import logging import os import re import configparser from pathlib import Path from werkzeug.security import check_password_hash from flask import Flask, render_template, request, redirect, flash, safe_join, send_file from flask_dropzone import Dropzone from flask_migrate import Migrate, MigrateCommand from flask_script import Manager from flask_login import LoginManager, login_required, login_user, current_user from portal.model import db, RegisteredUser import portal.base import portal.solar import portal.regular import portal.predavanja # TODO: Implement user registration. # TODO: Integrate Shibboleth login. # TODO: make logging level configurable logging.basicConfig(level=logging.DEBUG, format='[APP LOGGER] %(asctime)s %(levelname)s: %(message)s') ###################### # Load configuration # ###################### config = configparser.ConfigParser() config.read('config.ini') config = config['DEFAULT'] MAIL_HOST = config['MAIL_HOST'] MAIL_LOGIN = config['MAIL_LOGIN'] MAIL_PASS = config['MAIL_PASS'] APP_SECRET_KEY = bytes.fromhex(config['APP_SECRET_KEY']) SMTP_PORT = int(config['SMTP_PORT']) IMAP_PORT = int(config['IMAP_PORT']) MAX_UPLOAD_SIZE = int(config['MAX_UPLOAD_SIZE']) # Bytes MAX_FILES_PER_UPLOAD = int(config['MAX_FILES_PER_UPLOAD']) CONTRACT_CLIENT_CONTACT = config['CONTRACT_CLIENT_CONTACT'] MAIL_SUBJECT = config['MAIL_SUBJECT'] MAIL_BODY = config['MAIL_BODY'] MAIL_SUBJECT_PREDAVANJA = config['MAIL_SUBJECT_PREDAVANJA'] MAIL_BODY_PREDAVANJA = config['MAIL_BODY_PREDAVANJA'] SQL_CONN_STR = config['SQL_CONN_STR'] DESC_PREVODI = config['DESC_PREVODI'] DESC_GIGAFIDA = config['DESC_GIGAFIDA'] DESC_PREDAVANJA = config['DESC_PREDAVANJA'] if 'UPLOADS_DIR' in config: UPLOADS_DIR = Path(config['UPLOADS_DIR']) else: UPLOADS_DIR = Path(__file__).resolve().parent / 'uploads' if not UPLOADS_DIR.exists: UPLOADS_DIR.mkdir(parents=True) # Override configs with environment variables, if set if 'PORTALDS4DS1_MAIL_HOST' in os.environ: MAIL_HOST = os.environ['PORTALDS4DS1_MAIL_HOST'] if 'PORTALDS4DS1_MAIL_LOGIN' in os.environ: MAIL_LOGIN = os.environ['PORTALDS4DS1_MAIL_LOGIN'] if 'PORTALDS4DS1_MAIL_PASS' in os.environ: MAIL_PASS = os.environ['PORTALDS4DS1_MAIL_PASS'] if 'PORTALDS4DS1_APP_SECRET_KEY' in os.environ: APP_SECRET_KEY = bytes.fromhex(os.environ['PORTALDS4DS1_APP_SECRET_KEY']) if 'PORTALDS4DS1_SMTP_PORT' in os.environ: SMTP_PORT = int(os.environ['PORTALDS4DS1_SMTP_PORT']) if 'PORTALDS4DS1_IMAP_PORT' in os.environ: IMAP_PORT = int(os.environ['PORTALDS4DS1_IMAP_PORT']) if 'PORTALDS4DS1_MAX_UPLOAD_SIZE' in os.environ: MAX_UPLOAD_SIZE = int(os.environ['PORTALDS4DS1_MAX_UPLOAD_SIZE']) if 'PORTALDS4DS1_MAX_FILES_PER_UPLOAD' in os.environ: MAX_FILES_PER_UPLOAD = int(os.environ['PORTALDS4DS1_MAX_FILES_PER_UPLOAD']) if 'PORTALDS4DS1_CONTRACT_CLIENT_CONTACT' in os.environ: CONTRACT_CLIENT_CONTACT = os.environ['PORTALDS4DS1_CONTRACT_CLIENT_CONTACT'] if 'PORTALDS4DS1_UPLOADS_DIR' in os.environ: UPLOADS_DIR = os.environ['PORTALDS4DS1_UPLOADS_DIR'] if 'PORTALDS4DS1_MAIL_SUBJECT' in os.environ: MAIL_SUBJECT = os.environ['PORTALDS4DS1_MAIL_SUBJECT'] if 'PORTALDS4DS1_MAIL_BODY' in os.environ: MAIL_BODY = os.environ['PORTALDS4DS1_MAIL_BODY'] if 'PORTALDS4DS1_MAIL_SUBJECT_PREDAVANJA' in os.environ: MAIL_SUBJECT_PREDAVANJA = os.environ['PORTALDS4DS1_MAIL_SUBJECT_PREDAVANJA'] if 'PORTALDS4DS1_MAIL_BODY_PREDAVANJA' in os.environ: MAIL_BODY_PREDAVANJA = os.environ['PORTALDS4DS1_MAIL_BODY_PREDAVANJA'] if 'PORTALDS4DS1_SQL_CONN_STR' in os.environ: SQL_CONN_STR = os.environ['PORTALDS4DS1_SQL_CONN_STR'] if 'PORTALDS4DS1_DESC_PREVODI' in os.environ: DESC_PREVODI = os.environ['PORTALDS4DS1_DESC_PREVODI'] if 'PORTALDS4DS1_DESC_GIGAFIDA' in os.environ: DESC_GIGAFIDA = os.environ['PORTALDS4DS1_DESC_GIGAFIDA'] ENABLED_CORPUSES = ['prevodi', 'gigafida', 'solar', 'predavanja'] CORPUSES_LOGIN_REQUIRED = ['solar'] ###################### app = Flask(__name__) app.config.update( SECRET_KEY = APP_SECRET_KEY, UPLOADED_PATH = UPLOADS_DIR, MAX_CONTENT_LENGTH = MAX_UPLOAD_SIZE, TEMPLATES_AUTO_RELOAD = True, SQLALCHEMY_DATABASE_URI = SQL_CONN_STR, SQLALCHEMY_ECHO = True ) app.url_map.strict_slashes = False # Run "python app.py db -?" to see more info about DB migrations. manager = Manager(app) db.init_app(app) migrate = Migrate(app, db) manager.add_command('db', MigrateCommand) # Set up dropzone.js to serve all the stuff for "file dropping" on the web interface. dropzone = Dropzone(app) upload_handler_regular = portal.regular.UploadHandlerRegular( UPLOADS_DIR=UPLOADS_DIR, MAIL_HOST=MAIL_HOST, MAIL_LOGIN=MAIL_LOGIN, MAIL_PASS=MAIL_PASS, SMTP_PORT=SMTP_PORT, IMAP_PORT=IMAP_PORT, MAIL_SUBJECT=MAIL_SUBJECT, MAIL_BODY=MAIL_BODY, CONTRACT_CLIENT_CONTACT=CONTRACT_CLIENT_CONTACT, MAX_FILES_PER_UPLOAD=MAX_FILES_PER_UPLOAD ) upload_handler_solar = portal.solar.UploadHandlerSolar( UPLOADS_DIR=UPLOADS_DIR, MAIL_HOST=MAIL_HOST, MAIL_LOGIN=MAIL_LOGIN, MAIL_PASS=MAIL_PASS, SMTP_PORT=SMTP_PORT, IMAP_PORT=IMAP_PORT, MAIL_SUBJECT=MAIL_SUBJECT, MAIL_BODY=MAIL_BODY, CONTRACT_CLIENT_CONTACT=CONTRACT_CLIENT_CONTACT, MAX_FILES_PER_UPLOAD=MAX_FILES_PER_UPLOAD ) upload_handler_predavanja = portal.predavanja.UploadHandlerPredavanja( UPLOADS_DIR=UPLOADS_DIR, MAIL_HOST=MAIL_HOST, MAIL_LOGIN=MAIL_LOGIN, MAIL_PASS=MAIL_PASS, SMTP_PORT=SMTP_PORT, IMAP_PORT=IMAP_PORT, MAIL_SUBJECT=MAIL_SUBJECT_PREDAVANJA, MAIL_BODY=MAIL_BODY_PREDAVANJA, CONTRACT_CLIENT_CONTACT=CONTRACT_CLIENT_CONTACT, MAX_FILES_PER_UPLOAD=MAX_FILES_PER_UPLOAD ) # Use flask-login to manage user sessions where they are required. login_manager = LoginManager(app) login_manager.init_app(app) @app.route('/') def index(): return render_template('index.html') @app.route('/') def index_corpus(corpus_name): if corpus_name not in ENABLED_CORPUSES: return 'Korpus "{}" ne obstaja.'.format(corpus_name), 404 if corpus_name == 'prevodi': description = DESC_PREVODI elif corpus_name == 'gigafida': description = DESC_GIGAFIDA elif corpus_name == 'predavanja': return render_template('basic-predavanja.html', description=DESC_PREDAVANJA, max_files=MAX_FILES_PER_UPLOAD) elif corpus_name == 'solar': if current_user.is_authenticated: return redirect('/solar/oddaja') return redirect('/solar/login') return render_template('basic.html', corpus_name=corpus_name, description=description, max_files=MAX_FILES_PER_UPLOAD) @login_manager.user_loader def load_user(user_id): return RegisteredUser.query.get(int(user_id)) @app.route('/solar/login') def login_get(): return render_template('login.html', corpus_name='solar', title='ŠOLAR') @app.route('//login', methods=['POST']) def login_post(corpus_name): if corpus_name not in ENABLED_CORPUSES or corpus_name not in CORPUSES_LOGIN_REQUIRED: return 404 email = request.form.get('email') password = request.form.get('password') remember = True if request.form.get('remember') else False user = RegisteredUser.query.filter_by(email=email).first() if not user or not check_password_hash(user.pass_hash, password): flash('Napačni podatki za prijavo. Poskusite ponovno.') return redirect('/{}/login'.format(corpus_name)) if not user.active: flash('Vaš uporabniški račun še ni bil aktiviran.') return redirect('/{}/login'.format(corpus_name)) # Check if user is authorized to log into this corpus. Admins are an exception. if not portal.base.has_user_corpus_access(user.id, corpus_name): flash('Nimate dostop do tega korpusa.') return redirect('/{}/login'.format(corpus_name)) login_user(user, remember=remember) if corpus_name == 'solar': return redirect('/solar/oddaja') return 404 # TODO: Move solar stuff to seperate file using Flask blueprints. # TODO: Better routing logic. @app.route('/solar/') @login_required def solar(text): if not portal.base.has_user_corpus_access(current_user.id, 'solar'): return 404 if text.startswith('oddaja/') or text == 'oddaja': return render_template('solar-oddaja.html') elif text.startswith('zgodovina/') or text == 'zgodovina': upload_items = portal.solar.get_upload_history(current_user.id) uploader_names = [] institution_names = [] for item in upload_items: uploader_names.append(portal.base.get_user_obj(current_user.id).name) institution = portal.base.get_institution_obj(item.institution) if not institution: institution_names.append(None) else: institution_names.append(institution.name) return render_template('solar-zgodovina.html', upload_history=upload_items, uploader_names=uploader_names, institution_names=institution_names) elif text.startswith('pogodbe/') or text == 'pogodbe': # Check for ownload contract request. match = re.match('^pogodbe/[a-z0-9_]+\.pdf$', text) if match: filename = match.group(1) safe_path = safe_join(str(upload_handler_solar.get_uploads_subdir('contracts')), filename) try: return send_file(safe_path, as_attachment=True) except FileNotFoundError: return 404 user_obj = portal.base.get_user_obj(current_user.get_id()) institution_id = user_obj.institution contracts_students = [] contract_school = None show_upload_form = True if institution_id: contracts_students = portal.solar.get_institution_student_contracts(institution_id) contract_school = portal.solar.get_institution_contract(institution_id) else: show_upload_form = False return render_template('solar-pogodbe.html', contracts_students=contracts_students, contract_school=contract_school, show_upload_form=show_upload_form) elif text.startswith('admin/') or text == 'admin': if current_user.role == 'admin': return render_template('solar-admin.html') return 404 @app.route('/solar/pogodbe', methods=['POST']) @login_required def solar_upload_contract(): if not portal.base.has_user_corpus_access(current_user.id, 'solar'): return 404 return upload_handler_solar.handle_contract_upload(request, current_user.get_id()) @app.route('//upload', methods=['POST']) def handle_upload(corpus_name): if corpus_name not in ENABLED_CORPUSES: return 404 if corpus_name == 'solar': if not current_user.is_authenticated: return 404 if not portal.base.has_user_corpus_access(current_user.id, corpus_name): return 404 return upload_handler_solar.handle_upload(request, current_user.get_id()) elif corpus_name == 'predavanja': return upload_handler_predavanja.handle_upload(request) else: return upload_handler_regular.handle_upload(request, corpus_name) if __name__ == '__main__': app.run(debug=True)