post_is_admin = None
|
||||
fields = ''
|
||||
if 'email' in post_json:
|
||||
post_email = str(post_json['email'])
|
||||
else:
|
||||
fields += 'email '
|
||||
|
||||
if 'nickname' in post_json:
|
||||
post_nickname = str(post_json['nickname'])
|
||||
else:
|
||||
fields += 'nickname '
|
||||
|
||||
if 'password' in post_json:
|
||||
post_password = str(post_json['password'])
|
||||
else:
|
||||
fields += 'password '
|
||||
|
||||
if 'is_admin' in post_json:
|
||||
post_is_admin = bool(post_json['is_admin'])
|
||||
else:
|
||||
fields += 'is_admin '
|
||||
|
||||
if post_email is not None or post_nickname is not None or post_password is not None or post_is_admin is not None:
|
||||
if post_email != '' and post_nickname != '' and post_password != '' and str(post_is_admin) != '':
|
||||
# res = db_register(ip, post_email, post_nickname, post_password, is_admin=post_is_admin)
|
||||
res = request_post('admin/create/user', {
|
||||
'ip': ip,
|
||||
'user_id': user_id,
|
||||
'token_is_admin': is_admin,
|
||||
'email': post_email,
|
||||
'nickname': post_nickname,
|
||||
'password': post_password,
|
||||
'is_admin': post_is_admin
|
||||
})
|
||||
if res['status'] == 1:
|
||||
return send_error(500, res['message'])
|
||||
elif res['status'] == 0:
|
||||
return send_message(res['message'], res['data'])
|
||||
else:
|
||||
return send_error(400, 'Empty email and/or nickname and/or password and/or is_admin fields.')
|
||||
else:
|
||||
return send_error(400, 'Need ' + fields + 'field.')
|
||||
else:
|
||||
return send_error(500, 'User does not have permission.')
|
||||
else:
|
||||
return send_error(500, token['message'])
|
||||
|
||||
|
||||
# Admin : Change User password and/or role
|
||||
@bp.route('/api/admin/update/user', methods=['PUT'])
|
||||
def admin_update_user():
|
||||
token = check_auth_token(request)
|
||||
if token['success']:
|
||||
user_id = token['payload']['id']
|
||||
is_admin = token['payload']['is_admin']
|
||||
if is_admin:
|
||||
post_json = request.json
|
||||
post_is_admin = None
|
||||
post_password = None
|
||||
post_user_id_delete = None
|
||||
fields = ''
|
||||
if 'id' in post_json:
|
||||
post_user_id_delete = int(post_json['id'])
|
||||
else:
|
||||
fields += 'id '
|
||||
|
||||
if 'is_admin' in post_json:
|
||||
post_is_admin = bool(post_json['is_admin'])
|
||||
else:
|
||||
fields += 'is_admin '
|
||||
|
||||
if 'password' in post_json:
|
||||
post_password = str(post_json['password'])
|
||||
else:
|
||||
fields += 'password '
|
||||
|
||||
if post_user_id_delete is not None and (post_is_admin is not None or post_password is not None):
|
||||
if str(post_is_admin) != '' and post_password != '' and str(post_user_id_delete) != '':
|
||||
ip = request.remote_addr
|
||||
# res = db_admin_update_user(ip, post_user_id_delete, post_is_admin, post_password)
|
||||
res = request_put('admin/update/user', {
|
||||
'ip': ip,
|
||||
'user_id': user_id,
|
||||
'token_is_admin': is_admin,
|
||||
'user_id_delete': post_user_id_delete,
|
||||
'is_admin': post_is_admin,
|
||||
'password': post_password
|
||||
})
|
||||
if res['status'] == 1:
|
||||
return send_error(500, res['message'])
|
||||
elif res['status'] == 0:
|
||||
return send_message(res['message'], res['data'])
|
||||
else:
|
||||
return send_error(400, 'Empty is_admin and/or password fields.')
|
||||
else:
|
||||
return send_error(400, 'Need ' + fields + 'field.')
|
||||
else:
|
||||
return send_error(500, 'User does not have permission.')
|
||||
else:
|
||||
return send_error(500, token['message'])
|
||||
|
||||
|
||||
# Admin : Delete User
|
||||
@bp.route('/api/admin/delete/user/<id>', methods=['DELETE'])
|
||||
def admin_delete_user(id):
|
||||
token = check_auth_token(request)
|
||||
if token['success']:
|
||||
ip = request.remote_addr
|
||||
user_id = token['payload']['id']
|
||||
is_admin = token['payload']['is_admin']
|
||||
if is_admin:
|
||||
post_json = {'id': id}
|
||||
post_user_id_delete = None
|
||||
fields = ''
|
||||
if 'id' in post_json:
|
||||
post_user_id_delete = int(post_json['id'])
|
||||
else:
|
||||
fields += 'id'
|
||||
if post_user_id_delete is not None:
|
||||
if str(post_user_id_delete) != '':
|
||||
# res = db_user_delete(ip, int(post_user_id_delete))
|
||||
res = request_delete('admin/delete/user', {
|
||||
'ip': ip,
|
||||
'user_id': user_id,
|
||||
'token_is_admin': is_admin,
|
||||
'user_id_delete': post_user_id_delete
|
||||
})
|
||||
if res['status'] == 1:
|
||||
return send_error(500, res['message'])
|
||||
else:
|
||||
return send_message(res['message'], None)
|
||||
else:
|
||||
return send_error(400, 'Empty id field.')
