From 2460ef593a17eecad863e8702904292cc9706d9e Mon Sep 17 00:00:00 2001
From: Dirk Engling <erdgeist@erdgeist.org>
Date: Mon, 20 Apr 2020 00:52:33 +0200
Subject: Kickoff
---
Filer.py | 164 +++++++++++++++++++++++++++++++++++++++++++++++++
Makefile | 11 ++++
requirements.txt | 8 +++
static/style.css | 86 ++++++++++++++++++++++++++
templates/admin.html | 67 ++++++++++++++++++++
templates/mandant.html | 37 +++++++++++
6 files changed, 373 insertions(+)
create mode 100755 Filer.py
create mode 100644 Makefile
create mode 100644 requirements.txt
create mode 100644 static/style.css
create mode 100644 templates/admin.html
create mode 100644 templates/mandant.html
diff --git a/Filer.py b/Filer.py
new file mode 100755
index 0000000..b7defd8
--- /dev/null
+++ b/Filer.py
@@ -0,0 +1,164 @@
+#!venv/bin/python
+
+import os
+import hashlib
+import base64
+import time
+from shutil import rmtree
+
+from flask import Flask, render_template, jsonify, request, redirect, send_from_directory
+from flask_dropzone import Dropzone
+from argparse import ArgumentParser
+from werkzeug.utils import secure_filename
+
+app = Flask(__name__)
+app.config['SECRET_KEY'] = 'Silence is golden. Gerd Eist.'
+#app.jinja_env.trim_blocks = True
+#app.jinja_env.lstrip_blocks = True
+
+app.config['PREFERRED_URL_SCHEME'] = 'https'
+app.config['DROPZONE_SERVE_LOCAL'] = True
+app.config['DROPZONE_MAX_FILE_SIZE'] = 128
+app.config['DROPZONE_UPLOAD_MULTIPLE'] = True
+app.config['DROPZONE_PARALLEL_UPLOADS'] = 10
+
+app.config['DROPZONE_ALLOWED_FILE_CUSTOM'] = True
+app.config['DROPZONE_ALLOWED_FILE_TYPE'] = ''
+
+app.config['DROPZONE_DEFAULT_MESSAGE'] = 'Ziehe die Dateien hier hin, um sie hochzuladen oder klicken Sie zur Auswahl.'
+
+dropzone = Dropzone(app)
+
+basedir = 'Daten'
+
+#### ADMIN FACING DIRECTORY LISTS ####
+####
+####
+@app.route("/admin", methods=['GET'])
+def admin():
+ url_root = request.url_root.replace('http://', 'https://', 1)
+ users = os.listdir(os.path.join(basedir, 'Mandanten'))
+ return render_template('admin.html', users = users, tree = make_tree(basedir, 'Public'), url_root = url_root)
+
+@app.route("/admin/Dokumente/<user>", methods=['GET'])
+def admin_dokumente(user):
+ return render_template('mandant.html', admin = 'admin/', user = user, tree = make_tree(basedir, os.path.join('Dokumente', user)))
+
+@app.route("/admin/del-user/<user>", methods=['POST'])
+def admin_deluser(user):
+ method = request.form.get('_method', 'POST')
+ if method == 'DELETE':
+ rmtree(os.path.join(basedir, 'Dokumente', secure_filename(user)))
+ os.unlink(os.path.join(basedir, 'Mandanten', secure_filename(user)))
+ return redirect('/admin')
+
+@app.route("/admin/new-user", methods=['POST'])
+def admin_newuser():
+ password = request.form.get('password', '')
+ user = request.form.get('user', '')
+ if not password or not user:
+ return "Username or password missing", 400
+ directory = secure_filename(user)
+
+ salt = os.urandom(4)
+ sha = hashlib.sha1(password.encode('utf-8'))
+ sha.update(salt)
+
+ digest_salt_b64 = base64.b64encode(sha.digest()+ salt)
+ tagged_digest_salt = '{{SSHA}}{}'.format(digest_salt_b64.decode('ascii'))
+
+ try:
+ if not os.path.exists(os.path.join(basedir, 'Dokumente', directory)):
+ os.mkdir(os.path.join(basedir, 'Dokumente', directory))
