initial commit of working app
This commit is contained in:
KF7EEL
parent
3ed20d48ac
commit
8adb80f188
317
user_managment/app.py
Normal file
317
user_managment/app.py
Normal file
@ -0,0 +1,317 @@
|
||||
# This file contains an example Flask-User application.
|
||||
# To keep the example simple, we are applying some unusual techniques:
|
||||
# - Placing everything in one file
|
||||
# - Using class-based configuration (instead of file-based configuration)
|
||||
# - Using string-based templates (instead of file-based templates)
|
||||
|
||||
from flask import Flask, render_template_string, request, make_response, jsonify, render_template, Markup
|
||||
from flask_sqlalchemy import SQLAlchemy
|
||||
from flask_user import login_required, UserManager, UserMixin, user_registered, roles_required
|
||||
from flask_login import current_user
|
||||
from wtforms import StringField, SubmitField
|
||||
import requests
|
||||
import base64, hashlib
|
||||
from dmr_utils3.utils import int_id, bytes_4
|
||||
from config import *
|
||||
import ast
|
||||
import json
|
||||
import datetime
|
||||
from flask_babelex import Babel
|
||||
|
||||
def gen_passphrase(dmr_id):
|
||||
_new_peer_id = bytes_4(int(str(dmr_id)[:7]))
|
||||
calc_passphrase = base64.b64encode((_new_peer_id) + append_int.to_bytes(2, 'big'))
|
||||
return str(calc_passphrase)[2:-1]
|
||||
|
||||
def get_ids(callsign):
|
||||
try:
|
||||
url = "https://www.radioid.net"
|
||||
response = requests.get(url+"/api/dmr/user/?callsign=" + callsign)
|
||||
result = response.json()
|
||||
# id_list = []
|
||||
id_list = {}
|
||||
for i in result['results']:
|
||||
id_list[i['id']] = ''
|
||||
return str(id_list)
|
||||
except:
|
||||
return ''
|
||||
|
||||
# Class-based application configuration
|
||||
class ConfigClass(object):
|
||||
""" Flask application config """
|
||||
|
||||
# Flask settings
|
||||
SECRET_KEY = 'Change me'
|
||||
|
||||
# Flask-SQLAlchemy settings
|
||||
SQLALCHEMY_DATABASE_URI = 'sqlite:///mmdvm_users.sqlite' # File-based SQL database
|
||||
SQLALCHEMY_TRACK_MODIFICATIONS = False # Avoids SQLAlchemy warning
|
||||
|
||||
# Flask-User settings
|
||||
USER_APP_NAME = title # Shown in and email templates and page footers
|
||||
USER_ENABLE_EMAIL = False # Disable email authentication
|
||||
USER_ENABLE_USERNAME = True # Enable username authentication
|
||||
USER_REQUIRE_RETYPE_PASSWORD = True # Simplify register form
|
||||
USER_ENABLE_CHANGE_USERNAME = False
|
||||
|
||||
|
||||
# Setup Flask-User
|
||||
def create_app():
|
||||
""" Flask application factory """
|
||||
|
||||
# Create Flask app load app.config
|
||||
app = Flask(__name__)
|
||||
app.config.from_object(__name__+'.ConfigClass')
|
||||
|
||||
# Initialize Flask-BabelEx
|
||||
babel = Babel(app)
|
||||
|
||||
# Initialize Flask-SQLAlchemy
|
||||
db = SQLAlchemy(app)
|
||||
|
||||
# Define the User data-model.
|
||||
# NB: Make sure to add flask_user UserMixin !!!
|
||||
class User(db.Model, UserMixin):
|
||||
__tablename__ = 'users'
|
||||
id = db.Column(db.Integer, primary_key=True)
|
||||
active = db.Column('is_active', db.Boolean(), nullable=False, server_default='1')
