318 lines
13 KiB
Python
318 lines
13 KiB
Python
|
# This file contains an example Flask-User application.
|
||
|
|
# To keep the example simple, we are applying some unusual techniques:
|
||
|
|
# - Placing everything in one file
|
||
|
|
# - Using class-based configuration (instead of file-based configuration)
|
||
|
|
# - Using string-based templates (instead of file-based templates)
|
||
|
|
|
||
|
|
from flask import Flask, render_template_string, request, make_response, jsonify, render_template, Markup
|
||
|
|
from flask_sqlalchemy import SQLAlchemy
|
||
|
|
from flask_user import login_required, UserManager, UserMixin, user_registered, roles_required
|
||
|
|
from flask_login import current_user
|
||
|
|
from wtforms import StringField, SubmitField
|
||
|
|
import requests
|
||
|
|
import base64, hashlib
|
||
|
|
from dmr_utils3.utils import int_id, bytes_4
|
||
|
|
from config import *
|
||
|
|
import ast
|
||
|
|
import json
|
||
|
|
import datetime
|
||
|
|
from flask_babelex import Babel
|
||
|
|
|
||
|
|
def gen_passphrase(dmr_id):
|
||
|
|
_new_peer_id = bytes_4(int(str(dmr_id)[:7]))
|
||
|
|
calc_passphrase = base64.b64encode((_new_peer_id) + append_int.to_bytes(2, 'big'))
|
||
|
|
return str(calc_passphrase)[2:-1]
|
||
|
|
|
||
|
|
def get_ids(callsign):
|
||
|
|
try:
|
||
|
|
url = "https://www.radioid.net"
|
||
|
|
response = requests.get(url+"/api/dmr/user/?callsign=" + callsign)
|
||
|
|
result = response.json()
|
||
|
|
# id_list = []
|
||
|
|
id_list = {}
|
||
|
|
for i in result['results']:
|
||
|
|
id_list[i['id']] = ''
|
||
|
|
return str(id_list)
|
||
|
|
except:
|
||
|
|
return ''
|
||
|
|
|
||
|
|
# Class-based application configuration
|
||
|
|
class ConfigClass(object):
|
||
|
|
""" Flask application config """
|
||
|
|
|
||
|
|
# Flask settings
|
||
|
|
SECRET_KEY = 'Change me'
|
||
|
|
|
||
|
|
# Flask-SQLAlchemy settings
|
||
|
|
SQLALCHEMY_DATABASE_URI = 'sqlite:///mmdvm_users.sqlite' # File-based SQL database
|
||
|
|
SQLALCHEMY_TRACK_MODIFICATIONS = False # Avoids SQLAlchemy warning
|
||
|
|
|
||
|
|
# Flask-User settings
|
||
|
|
USER_APP_NAME = title # Shown in and email templates and page footers
|
||
|
|
USER_ENABLE_EMAIL = False # Disable email authentication
|
||
|
|
USER_ENABLE_USERNAME = True # Enable username authentication
|
||
|
|
USER_REQUIRE_RETYPE_PASSWORD = True # Simplify register form
|
||
|
|
USER_ENABLE_CHANGE_USERNAME = False
|
||
|
|
|
||
|
|
|
||
|
|
# Setup Flask-User
|
||
|
|
def create_app():
|
||
|
|
""" Flask application factory """
|
||
|
|
|
||
|
|
# Create Flask app load app.config
|
||
|
|
app = Flask(__name__)
|
||
|
|
app.config.from_object(__name__+'.ConfigClass')
|
||
|
|
|
||
|
|
# Initialize Flask-BabelEx
|
||
|
|
babel = Babel(app)
|
||
|
|
|
||
|
|
# Initialize Flask-SQLAlchemy
|
||
|
|
db = SQLAlchemy(app)
|
||
|
|
|
||
|
|
# Define the User data-model.
|
||
|
|
# NB: Make sure to add flask_user UserMixin !!!
|
||
|
|
class User(db.Model, UserMixin):
|
||
|
|
__tablename__ = 'users'
|
||
|
|
id = db.Column(db.Integer, primary_key=True)
|
||
|
|
active = db.Column('is_active', db.Boolean(), nullable=False, server_default='1')