|
||||
else:
|
||||
return send_error(400, 'Need ' + fields + 'field.')
|
||||
else:
|
||||
return send_error(500, 'User does not have permission.')
|
||||
else:
|
||||
return send_error(500, token['message'])
|
||||
|
||||
|
||||
# List of User (must be authenticated) & Search
|
||||
@bp.route('/api/users', methods=['GET'])
|
||||
def users():
|
||||
token = check_auth_token(request)
|
||||
if token['success']:
|
||||
ip = request.remote_addr
|
||||
user_id = token['payload']['id']
|
||||
get_query = request.args.get('q')
|
||||
get_by = request.args.get('by')
|
||||
get_id = request.args.get('id')
|
||||
get_is_admin = request.args.get('is_admin')
|
||||
get_order_by = request.args.get('order_by')
|
||||
# res = db_users(ip, user_id, get_query, get_by, get_id, get_is_admin, get_order_by)
|
||||
res = request_get(
|
||||
'users'
|
||||
f'?ip={ip}'
|
||||
f'&user_id={user_id}'
|
||||
f'&q={get_query}'
|
||||
f'&by={get_by}'
|
||||
f'&id={get_id}'
|
||||
f'&is_admin={get_is_admin}'
|
||||
f'&order_by={get_order_by}'
|
||||
)
|
||||
if res['status'] == 1:
|
||||
return send_error(500, res['message'])
|
||||
else:
|
||||
return send_message(res['message'], res['data'])
|
||||
else:
|
||||
return send_error(500, token['message'])
|
||||
|
|
@ -1,39 +0,0 @@
|
|||
from datetime import datetime, timedelta
|
||||
from flask import current_app as app
|
||||
import jwt
|
||||
|
||||
|
||||
def create_auth_token(user, time_second=1800):
|
||||
try:
|
||||
time = datetime.now()
|
||||
payload = {
|
||||
'exp': time + timedelta(days=0, seconds=time_second),
|
||||
'iat': time,
|
||||
'user': user
|
||||
}
|
||||
return jwt.encode(
|
||||
payload,
|
||||
app.config.get('SECRET_KEY'),
|
||||
algorithm='HS256'
|
||||
)
|
||||
except Exception as e:
|
||||
return e
|
||||
|
||||
|
||||
def decode_auth_token(auth_token):
|
||||
try:
|
||||
payload = jwt.decode(
|
||||
auth_token,
|
||||
app.config.get('SECRET_KEY'),
|
||||
algorithms='HS256'
|
||||
)
|
||||
return {'success': True, 'payload': payload['user']}
|
||||
except jwt.ExpiredSignatureError:
|
||||
return {'success': False, 'message': 'Signature expired . Please log in again.'}
|
||||
except jwt.InvalidTokenError as e:
|
||||
return {'success': False, 'message': 'User not authenticated.'}
|
||||
|
||||
|
||||
def check_auth_token(request):
|
||||
token = request.cookies.get('SESSIONID')
|
||||
return decode_auth_token(token)
|
||||
|
|
@ -1,31 +0,0 @@
|
|||
import os
|
||||
|
||||
basedir = os.path.abspath(os.path.dirname(__file__))
|
||||
|
||||
|
||||
class Config(object):
|
||||
DEBUG = False
|
||||
TESTING = False
|
||||
CSRF_ENABLED = True
|
||||
|
||||
FLASK_APP = os.environ.get('FLASK_APP', None)
|
||||
FLASK_ENV = os.environ.get('FLASK_ENV', None)
|
||||
|
||||
API_URL = os.environ.get('API_URL', 'http://127.0.0.1:5000/api/')
|
||||
|
||||
SECRET_KEY = os.environ.get('SECRET_KEY', 'default_secret_key')
|
||||
ALLOW_ORIGIN = os.environ.get('ALLOW_ORIGIN', None)
|
||||
|
||||
|
||||
class ProductionConfig(Config):
|
||||
DEBUG = False
|
||||
API_URL = os.environ.get('API_URL', 'http://10.1.2.10:5000/api/')
|
||||
|
||||
|
||||
class TestingConfig(Config):
|
||||
TESTING = True
|
||||
|
||||
|
||||
class DevelopmentConfig(Config):
|
||||
DEVELOPMENT = True
|
||||
DEBUG = True
|
||||
|
|
@ -1,13 +0,0 @@
|
|||
alembic==1.7.5
|
||||
Flask==2.0.2
|
||||
Flask-Migrate==3.1.0
|
||||
Flask-Script==2.0.6
|
||||
Flask-Testing==0.8.1
|
||||
Flask-SQLAlchemy==2.5.1
|
||||
Flask-WTF==0.15.1
|
||||
pipreqs==0.4.10
|
||||
PyJWT==2.3.0
|
||||
pytest==6.2.5
|
||||
SQLAlchemy==1.4.27
|
||||
psycopg2==2.9.2
|
||||
Flask-Cors==3.0.10
|
||||
Loading…
Add table
Add a link
Reference in a new issue