|
||||
|
||||
# User authentication information. The collation='NOCASE' is required
|
||||
# to search case insensitively when USER_IFIND_MODE is 'nocase_collation'.
|
||||
username = db.Column(db.String(100, collation='NOCASE'), nullable=False, unique=True)
|
||||
password = db.Column(db.String(255), nullable=False, server_default='')
|
||||
email_confirmed_at = db.Column(db.DateTime())
|
||||
|
||||
# User information
|
||||
first_name = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
|
||||
last_name = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
|
||||
dmr_ids = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
|
||||
# Define the relationship to Role via UserRoles
|
||||
roles = db.relationship('Role', secondary='user_roles')
|
||||
|
||||
# Define the Role data-model
|
||||
class Role(db.Model):
|
||||
__tablename__ = 'roles'
|
||||
id = db.Column(db.Integer(), primary_key=True)
|
||||
name = db.Column(db.String(50), unique=True)
|
||||
|
||||
# Define the UserRoles association table
|
||||
class UserRoles(db.Model):
|
||||
__tablename__ = 'user_roles'
|
||||
id = db.Column(db.Integer(), primary_key=True)
|
||||
user_id = db.Column(db.Integer(), db.ForeignKey('users.id', ondelete='CASCADE'))
|
||||
role_id = db.Column(db.Integer(), db.ForeignKey('roles.id', ondelete='CASCADE'))
|
||||
|
||||
|
||||
user_manager = UserManager(app, db, User)
|
||||
|
||||
|
||||
# Create all database tables
|
||||
db.create_all()
|
||||
|
||||
|
||||
if not User.query.filter(User.username == 'admin').first():
|
||||
user = User(
|
||||
username='admin',
|
||||
email_confirmed_at=datetime.datetime.utcnow(),
|
||||
password=user_manager.hash_password('admin'),
|
||||
)
|
||||
user.roles.append(Role(name='Admin'))
|
||||
user.roles.append(Role(name='User'))
|
||||
db.session.add(user)
|
||||
db.session.commit()
|
||||
|
||||
## from flask_user.forms import RegisterForm
|
||||
## class CustomRegisterForm(RegisterForm):
|
||||
## # Add a country field to the Register form
|
||||
## call = StringField(('Callsign'))
|
||||
##
|
||||
## # Customize the User profile form:
|
||||
## from flask_user.forms import EditUserProfileForm
|
||||
## class CustomUserProfileForm(EditUserProfileForm):
|
||||
## # Add a country field to the UserProfile form
|
||||
## call = StringField(('Callsign'))
|
||||
##
|
||||
## # Customize Flask-User
|
||||
## class CustomUserManager(UserManager):
|
||||
##
|
||||
## def customize(self, app):
|
||||
##
|
||||
## # Configure customized forms
|
||||
## self.RegisterFormClass = CustomRegisterForm
|
||||
## #self.UserProfileFormClass = CustomUserProfileForm
|
||||
## # NB: assign: xyz_form = XyzForm -- the class!
|
||||
## # (and not: xyz_form = XyzForm() -- the instance!)
|
||||
## # Setup Flask-User and specify the User data-model
|
||||
#user_manager = CustomUserManager(app, db, User)
|
||||
|
||||
# Query radioid.net for list of DMR IDs, then add to DB
|
||||
@user_registered.connect_via(app)
|
||||
def _after_user_registered_hook(sender, user, **extra):
|
||||
edit_user = User.query.filter(User.username == user.username).first()
|
||||
edit_user.dmr_ids = get_ids(user.username)
|
||||
db.session.commit()
|
||||
|
||||
# The Home page is accessible to anyone
|
||||
@app.route('/')
|
||||
def home_page():
|
||||
content = Markup('<strong>The HTML String</strong>')
|
||||
# String-based templates
|
||||
## return render_template_string("""
|
||||
## {% extends "flask_user_layout.html" %}
|
||||
## {% block content %}
|
||||
## <h2>Home page</h2>
|
||||
## <p><a href={{ url_for('user.register') }}>Register</a></p>
|
||||
## <p><a href={{ url_for('user.login') }}>Sign in</a></p>
|
||||
## <p><a href={{ url_for('home_page') }}>Home page</a> (accessible to anyone)</p>
|
||||
## <p><a href={{ url_for('member_page') }}>Member page</a> (login required)</p>
|