|
||
|
|
|
||
|
|
# User authentication information. The collation='NOCASE' is required
|
||
|
|
# to search case insensitively when USER_IFIND_MODE is 'nocase_collation'.
|
||
|
|
username = db.Column(db.String(100, collation='NOCASE'), nullable=False, unique=True)
|
||
|
|
password = db.Column(db.String(255), nullable=False, server_default='')
|
||
|
|
email_confirmed_at = db.Column(db.DateTime())
|
||
|
|
|
||
|
|
# User information
|
||
|
|
first_name = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
|
||
|
|
last_name = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
|
||
|
|
dmr_ids = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
|
||
|
|
# Define the relationship to Role via UserRoles
|
||
|
|
roles = db.relationship('Role', secondary='user_roles')
|
||
|
|
|
||
|
|
# Define the Role data-model
|
||
|
|
class Role(db.Model):
|
||
|
|
__tablename__ = 'roles'
|
||
|
|
id = db.Column(db.Integer(), primary_key=True)
|
||
|
|
name = db.Column(db.String(50), unique=True)
|
||
|
|
|
||
|
|
# Define the UserRoles association table
|
||
|
|
class UserRoles(db.Model):
|
||
|
|
__tablename__ = 'user_roles'
|
||
|
|
id = db.Column(db.Integer(), primary_key=True)
|
||
|
|
user_id = db.Column(db.Integer(), db.ForeignKey('users.id', ondelete='CASCADE'))
|
||
|
|
role_id = db.Column(db.Integer(), db.ForeignKey('roles.id', ondelete='CASCADE'))
|
||
|
|
|
||
|
|
|
||
|
|
user_manager = UserManager(app, db, User)
|
||
|
|
|
||
|
|
|
||
|
|
# Create all database tables
|
||
|
|
db.create_all()
|
||
|
|
|
||
|
|
|
||
|
|
if not User.query.filter(User.username == 'admin').first():
|
||
|
|
user = User(
|
||
|
|
username='admin',
|
||
|
|
email_confirmed_at=datetime.datetime.utcnow(),
|
||
|
|
password=user_manager.hash_password('admin'),
|
||
|
|
)
|
||
|
|
user.roles.append(Role(name='Admin'))
|
||
|
|
user.roles.append(Role(name='User'))
|
||
|
|
db.session.add(user)
|
||
|
|
db.session.commit()
