import json from flask import Response, g, jsonify, redirect, render_template, request, session, url_for from ttfrog import app, forms, schema from ttfrog.exceptions import MalformedRequestError, RecordNotFoundError, UnauthorizedError def get_page( path: str, table: str = "Page", doc_id: int = None, create_okay: bool = False ) -> (schema.Record | None, Exception | None): """ Get one page, including its members, but not recursively. """ try: page = app.get_page(g.user, table, doc_id=doc_id, uri=path) except (UnauthorizedError, MalformedRequestError) as e: return None, e except RecordNotFoundError as e: if not create_okay: return None, e return page, None def api_response(response={}, messages=[], error=None): response_code = 200 if error: response_code = 500 response = {} if isinstance(error, UnauthorizedError): response_code = 403 elif isinstance(error, MalformedRequestError): response_code = 4000 elif isinstance(error, RecordNotFoundError): response_code = 404 return jsonify({"messages": messages, "response": response, "code": response_code}), response_code def rendered(page: schema.Record, template: str = "page.html"): if not page: return Response("Page not found", status=404) root = page if page.uri == app.config.VIEW_URI else get_page(app.config.VIEW_URI)[0] return render_template(template, page=page, app=app, breadcrumbs=breadcrumbs(), root=root, user=g.user, g=g) def breadcrumbs(): """ Return (uri, name) pairs for the parents leading from the VIEW_URI to the current request. """ uri = "" names = (request.path.replace(app.config.VIEW_URI, "", 1).strip("/") or "/").split("/") for name in names: uri = "/".join([uri, name]) yield (uri, name) @app.web.before_request def before_request(): g.messages = [] if not request.path.startswith("/static"): user_id = session.get("user_id", 1) g.user = app.db.User.get(doc_id=user_id) session["user_id"] = user_id session["user"] = dict(g.user.serialize()) @app.web.after_request def add_header(r): r.headers["Cache-Control"] = "no-cache, no-store, must-revalidate, public, max-age=0" r.headers["Pragma"] = "no-cache" r.headers["Expires"] = "0" return r @app.web.route(app.config.VIEW_URI) def index(): page, error = get_page(app.config.VIEW_URI) if error: g.messages.append(str(error)) return rendered(page) @app.web.route("/login", methods=["GET", "POST"]) def login(): app.web.session_interface.regenerate(session) if request.method == "POST": username = request.form.get("username") password = request.form.get("password") user = app.authenticate(username, password) if user: g.user = user session["user_id"] = g.user.doc_id session["user"] = dict(g.user.serialize()) return redirect(url_for("index")) g.messages.append(f"Invalid login for {username}") return rendered(schema.Page(name="Login"), "login.html") @app.web.route("/logout") def logout(): if "user_id" in session: del session["user_id"] del g.user return redirect(url_for("index")) @app.web.route(f"{app.config.VIEW_URI}//", methods=["GET"]) @app.web.route(f"{app.config.VIEW_URI}/", methods=["GET"], defaults={"table": "Page"}) def view(table, path): page, error = get_page(request.path, table=table, create_okay=True) if error: g.messages.append(str(error)) return rendered(page) @app.web.route(f"{app.config.API_URI}/put//", methods=["POST"]) @app.web.route(f"{app.config.API_URI}/put/", methods=["POST"], defaults={"table": "Page"}) def put(table, path): app.log.debug(f"Checking for page at {table}/{path} in {table} space") page, error = get_page("/".join([table, path]), table=table, create_okay=True) app.log.debug(f"Found {page.doc_id}") if error: return api_response(error=error) params = json.loads(request.data.decode())["body"] save_data = getattr(forms, table)(page, params).prepare() doc = app.db.save(save_data) if page.doc_id else page.parent.add_member(save_data) app.log.debug(f"Saved: {dict(doc)=}") return api_response(response=dict(doc)) @app.web.route(f"{app.config.API_URI}/get//", methods=["GET"]) def get(table, doc_id): app.log.debug(f"API: getting {table}({doc_id})") page, error = get_page(g.user, table=table, doc_id=doc_id) return api_response(response=dict(page), error=error)