||||
## <p><a href={{ url_for('user.logout') }}>Sign out</a></p>
|
||||
## {% endblock %}
|
||||
## """)
|
||||
return render_template('index.html', markup_content = content, logo = logo)
|
||||
|
||||
@app.route('/generate_passphrase', methods = ['GET'])
|
||||
@login_required
|
||||
def gen():
|
||||
#content = Markup('<strong>The HTML String</strong>')
|
||||
#user_id = request.args.get('user_id')
|
||||
u = current_user
|
||||
print(u.username)
|
||||
id_dict = ast.literal_eval(u.dmr_ids)
|
||||
#u = User.query.filter_by(username=user).first()
|
||||
## print(user_id)
|
||||
## print(request.args.get('mode'))
|
||||
## if request.args.get('mode') == 'generated':
|
||||
content = ''
|
||||
for i in id_dict.items():
|
||||
if i[1] == '':
|
||||
content = content + '''\n
|
||||
<p style="text-align: center;">Your passphrase for <strong>''' + str(i[0]) + '''</strong>:</p>
|
||||
<p style="text-align: center;"><strong>''' + str(gen_passphrase(int(i[0]))) + '''</strong></p>
|
||||
'''
|
||||
elif i[1] == 0:
|
||||
content = content + '''\n<p style="text-align: center;">Using legacy auth</p>'''
|
||||
else:
|
||||
content = content + '''\n<p style="text-align: center;">Using custom auth passphrase: ''' + str(i[1]) + '''</p>'''
|
||||
|
||||
|
||||
#return str(content)
|
||||
return render_template('flask_user_layout.html', markup_content = Markup(content), logo = logo)
|
||||
|
||||
# The Members page is only accessible to authenticated users via the @login_required decorator
|
||||
@app.route('/members')
|
||||
@login_required # User must be authenticated
|
||||
def member_page():
|
||||
# String-based templates
|
||||
## return render_template_string("""
|
||||
## {% extends "flask_user_layout.html" %}
|
||||
## {% block content %}
|
||||
## <h2>Members page</h2>
|
||||
## <p><a href={{ url_for('user.register') }}>Register</a></p>
|
||||
## <p><a href={{ url_for('user.login') }}>Sign in</a></p>
|
||||
## <p><a href={{ url_for('home_page') }}>Home page</a> (accessible to anyone)</p>
|
||||
## <p><a href={{ url_for('member_page') }}>Member page</a> (login required)</p>
|
||||
## <p><a href={{ url_for('user.logout') }}>Sign out</a></p>
|
||||
## {% endblock %}
|
||||
## """)
|
||||
content = 'Mem only'
|
||||
return render_template('flask_user_layout.html', markup_content = content, logo = logo)
|
||||
# The Admin page requires an 'Admin' role.
|
||||
@app.route('/admin')
|
||||
@roles_required('Admin') # Use of @roles_required decorator
|
||||
def admin_page():
|
||||
return render_template_string("""
|
||||
{% extends "flask_user_layout.html" %}
|
||||
{% block content %}
|
||||
<h2>{%trans%}Admin Page{%endtrans%}</h2>
|
||||
<p><a href={{ url_for('user.register') }}>{%trans%}Register{%endtrans%}</a></p>
|
||||
<p><a href={{ url_for('user.login') }}>{%trans%}Sign in{%endtrans%}</a></p>
|
||||
<p><a href={{ url_for('home_page') }}>{%trans%}Home Page{%endtrans%}</a> (accessible to anyone)</p>
|
||||
<p><a href={{ url_for('member_page') }}>{%trans%}Member Page{%endtrans%}</a> (login_required: member@example.com / Password1)</p>
|
||||
<p><a href={{ url_for('admin_page') }}>{%trans%}Admin Page{%endtrans%}</a> (role_required: admin@example.com / Password1')</p>
|
||||
<p><a href={{ url_for('user.logout') }}>{%trans%}Sign out{%endtrans%}</a></p>
|
||||
{% endblock %}
|
||||
""")
|
||||
|
||||
def authorized_peer(peer_id):
|
||||
try:
|
||||
u = User.query.filter(User.dmr_ids.contains(str(peer_id))).first()
|
||||
login_passphrase = ast.literal_eval(u.dmr_ids)
|
||||
return [u.is_active, login_passphrase[peer_id]]
|
||||
except:
|
||||
return [False]
|
||||
|
||||
@app.route('/test')
|
||||
def test_peer():
|
||||
## #u = User.query.filter_by(username='kf7eel').first()
|
||||
## u = User.query.filter(User.dmr_ids.contains('3153591')).first()
|
||||
## #tu = User.query.all()
|
