From 2460ef593a17eecad863e8702904292cc9706d9e Mon Sep 17 00:00:00 2001 From: Dirk Engling Date: Mon, 20 Apr 2020 00:52:33 +0200 Subject: Kickoff --- Filer.py | 164 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 164 insertions(+) create mode 100755 Filer.py (limited to 'Filer.py') diff --git a/Filer.py b/Filer.py new file mode 100755 index 0000000..b7defd8 --- /dev/null +++ b/Filer.py @@ -0,0 +1,164 @@ +#!venv/bin/python + +import os +import hashlib +import base64 +import time +from shutil import rmtree + +from flask import Flask, render_template, jsonify, request, redirect, send_from_directory +from flask_dropzone import Dropzone +from argparse import ArgumentParser +from werkzeug.utils import secure_filename + +app = Flask(__name__) +app.config['SECRET_KEY'] = 'Silence is golden. Gerd Eist.' +#app.jinja_env.trim_blocks = True +#app.jinja_env.lstrip_blocks = True + +app.config['PREFERRED_URL_SCHEME'] = 'https' +app.config['DROPZONE_SERVE_LOCAL'] = True +app.config['DROPZONE_MAX_FILE_SIZE'] = 128 +app.config['DROPZONE_UPLOAD_MULTIPLE'] = True +app.config['DROPZONE_PARALLEL_UPLOADS'] = 10 + +app.config['DROPZONE_ALLOWED_FILE_CUSTOM'] = True +app.config['DROPZONE_ALLOWED_FILE_TYPE'] = '' + +app.config['DROPZONE_DEFAULT_MESSAGE'] = 'Ziehe die Dateien hier hin, um sie hochzuladen oder klicken Sie zur Auswahl.' + +dropzone = Dropzone(app) + +basedir = 'Daten' + +#### ADMIN FACING DIRECTORY LISTS #### +#### +#### +@app.route("/admin", methods=['GET']) +def admin(): + url_root = request.url_root.replace('http://', 'https://', 1) + users = os.listdir(os.path.join(basedir, 'Mandanten')) + return render_template('admin.html', users = users, tree = make_tree(basedir, 'Public'), url_root = url_root) + +@app.route("/admin/Dokumente/", methods=['GET']) +def admin_dokumente(user): + return render_template('mandant.html', admin = 'admin/', user = user, tree = make_tree(basedir, os.path.join('Dokumente', user))) + +@app.route("/admin/del-user/", methods=['POST']) +def admin_deluser(user): + method = request.form.get('_method', 'POST') + if method == 'DELETE': + rmtree(os.path.join(basedir, 'Dokumente', secure_filename(user))) + os.unlink(os.path.join(basedir, 'Mandanten', secure_filename(user))) + return redirect('/admin') + +@app.route("/admin/new-user", methods=['POST']) +def admin_newuser(): + password = request.form.get('password', '') + user = request.form.get('user', '') + if not password or not user: + return "Username or password missing", 400 + directory = secure_filename(user) + + salt = os.urandom(4) + sha = hashlib.sha1(password.encode('utf-8')) + sha.update(salt) + + digest_salt_b64 = base64.b64encode(sha.digest()+ salt) + tagged_digest_salt = '{{SSHA}}{}'.format(digest_salt_b64.decode('ascii')) + + try: + if not os.path.exists(os.path.join(basedir, 'Dokumente', directory)): + os.mkdir(os.path.join(basedir, 'Dokumente', directory)) + with open(os.path.join(basedir, 'Mandanten', directory), 'w+', encoding='utf-8') as htpasswd: + htpasswd.write("{}:{}\n".format(user, tagged_digest_salt)) + except OSError as error: + return "Couldn't create user scope", 500 + return redirect('/admin') + +#### USER FACING DIRECTORY LIST #### +#### +#### +@app.route("/Dokumente/", methods=['GET']) +def mandant(user): + return render_template('mandant.html', admin = '', user = user, tree = make_tree(basedir, os.path.join('Dokumente', user))) + +#### UPLOAD FILE ROUTES #### +#### +#### +@app.route('/Dokumente/', methods=['POST']) +@app.route('/admin/Dokumente/', methods=['POST']) +def upload_mandant(user): + for key, f in request.files.items(): + if key.startswith('file'): + username = secure_filename(user) + filename = secure_filename(f.filename) + f.save(os.path.join(basedir, 'Dokumente', username, filename)) + return 'upload template' + +@app.route('/admin', methods=['POST']) +def upload_admin(): + for key, f in request.files.items(): + if key.startswith('file'): + filename = secure_filename(f.filename) + f.save(os.path.join(basedir, 'Public', filename)) + return 'upload template' + +#### DELETE FILE ROUTES #### +#### +#### +@app.route('/Dokumente//', methods=['POST']) +def delete_file_mandant(user, filename): + method = request.form.get('_method', 'POST') + if method == 'DELETE': + os.unlink(os.path.join(basedir, 'Dokumente', secure_filename(user), secure_filename(filename))) + return redirect('/Dokumente/'+user) + +@app.route('/admin/Dokumente//', methods=['POST']) +def delete_file_mandant_admin(user, filename): + method = request.form.get('_method', 'POST') + if method == 'DELETE': + os.unlink(os.path.join(basedir, 'Dokumente', secure_filename(user), secure_filename(filename))) + return redirect('/admin/Dokumente/'+user) + +@app.route('/admin/Public/', methods=['POST']) +def delete_file_admin(filename): + method = request.form.get('_method', 'POST') + if method == 'DELETE': + os.unlink(os.path.join(basedir, 'Public', secure_filename(filename))) + return redirect('/admin') + +#### SERVE FILES RULES #### +#### +#### +@app.route('/admin/Dokumente//', methods=['GET']) +@app.route('/Dokumente//', methods=['GET']) +def custom_static(user, filename): + return send_from_directory(os.path.join(basedir, 'Dokumente'), os.path.join(user, filename)) + +@app.route('/Public/') +def custom_static_public(filename): + return send_from_directory(os.path.join(basedir, 'Public'), filename) + +def make_tree(rel, path): + tree = dict(name=path, download=os.path.basename(path), children=[]) + try: lst = os.listdir(os.path.join(rel,path)) + except OSError: + pass #ignore errors + else: + for name in lst: + fn = os.path.join(path, name) + if os.path.isdir(os.path.join(rel,fn)): + tree['children'].append(make_tree(rel, fn)) + else: + ttl = 10 - int((time.time() - os.path.getmtime(os.path.join(rel,fn))) / (24*3600)) + tree['children'].append(dict(name=fn, download=name, ttl = ttl)) + return tree + +if __name__ == "__main__": + parser = ArgumentParser(description="Filer") + parser.add_argument("-H", "--host", help="Hostname of the Flask app " + "[default %s]" % "127.0.0.1", default="127.0.0.1") + parser.add_argument("-P", "--port", help="Port for the Flask app " + "[default %s]" % "5000", default="5000") + args = parser.parse_args() + + app.run(host=args.host, port=int(args.port)) -- cgit v1.2.3