import json from flask import Response, g, jsonify, redirect, render_template, request, session, url_for from ttfrog import app, forms, schema from ttfrog.exceptions import MalformedRequestError, RecordNotFoundError, UnauthorizedError from tinydb import where import re def get_page( path: str, table: str = "Page", doc_id: int = None, create_okay: bool = False ) -> (schema.Record | None, Exception | None): """ Get one page, including its members, but not recursively. """ try: page = app.get_page(g.user, table, doc_id=doc_id, uri=path) except (UnauthorizedError, MalformedRequestError) as e: return None, e except RecordNotFoundError as e: if not create_okay: return None, e return page, None def api_response(response={}, messages=[], error=None): response_code = 200 if error: response_code = 500 response = {} if isinstance(error, UnauthorizedError): response_code = 403 elif isinstance(error, MalformedRequestError): response_code = 4000 elif isinstance(error, RecordNotFoundError): response_code = 404 return jsonify({"messages": messages, "response": response, "code": response_code}), response_code def rendered(page: schema.Record, template: str = "page.html"): if not page: return Response("Page not found", status=404) root = page if page.uri == "" else get_page("")[0] return render_template(template, page=page, app=app, breadcrumbs=breadcrumbs(), root=root, user=g.user, g=g) def breadcrumbs(): """ Return (uri, name) pairs for the parents leading from the VIEW_URI to the current request. """ uri = "" names = (request.path.replace(app.config.VIEW_URI, "", 1).strip("/") or "/").split("/") for name in names: uri = "/".join([uri, name]) yield (uri, name) @app.web.before_request def before_request(): g.messages = [] if not request.path.startswith("/static"): user_id = session.get("user_id", 1) g.user = app.db.User.get(doc_id=user_id, recurse=False) session["user_id"] = user_id session["user"] = dict(g.user.serialize()) @app.web.after_request def add_header(r): r.headers["Cache-Control"] = "no-cache, no-store, must-revalidate, public, max-age=0" r.headers["Pragma"] = "no-cache" r.headers["Expires"] = "0" return r @app.web.route(app.config.VIEW_URI) def index(): page, error = get_page("") if error: g.messages.append(str(error)) return rendered(page) @app.web.route("/login", methods=["GET", "POST"]) def login(): app.web.session_interface.regenerate(session) if request.method == "POST": username = request.form.get("username") password = request.form.get("password") user = app.authenticate(username, password) if user: g.user = user session["user_id"] = g.user.doc_id session["user"] = dict(g.user.serialize()) return redirect(url_for("index")) g.messages.append(f"Invalid login for {username}") return rendered(schema.Page(name="Login"), "login.html") @app.web.route("/logout") def logout(): if "user_id" in session: del session["user_id"] del g.user return redirect(url_for("index")) @app.web.route(f"{app.config.VIEW_URI}//", methods=["GET"]) @app.web.route(f"{app.config.VIEW_URI}/", methods=["GET"], defaults={"table": "Page"}) def view(table, path): page, error = get_page(request.path, table=table, create_okay=True) if error: g.messages.append(str(error)) return rendered(page) @app.web.route(f"{app.config.API_URI}/put//", methods=["POST"]) @app.web.route(f"{app.config.API_URI}/put/", methods=["POST"], defaults={"table": "Page"}) def put(table, path): app.log.debug(f"Checking for page at {table}/{path} in {table} space") page, error = get_page("/".join([table, path]), table=table, create_okay=True) app.log.debug(f"Found {page.doc_id}") if error: return api_response(error=error) params = json.loads(request.data.decode())["body"] save_data = getattr(forms, table)(page, params).prepare() app.log.debug("Saving form data...") doc = app.db.save(save_data) app.log.debug(f"Saved {dict(doc)}") if not page.doc_id: print(f"Adding {doc.doc_id} to {page.parent.members}") page.parent.members = list(set(page.parent.members + [doc])) app.db.save(page.parent) app.log.debug(f"Saved: {dict(doc)=}") return api_response(response=dict(doc)) @app.web.route(f"{app.config.API_URI}/search/", methods=["POST"]) @app.web.route(f"{app.config.API_URI}/search/", methods=["POST"], defaults={"space": None}) def search(space): spaces = app.db.tables() if space: spaces = [space.lower().capitalize()] query = json.loads(request.data.decode())["body"] app.log.debug(f"Searching for records matching query {query}") matches = [] for space in spaces: for page in app.db.table(space).search(where('name').matches(query, re.IGNORECASE), recurse=False): if app.authorize(g.user, page, schema.Permissions.READ): app.log.debug(f"Adding search result {dict(page)}") matches.append(dict(page)) return api_response( response=matches, error=None if matches else RecordNotFoundError(f"No records matching '{query}'") ) @app.web.route(f"{app.config.API_URI}/get//", methods=["GET"]) def get(table, doc_id): app.log.debug(f"API: getting {table}({doc_id})") page, error = get_page(g.user, table=table, doc_id=doc_id) return api_response(response=dict(page), error=error)