||||
## #tu = User.query().all()
|
||||
#### print((tu.dmr_ids))
|
||||
#### #print(tu.dmr_ids)
|
||||
#### return str(tu.dmr_ids) #str(get_ids('kf7eel'))
|
||||
## login_passphrase = ast.literal_eval(u.dmr_ids)
|
||||
## print('|' + login_passphrase[3153591] + '|')
|
||||
## #print(u.dmr_ids)
|
||||
## #tu.dmr_ids = 'jkgfldj'
|
||||
## #db.session.commit()
|
||||
## return str(u.dmr_ids)
|
||||
## u = User.query.filter(User.dmr_ids.contains('3153591')).first()
|
||||
## #tu = User.query.all()
|
||||
## #tu = User.query().all()
|
||||
#### print((tu.dmr_ids))
|
||||
#### #print(tu.dmr_ids)
|
||||
#### return str(tu.dmr_ids) #str(get_ids('kf7eel'))
|
||||
## print(u)
|
||||
## login_passphrase = ast.literal_eval(u.dmr_ids)
|
||||
##
|
||||
## #tu.dmr_ids = 'jkgfldj'
|
||||
## #db.session.commit()
|
||||
## return str([u.is_active, login_passphrase[3153591]])
|
||||
|
||||
return str(authorized_peer(3153591)[0])
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@app.route('/auth', methods=['POST'])
|
||||
def auth():
|
||||
hblink_req = request.json
|
||||
#print((hblink_req))
|
||||
if hblink_req['secret'] in shared_secrets:
|
||||
if authorized_peer(hblink_req['id'])[0]:
|
||||
if authorized_peer(hblink_req['id'])[1] == 0:
|
||||
response = jsonify(
|
||||
allow=True,
|
||||
mode='legacy',
|
||||
)
|
||||
elif authorized_peer(hblink_req['id'])[1] == '':
|
||||
# normal
|
||||
response = jsonify(
|
||||
allow=True,
|
||||
mode='normal',
|
||||
)
|
||||
elif authorized_peer(hblink_req['id'])[1] != '' or authorized_peer(hblink_req['id'])[1] != 0:
|
||||
response = jsonify(
|
||||
allow=True,
|
||||
mode='override',
|
||||
value=auth_dict[hblink_req['id']]
|
||||
)
|
||||
if authorized_peer(hblink_req['id'])[0] == False:
|
||||
response = jsonify(
|
||||
allow=False)
|
||||
else:
|
||||
message = jsonify(message='Authentication error')
|
||||
response = make_response(message, 401)
|
||||
|
||||
return response
|
||||
|
||||
|
||||
|
||||
return app
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
app = create_app()
|
||||
app.run(debug = True, port=ums_port, host=ums_host)
|
||||
@ -4,9 +4,9 @@ Settings for user management portal.
|
||||
'''
|
||||
|
||||
# Title of the Dashboard
|
||||
title = 'PNW MMDVM User Portal'
|
||||
title = 'MMDVM User Portal'
|
||||
# Logo used on dashboard page
|
||||
logo = 'http://pnwdigital.net/images/Logos/PP-PNW-Logo-12b-Clean-250c.png'
|
||||
logo = 'https://github.com/HBLink-org/hblink3/raw/master/HBlink.png'
|
||||
# Port to run server
|
||||
ums_port = 8080
|
||||
# IP to run server on
|
||||
121
user_managment/templates/flask_user_layout.html
Normal file
121
user_managment/templates/flask_user_layout.html
Normal file
@ -0,0 +1,121 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>{{ user_manager.USER_APP_NAME }}</title>
|
||||
|
||||
<!-- Bootstrap -->
|
||||
<link href="//netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css" rel="stylesheet">
|
||||
|
||||
<!-- In-lining styles to avoid needing a separate .css file -->
|
||||
<style>
|
||||
hr { border-color: #cccccc; margin: 0; }
|
||||
.no-margins { margin: 0px; }
|
||||
.with-margins { margin: 10px; }
|
||||
.col-centered { float: none; margin: 0 auto; }
|
||||
</style>
|
||||
|
||||
<!-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries -->
|
||||
<!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
|
||||
<!--[if lt IE 9]>
|
||||
<script src="//cdnjs.cloudflare.com/ajax/libs/html5shiv/3.7/html5shiv.js"></script>
|
||||
<script src="//cdnjs.cloudflare.com/ajax/libs/respond.js/1.4.2/respond.js"></script>
|
||||
<![endif]-->
|
||||
|
||||
{# *** Allow sub-templates to insert extra html to the head section *** #}
|
||||
{% block extra_css %}{% endblock %}
|
||||
</head>
|
||||
|
||||
|
||||
<body>
|
||||
<h1 style="text-align: center;">{{ user_manager.USER_APP_NAME }}</h1>