|
||
|
|
|
||
|
|
## from flask_user.forms import RegisterForm
|
||
|
|
## class CustomRegisterForm(RegisterForm):
|
||
|
|
## # Add a country field to the Register form
|
||
|
|
## call = StringField(('Callsign'))
|
||
|
|
##
|
||
|
|
## # Customize the User profile form:
|
||
|
|
## from flask_user.forms import EditUserProfileForm
|
||
|
|
## class CustomUserProfileForm(EditUserProfileForm):
|
||
|
|
## # Add a country field to the UserProfile form
|
||
|
|
## call = StringField(('Callsign'))
|
||
|
|
##
|
||
|
|
## # Customize Flask-User
|
||
|
|
## class CustomUserManager(UserManager):
|
||
|
|
##
|
||
|
|
## def customize(self, app):
|
||
|
|
##
|
||
|
|
## # Configure customized forms
|
||
|
|
## self.RegisterFormClass = CustomRegisterForm
|
||
|
|
## #self.UserProfileFormClass = CustomUserProfileForm
|
||
|
|
## # NB: assign: xyz_form = XyzForm -- the class!
|
||
|
|
## # (and not: xyz_form = XyzForm() -- the instance!)
|
||
|
|
## # Setup Flask-User and specify the User data-model
|
||
|
|
#user_manager = CustomUserManager(app, db, User)
|
||
|
|
|
||
|
|
# Query radioid.net for list of DMR IDs, then add to DB
|
||
|
|
@user_registered.connect_via(app)
|
||
|
|
def _after_user_registered_hook(sender, user, **extra):
|
||
|
|
edit_user = User.query.filter(User.username == user.username).first()
|
||
|
|
edit_user.dmr_ids = get_ids(user.username)
|
||
|
|
db.session.commit()
|
||
|
|
|
||
|
|
# The Home page is accessible to anyone
|
||
|
|
@app.route('/')
|
||
|
|
def home_page():
|
||
|
|
content = Markup('<strong>The HTML String</strong>')
|
||
|
|
# String-based templates
|
||
|
|
## return render_template_string("""
|
||
|
|
## {% extends "flask_user_layout.html" %}
|
||
|
|
## {% block content %}
|
||
|
|
## <h2>Home page</h2>
|
||
|
|
## <p><a href={{ url_for('user.register') }}>Register</a></p>
|
||
|
|
## <p><a href={{ url_for('user.login') }}>Sign in</a></p>
|
||
|
|
## <p><a href={{ url_for('home_page') }}>Home page</a> (accessible to anyone)</p>
|
||
|
|
## <p><a href={{ url_for('member_page') }}>Member page</a> (login required)</p>
|
||
|
|
## <p><a href={{ url_for('user.logout') }}>Sign out</a></p>
|
||
|
|
## {% endblock %}
|
||
|
|
## """)
|
||
|
|
return render_template('index.html', markup_content = content, logo = logo)
|
||
|
|
|
||
|
|
@app.route('/generate_passphrase', methods = ['GET'])
|
||
|
|
@login_required
|
||
|
|
def gen():
|
||
|
|
#content = Markup('<strong>The HTML String</strong>')
|
||
|
|
#user_id = request.args.get('user_id')
|
||
|
|
u = current_user
|
||
|
|
print(u.username)
|
||
|
|
id_dict = ast.literal_eval(u.dmr_ids)
|
||
|
|
#u = User.query.filter_by(username=user).first()
|
||
|
|
## print(user_id)
|
||
|
|
## print(request.args.get('mode'))
|
||
|
|
## if request.args.get('mode') == 'generated':
|
||
|
|
content = ''
|
||
|
|
for i in id_dict.items():
|
||
|
|
if i[1] == '':
|
||
|
|
content = content + '''\n
|
||
|
|
<p style="text-align: center;">Your passphrase for <strong>''' + str(i[0]) + '''</strong>:</p>
|
||
|
|
<p style="text-align: center;"><strong>''' + str(gen_passphrase(int(i[0]))) + '''</strong></p>
|
||
|
|
'''
|
||
|
|
elif i[1] == 0:
|
||
|
|
content = content + '''\n<p style="text-align: center;">Using legacy auth</p>'''
|
||
|
|
else:
|
||
|
|
content = content + '''\n<p style="text-align: center;">Using custom auth passphrase: ''' + str(i[1]) + '''</p>'''
|
||
|
|
|
||
|
|
|
||
|
|
#return str(content)
|
||
|
|
return render_template('flask_user_layout.html', markup_content = Markup(content), logo = logo)
|
||
|
|
|
||
|
|
# The Members page is only accessible to authenticated users via the @login_required decorator
|
||
|
|
@app.route('/members')
|
||
|
|
@login_required # User must be authenticated
|
||
|
|
def member_page():
|
||
|
|
# String-based templates
|
||
|
|
## return render_template_string("""
|
||
|
|
## {% extends "flask_user_layout.html" %}
|
||
|
|
## {% block content %}
|
||
|
|
## <h2>Members page</h2>
|
||
|
|
## <p><a href={{ url_for('user.register') }}>Register</a></p>
|
||
|
|
## <p><a href={{ url_for('user.login') }}>Sign in</a></p>
|
||
|
|
## <p><a href={{ url_for('home_page') }}>Home page</a> (accessible to anyone)</p>
|
||
|
|
## <p><a href={{ url_for('member_page') }}>Member page</a> (login required)</p>
|
||
|
|
## <p><a href={{ url_for('user.logout') }}>Sign out</a></p>
|
||
|
|
## {% endblock %}
|
||
|
|
## """)
|
||
|
|
content = 'Mem only'
|
||
|
|
return render_template('flask_user_layout.html', markup_content = content, logo = logo)