+ with open(os.path.join(basedir, 'Mandanten', directory), 'w+', encoding='utf-8') as htpasswd:
+ htpasswd.write("{}:{}\n".format(user, tagged_digest_salt))
+ except OSError as error:
+ return "Couldn't create user scope", 500
+ return redirect('/admin')
+
+#### USER FACING DIRECTORY LIST ####
+####
+####
+@app.route("/Dokumente/<user>", methods=['GET'])
+def mandant(user):
+ return render_template('mandant.html', admin = '', user = user, tree = make_tree(basedir, os.path.join('Dokumente', user)))
+
+#### UPLOAD FILE ROUTES ####
+####
+####
+@app.route('/Dokumente/<user>', methods=['POST'])
+@app.route('/admin/Dokumente/<user>', methods=['POST'])
+def upload_mandant(user):
+ for key, f in request.files.items():
+ if key.startswith('file'):
+ username = secure_filename(user)
+ filename = secure_filename(f.filename)
+ f.save(os.path.join(basedir, 'Dokumente', username, filename))
+ return 'upload template'
+
+@app.route('/admin', methods=['POST'])
+def upload_admin():
+ for key, f in request.files.items():
+ if key.startswith('file'):
+ filename = secure_filename(f.filename)
+ f.save(os.path.join(basedir, 'Public', filename))
+ return 'upload template'
+
+#### DELETE FILE ROUTES ####
+####
+####
+@app.route('/Dokumente/<user>/<path:filename>', methods=['POST'])
+def delete_file_mandant(user, filename):
+ method = request.form.get('_method', 'POST')
+ if method == 'DELETE':
+ os.unlink(os.path.join(basedir, 'Dokumente', secure_filename(user), secure_filename(filename)))
+ return redirect('/Dokumente/'+user)
+
+@app.route('/admin/Dokumente/<user>/<path:filename>', methods=['POST'])
+def delete_file_mandant_admin(user, filename):
+ method = request.form.get('_method', 'POST')
+ if method == 'DELETE':
+ os.unlink(os.path.join(basedir, 'Dokumente', secure_filename(user), secure_filename(filename)))
+ return redirect('/admin/Dokumente/'+user)
+
+@app.route('/admin/Public/<path:filename>', methods=['POST'])
+def delete_file_admin(filename):
+ method = request.form.get('_method', 'POST')
+ if method == 'DELETE':
+ os.unlink(os.path.join(basedir, 'Public', secure_filename(filename)))
+ return redirect('/admin')
+
+#### SERVE FILES RULES ####
+####
+####
+@app.route('/admin/Dokumente/<user>/<path:filename>', methods=['GET'])
+@app.route('/Dokumente/<user>/<path:filename>', methods=['GET'])
+def custom_static(user, filename):
+ return send_from_directory(os.path.join(basedir, 'Dokumente'), os.path.join(user, filename))
+
+@app.route('/Public/<path:filename>')
+def custom_static_public(filename):
+ return send_from_directory(os.path.join(basedir, 'Public'), filename)
+
+def make_tree(rel, path):
+ tree = dict(name=path, download=os.path.basename(path), children=[])
+ try: lst = os.listdir(os.path.join(rel,path))
+ except OSError:
+ pass #ignore errors
+ else:
+ for name in lst:
+ fn = os.path.join(path, name)
+ if os.path.isdir(os.path.join(rel,fn)):
+ tree['children'].append(make_tree(rel, fn))
+ else:
+ ttl = 10 - int((time.time() - os.path.getmtime(os.path.join(rel,fn))) / (24*3600))
+ tree['children'].append(dict(name=fn, download=name, ttl = ttl))
+ return tree
+
+if __name__ == "__main__":
+ parser = ArgumentParser(description="Filer")
+ parser.add_argument("-H", "--host", help="Hostname of the Flask app " + "[default %s]" % "127.0.0.1", default="127.0.0.1")