|
||||
<p><img style="display: block; margin-left: auto; margin-right: auto;" src="{{logo}}" alt="Logo" width="300" height="144" /></p>
|
||||
<h1 style="text-align: center;">{{title}}</h1>
|
||||
<hr />
|
||||
<table style="width: 500px; margin-left: auto; margin-right: auto;" border="black" cellspacing="3" cellpadding="3">
|
||||
<tbody>
|
||||
<tr>
|
||||
|
||||
<td style="text-align: center;"><a href={{url}}/>Home</a></td>
|
||||
<td style="text-align: center;"><a href={{ url_for('user.register') }}>Register</a></td>
|
||||
<td style="text-align: center;"><a href={{ url_for('user.login') }}>Sign in</a></td>
|
||||
{% if call_or_get(current_user.is_authenticated) %}
|
||||
<td style="text-align: center;"><a href={{url}}/generate_passphrase>View Passphrase(s)</a></td>
|
||||
<td style="text-align: center;"><a href="{{ url_for('user.edit_user_profile') }}">Edit {{ current_user.username or current_user.email }}</a></td>
|
||||
<td style="text-align: center;"><a href={{ url_for('user.logout') }}>Sign out</a></td>
|
||||
{% endif %}
|
||||
|
||||
|
||||
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<hr />
|
||||
{% block body %}
|
||||
<!--
|
||||
<div id="header-div" class="clearfix with-margins">
|
||||
<div class="pull-left"><a href="/"><h1 class="no-margins">{{ user_manager.USER_APP_NAME }}</h1></a></div>
|
||||
<div class="pull-right">
|
||||
{% if call_or_get(current_user.is_authenticated) %}
|
||||
<a href="{{ url_for('user.edit_user_profile') }}">{{ current_user.username or current_user.email }}</a>
|
||||
|
|
||||
<a href="{{ url_for('user.logout') }}">{%trans%}Sign out{%endtrans%}</a>
|
||||
{% else %}
|
||||
<a href="{{ url_for('user.login') }}">{%trans%}Sign in{%endtrans%}</a>
|
||||
{% endif %}
|
||||
</div>
|
||||
|
||||
</div>
|
||||
{% block menu %}
|
||||
<div id="menu-div" class="with-margins">
|
||||
<a href="/">{%trans%}Home page{%endtrans%}</a>
|
||||
</div>
|
||||
{% endblock %}
|
||||
-->
|
||||
<hr class="no-margins"/>
|
||||
|
||||
<div id="main-div" class="with-margins">
|
||||
{# One-time system messages called Flash messages #}
|
||||
{% block flash_messages %}
|
||||
{%- with messages = get_flashed_messages(with_categories=true) -%}
|
||||
{% if messages %}
|
||||
{% for category, message in messages %}
|
||||
{% if category=='error' %}
|
||||
{% set category='danger' %}
|
||||
{% endif %}
|
||||
<div class="alert alert-{{category}}">{{ message|safe }}</div>
|
||||
{% endfor %}
|
||||
{% endif %}
|
||||
{%- endwith %}
|
||||
{% endblock %}
|
||||
{% block main %}
|
||||
{% block content %}
|
||||
|
||||
{{markup_content}}
|
||||
|
||||
|
||||
{% endblock %}
|
||||
{% endblock %}
|
||||
</div>
|
||||
|
||||
<br/>
|
||||
<hr class="no-margins"/>
|
||||
<div id="footer-div" class="clearfix with-margins">
|
||||
<div class="pull-left">{{ user_manager.USER_APP_NAME }}</div>
|
||||
<div class="pull-right">Credits: KF7EEL, W7NCX, N9VW, KC7AAD, NO7RF</div>
|
||||
</div>
|
||||
{% endblock %}
|
||||
|
||||
|
||||
<!-- jQuery (necessary for Bootstrap's JavaScript plugins) -->
|
||||
<script src="//code.jquery.com/jquery-1.11.0.min.js"></script>
|
||||
<!-- Bootstrap -->
|
||||
<script src="//netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js"></script>
|
||||
|
||||
{# *** Allow sub-templates to insert extra html to the bottom of the body *** #}
|
||||
{% block extra_js %}{% endblock %}
|
||||
|
||||
</body>
|
||||
</html>
|
||||
4
user_managment/templates/index.html
Normal file
4
user_managment/templates/index.html
Normal file
@ -0,0 +1,4 @@
|
||||
{% extends 'flask_user/_public_base.html' %}
|
||||
{% block content %}
|
||||
<p>Welcome to the <strong>{{ user_manager.USER_APP_NAME }}</strong>. This tool is used to manage your access.</p>
|
||||
{% endblock %}
|
||||
Loading…
Reference in New Issue
Block a user