1 files changed, 164 insertions, 0 deletions

diff --git a/Filer.py b/Filer.py
new file mode 100755
index 0000000..b7defd8
--- /dev/null
+++ b/Filer.py
@@ -0,0 +1,164 @@
+#!venv/bin/python
+
+import os
+import hashlib
+import base64
+import time
+from shutil import rmtree
+
+from flask import Flask, render_template, jsonify, request, redirect, send_from_directory
+from flask_dropzone import Dropzone
+from argparse import ArgumentParser
+from werkzeug.utils import secure_filename
+
+app = Flask(__name__)
+app.config['SECRET_KEY'] = 'Silence is golden. Gerd Eist.'
+#app.jinja_env.trim_blocks = True
+#app.jinja_env.lstrip_blocks = True
+
+app.config['PREFERRED_URL_SCHEME'] = 'https'
+app.config['DROPZONE_SERVE_LOCAL'] = True
+app.config['DROPZONE_MAX_FILE_SIZE'] = 128
+app.config['DROPZONE_UPLOAD_MULTIPLE'] = True
+app.config['DROPZONE_PARALLEL_UPLOADS'] = 10
+
+app.config['DROPZONE_ALLOWED_FILE_CUSTOM'] = True
+app.config['DROPZONE_ALLOWED_FILE_TYPE'] = ''
+
+app.config['DROPZONE_DEFAULT_MESSAGE'] = 'Ziehe die Dateien hier hin, um sie hochzuladen oder klicken Sie zur Auswahl.'
+
+dropzone = Dropzone(app)
+
+basedir = 'Daten'
+
+#### ADMIN FACING DIRECTORY LISTS ####
+####
+####
+@app.route("/admin", methods=['GET'])
+def admin():
+    url_root = request.url_root.replace('http://', 'https://', 1)
+    users = os.listdir(os.path.join(basedir, 'Mandanten'))
+    return render_template('admin.html', users = users, tree = make_tree(basedir, 'Public'), url_root = url_root)
+
+@app.route("/admin/Dokumente/<user>", methods=['GET'])
+def admin_dokumente(user):
+    return render_template('mandant.html', admin = 'admin/', user = user, tree = make_tree(basedir, os.path.join('Dokumente', user)))
+
+@app.route("/admin/del-user/<user>", methods=['POST'])
+def admin_deluser(user):
+    method = request.form.get('_method', 'POST')
+    if method == 'DELETE':
+        rmtree(os.path.join(basedir, 'Dokumente', secure_filename(user)))
+        os.unlink(os.path.join(basedir, 'Mandanten', secure_filename(user)))
+    return redirect('/admin')
+
+@app.route("/admin/new-user", methods=['POST'])
+def admin_newuser():
+    password = request.form.get('password', '')
+    user = request.form.get('user', '')
+    if not password or not user:
+        return "Username or password missing", 400
+    directory = secure_filename(user)
+
+    salt = os.urandom(4)
+    sha = hashlib.sha1(password.encode('utf-8'))
+    sha.update(salt)
+
+    digest_salt_b64 = base64.b64encode(sha.digest()+ salt)
+    tagged_digest_salt = '{{SSHA}}{}'.format(digest_salt_b64.decode('ascii'))
+
+    try:
+        if not os.path.exists(os.path.join(basedir, 'Dokumente', directory)):
+            os.mkdir(os.path.join(basedir, 'Dokumente', directory))
+        with open(os.path.join(basedir, 'Mandanten', directory), 'w+', encoding='utf-8') as htpasswd:
+            htpasswd.write("{}:{}\n".format(user, tagged_digest_salt))
+    except OSError as error:
+        return "Couldn't create user scope", 500
+    return redirect('/admin')
+
+#### USER FACING DIRECTORY LIST ####
+####
+####
+@app.route("/Dokumente/<user>", methods=['GET'])
+def mandant(user):
+    return render_template('mandant.html', admin = '', user = user, tree = make_tree(basedir, os.path.join('Dokumente', user)))
+
+#### UPLOAD FILE ROUTES ####
+####
+####
+@app.route('/Dokumente/<user>', methods=['POST'])
+@app.route('/admin/Dokumente/<user>', methods=['POST'])
+def upload_mandant(user):
+    for key, f in request.files.items():
+        if key.startswith('file'):
+            username = secure_filename(user)
+            filename = secure_filename(f.filename)
+            f.save(os.path.join(basedir, 'Dokumente', username, filename))
+    return 'upload template'
+
+@app.route('/admin', methods=['POST'])
+def upload_admin():
+    for key, f in request.files.items():
+        if key.startswith('file'):
+            filename = secure_filename(f.filename)
+            f.save(os.path.join(basedir, 'Public', filename))
+    return 'upload template'
+
+#### DELETE FILE ROUTES ####
+####
+####
+@app.route('/Dokumente/<user>/<path:filename>', methods=['POST'])
+def delete_file_mandant(user, filename):
+    method = request.form.get('_method', 'POST')
+    if method == 'DELETE':
+        os.unlink(os.path.join(basedir, 'Dokumente', secure_filename(user), secure_filename(filename)))
+    return redirect('/Dokumente/'+user)
+
+@app.route('/admin/Dokumente/<user>/<path:filename>', methods=['POST'])
+def delete_file_mandant_admin(user, filename):
+    method = request.form.get('_method', 'POST')
+    if method == 'DELETE':
+        os.unlink(os.path.join(basedir, 'Dokumente', secure_filename(user), secure_filename(filename)))
+    return redirect('/admin/Dokumente/'+user)
+
+@app.route('/admin/Public/<path:filename>', methods=['POST'])
+def delete_file_admin(filename):
+    method = request.form.get('_method', 'POST')
+    if method == 'DELETE':
+        os.unlink(os.path.join(basedir, 'Public', secure_filename(filename)))
+    return redirect('/admin')
+
+#### SERVE FILES RULES ####
+####
+####
+@app.route('/admin/Dokumente/<user>/<path:filename>', methods=['GET'])
+@app.route('/Dokumente/<user>/<path:filename>', methods=['GET'])
+def custom_static(user, filename):
+    return send_from_directory(os.path.join(basedir, 'Dokumente'), os.path.join(user, filename))
+
+@app.route('/Public/<path:filename>')
+def custom_static_public(filename):
+    return send_from_directory(os.path.join(basedir, 'Public'), filename)
+
+def make_tree(rel, path):
+    tree = dict(name=path, download=os.path.basename(path), children=[])
+    try: lst = os.listdir(os.path.join(rel,path))
+    except OSError:
+        pass #ignore errors
+    else:
+        for name in lst:
+            fn = os.path.join(path, name)
+            if os.path.isdir(os.path.join(rel,fn)):
+                tree['children'].append(make_tree(rel, fn))
+            else:
+                ttl = 10 -  int((time.time() - os.path.getmtime(os.path.join(rel,fn))) / (24*3600))
+                tree['children'].append(dict(name=fn, download=name, ttl = ttl))
+    return tree
+
+if __name__ == "__main__":
+    parser = ArgumentParser(description="Filer")
+    parser.add_argument("-H", "--host", help="Hostname of the Flask app " + "[default %s]" % "127.0.0.1", default="127.0.0.1")
+    parser.add_argument("-P", "--port", help="Port for the Flask app " + "[default %s]" % "5000", default="5000")
+    args = parser.parse_args()
+
+    app.run(host=args.host, port=int(args.port))