+ parser.add_argument("-P", "--port", help="Port for the Flask app " + "[default %s]" % "5000", default="5000")
+ args = parser.parse_args()
+
+ app.run(host=args.host, port=int(args.port))
diff --git a/Makefile b/Makefile
new file mode 100644
index 0000000..eae1e68
--- /dev/null
+++ b/Makefile
@@ -0,0 +1,11 @@
+all: install
+
+run:
+ ./venv/bin/python Filer.py -P 5000 &
+
+venv:
+ python3 -m venv ./venv
+
+install: venv
+ ./venv/bin/pip install --upgrade pip
+ ./venv/bin/pip install -r requirements.txt
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 0000000..277407d
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1,8 @@
+click
+Flask
+Flask-Dropzone
+itsdangerous
+Jinja2
+MarkupSafe
+sqlite3
+Werkzeug
diff --git a/static/style.css b/static/style.css
new file mode 100644
index 0000000..3845959
--- /dev/null
+++ b/static/style.css
@@ -0,0 +1,86 @@
+body {
+ font-family: "HelveticaNeueLight", "HelveticaNeue-Light", "Helvetica Neue Light", "HelveticaNeue", "Helvetica Neue", 'TeXGyreHerosRegular', "Helvetica", "Tahoma", "Geneva", "Arial", sans-serif; font-weight:400; font-size:15pt; font-stretch:normal;
+ margin: 1em 0;
+ padding: 0 5%;
+}
+
+ul {
+ list-style-type: none;
+}
+
+li {
+ margin: 0 0 0.5em 0;
+}
+
+button {
+ margin: 0 0.5em 0 0;
+ min-width: 5.5em;
+}
+
+button.add,
+button.edit {
+ box-shadow:inset 0px 1px 0px 0px #bee2f9;
+ background:linear-gradient(to bottom, #63b8ee 5%, #468ccf 100%);
+ background-color:#63b8ee;
+ border-radius:9px;
+ border:1px solid #3866a3;
+ display:inline-block;
+ cursor:pointer;
+ color:#ffffff;
+ padding:5px 6px;
+ text-decoration:none;
+ text-shadow:0px 1px 0px #7cacde;
+}
+button.delete {
+ box-shadow:inset 0px 1px 0px 0px #cf866c;
+ background:linear-gradient(to bottom, #d0451b 5%, #bc3315 100%);
+ background-color:#d0451b;
+ border-radius:9px;
+ border:1px solid #942911;
+ display:inline-block;
+ cursor:pointer;
+ color:#ffffff;
+ padding:5px 6px;
+ text-decoration:none;
+ text-shadow:0px 1px 0px #854629;
+}
+button.add:hover,
+button.edit:hover {
+ background:linear-gradient(to bottom, #468ccf 5%, #63b8ee 100%);
+ background-color:#468ccf;
+}
+button.delete:hover {
+ background:linear-gradient(to bottom, #bc3315 5%, #d0451b 100%);
+ background-color:#bc3315;
+}
+
+button.add:active,
+button.edit:active,
+button.delete:active {
+ position:relative;
+ top:1px;
+}
+
+input[type="text"] {
+ padding: 0.3em 0.4em;
+
+ border: 1px solid grey;
+ border-radius: 6px;
+
+ font-weight: bold;
+ font-size: 13pt;
+ transition: background-color 1s;
+ color: #444;
+ min-width: 35%;
+}
+
+.age {
+ display: inline-block;
+ text-align: right;
+ border-radius: 4px;
+ border: solid 1px black;
+ background-color: grey;
+ padding: 0 0.2em;
+ margin-right: 0.5em;
+ width: 4em;
+}
diff --git a/templates/admin.html b/templates/admin.html
new file mode 100644
index 0000000..e62979e
--- /dev/null
+++ b/templates/admin.html
@@ -0,0 +1,67 @@
+<!DOCTYPE html>
+<html>
+<head>
+<title>Filer Admin</title>
+<meta charset="UTF-8">
+{{ dropzone.load_css() }}
+{{ dropzone.style('border: 2px dashed #0087F7; min-height: 3em;') }}
+<link rel="stylesheet" href="/static/style.css">
+<script>
+function generatePassword() {
+ var chars = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!#$%&'()*+,-./:;<=>?@_{|}~";
+ var randarray = new Uint16Array(32);
+ var retval = "";