|
||
|
|
# The Admin page requires an 'Admin' role.
|
||
|
|
@app.route('/admin')
|
||
|
|
@roles_required('Admin') # Use of @roles_required decorator
|
||
|
|
def admin_page():
|
||
|
|
return render_template_string("""
|
||
|
|
{% extends "flask_user_layout.html" %}
|
||
|
|
{% block content %}
|
||
|
|
<h2>{%trans%}Admin Page{%endtrans%}</h2>
|
||
|
|
<p><a href={{ url_for('user.register') }}>{%trans%}Register{%endtrans%}</a></p>
|
||
|
|
<p><a href={{ url_for('user.login') }}>{%trans%}Sign in{%endtrans%}</a></p>
|
||
|
|
<p><a href={{ url_for('home_page') }}>{%trans%}Home Page{%endtrans%}</a> (accessible to anyone)</p>
|
||
|
|
<p><a href={{ url_for('member_page') }}>{%trans%}Member Page{%endtrans%}</a> (login_required: member@example.com / Password1)</p>
|
||
|
|
<p><a href={{ url_for('admin_page') }}>{%trans%}Admin Page{%endtrans%}</a> (role_required: admin@example.com / Password1')</p>
|
||
|
|
<p><a href={{ url_for('user.logout') }}>{%trans%}Sign out{%endtrans%}</a></p>
|
||
|
|
{% endblock %}
|
||
|
|
""")
|
||
|
|
|
||
|
|
def authorized_peer(peer_id):
|
||
|
|
try:
|
||
|
|
u = User.query.filter(User.dmr_ids.contains(str(peer_id))).first()
|
||
|
|
login_passphrase = ast.literal_eval(u.dmr_ids)
|
||
|
|
return [u.is_active, login_passphrase[peer_id]]
|
||
|
|
except:
|
||
|
|
return [False]
|
||
|
|
|
||
|
|
@app.route('/test')
|
||
|
|
def test_peer():
|
||
|
|
## #u = User.query.filter_by(username='kf7eel').first()
|
||
|
|
## u = User.query.filter(User.dmr_ids.contains('3153591')).first()
|
||
|
|
## #tu = User.query.all()
|
||
|
|
## #tu = User.query().all()
|
||
|
|
#### print((tu.dmr_ids))
|
||
|
|
#### #print(tu.dmr_ids)
|
||
|
|
#### return str(tu.dmr_ids) #str(get_ids('kf7eel'))
|
||
|
|
## login_passphrase = ast.literal_eval(u.dmr_ids)
|
||
|
|
## print('|' + login_passphrase[3153591] + '|')
|
||
|
|
## #print(u.dmr_ids)
|
||
|
|
## #tu.dmr_ids = 'jkgfldj'
|
||
|
|
## #db.session.commit()
|
||
|
|
## return str(u.dmr_ids)
|
||
|
|
## u = User.query.filter(User.dmr_ids.contains('3153591')).first()
|
||
|
|
## #tu = User.query.all()
|
||
|
|
## #tu = User.query().all()
|
||
|
|
#### print((tu.dmr_ids))
|
||
|
|
#### #print(tu.dmr_ids)
|
||
|
|
#### return str(tu.dmr_ids) #str(get_ids('kf7eel'))
|
||
|
|
## print(u)
|
||
|
|
## login_passphrase = ast.literal_eval(u.dmr_ids)
|
||
|
|
##
|
||
|
|
## #tu.dmr_ids = 'jkgfldj'
|
||
|
|
## #db.session.commit()
|
||
|
|
## return str([u.is_active, login_passphrase[3153591]])
|
||
|
|
|
||
|
|
return str(authorized_peer(3153591)[0])
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
@app.route('/auth', methods=['POST'])
|
||
|
|
def auth():
|
||
|
|
hblink_req = request.json
|
||
|
|
#print((hblink_req))
|
||
|
|
if hblink_req['secret'] in shared_secrets:
|
||
|
|
if authorized_peer(hblink_req['id'])[0]:
|
||
|
|
if authorized_peer(hblink_req['id'])[1] == 0:
|
||
|
|
response = jsonify(
|
||
|
|
allow=True,
|
||
|
|
mode='legacy',
|
||
|
|
)
|
||
|
|
elif authorized_peer(hblink_req['id'])[1] == '':
|
||
|
|
# normal
|
||
|
|
response = jsonify(
|
||
|
|
allow=True,
|
||
|
|
mode='normal',
|
||
|
|
)
|
||
|
|
elif authorized_peer(hblink_req['id'])[1] != '' or authorized_peer(hblink_req['id'])[1] != 0:
|
||
|
|
response = jsonify(
|
||
|
|
allow=True,
|
||
|
|
mode='override',
|
||
|
|
value=auth_dict[hblink_req['id']]
|
||
|
|
)
|
||
|
|
if authorized_peer(hblink_req['id'])[0] == False:
|
||
|
|
response = jsonify(
|
||
|
|
allow=False)
|
||
|
|
else:
|
||
|
|
message = jsonify(message='Authentication error')
|
||
|
|
response = make_response(message, 401)
|
||
|
|
|
||
|
|
return response
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
return app
|
||
|
|
|
||
|
|
|
||
|
|
if __name__ == '__main__':
|
||
|
|
app = create_app()
|
||
|
|
app.run(debug = True, port=ums_port, host=ums_host)
|