+ window.crypto.getRandomValues(randarray);
+ for (var i = 0, n = chars.length; i < randarray.length; ++i)
+ retval += chars.charAt(Math.floor(randarray[i] * n / 65336));
+ console.log(retval);
+ document.getElementById("password").value = retval;
+}
+</script>
+</head>
+<body>
+{{ dropzone.load_js() }}
+<h1>Kanzlei Hubrig – Administration</h1>
+<h2>Mandanten</h2>
+<ul>
+{%- for item in users %}
+ <li>
+ <form action="/admin/del-user/{{item}}" method="post" style="display: inline;" onsubmit="return confirm('Sind Sie sicher?');">
+ <input type="hidden" name="_method" value="DELETE">
+ <button class="delete">löschen</button>
+ </form>
+ <button class="edit" onclick="document.getElementById('user').value='{{item}}'">edit</button>
+ <a href="/admin/Dokumente/{{item}}">{{item}}</a> <small>Mandanten-URL: {{url_root}}Dokumente/{{item}}</small>
+ </li>
+{%- endfor %}
+<li>
+ <form action="/admin/new-user" method="post">
+ <input id="user" name="user" type="text" placeholder="Name" required></input>
+ <input id="password" name="password" type="text" placeholder="Passwort" autocomplete="off" required></input>
+ <script>generatePassword()</script>
+ <button class="add" type="button" onclick="generatePassword()">Zufall</button>
+ <button class="add">Hinzufügen</button>
+ </form>
+</li>
+</ul>
+
+<h2>Öffentliche Dokumente</h2>
+<ul>
+{%- for item in tree.children recursive %}
+ <li><form action="/admin/{{ item.name }}" method="post" style="display: inline;" onsubmit="return confirm('Are you sure?');">
+ <input type="hidden" name="_method" value="DELETE">
+ <button class="delete">löschen</button>
+ </form>
+ <a href="{{ item.name }}" download="{{item.download}}">{{ item.download }}</a>
+ {%- if item.children -%}
+ <ul>{{ loop(item.children) }}</ul>
+ {%- endif %}</li>
+{%- endfor %}
+</ul>
+
+<h2>Öffentliches Dokument hochladen</h2>
+<div class="droppy">{{ dropzone.create(action='/admin') }}</div>
+
+{{ dropzone.config() }}
+</body>
+</html>
diff --git a/templates/mandant.html b/templates/mandant.html
new file mode 100644
index 0000000..16c07ab
--- /dev/null
+++ b/templates/mandant.html
@@ -0,0 +1,37 @@
+<!DOCTYPE html>
+<html>
+<head>
+<title>Filer</title>
+<meta charset="UTF-8">
+{{ dropzone.load_css() }}
+{{ dropzone.style('border: 2px dashed #0087F7; min-height: 10px;') }}
+<link rel="stylesheet" href="/static/style.css">
+</head>
+<body>
+{{ dropzone.load_js() }}
+<h1>Kanzlei Hubrig – Dokumenten-Austausch</h1>
+{%- if admin %}
+<a href="/admin">Zurück zur Übersicht</a>
+{% endif -%}
+<h2>Dokumente</h2>
+<ul>
+{%- for item in tree.children recursive %}
+ <li><form action="/{{admin}}{{ item.name }}" method="post" style="display: inline;" onsubmit="return confirm('Sind Sie sicher?');">
+ <input type="hidden" name="_method" value="DELETE">
+ <button class="delete" type="submit">löschen</button>
+ </form>
+ <div class="age">{{item.ttl}} Tag{%- if not item.ttl == 1 -%}e{%- endif -%}</div>
+ {%- if 'children' in item -%}
+ {{item.download}}<br/>
+ <ul>{{ loop(item.children) }}</ul>
+ {%- else -%}
+ <a href="/{{admin}}{{item.name}}" download="{{item.download}}">{{ item.download }}</a>
+ {%- endif %}</li>
+{%- endfor %}
+</ul>
+
+<div class="droppy">{{ dropzone.create(action="/"+admin+"Dokumente/"+user) }}</div>
+
+{{ dropzone.config() }}
+</body>
+</html>
--
cgit v1.2.3