83 lines
2.1 KiB
Python
Executable File
83 lines
2.1 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
import sqlite3
|
|
from flask import Flask, request, jsonify, send_from_directory
|
|
from flask import make_response
|
|
from os import urandom
|
|
from base64 import b64encode
|
|
|
|
app = Flask(__name__)
|
|
|
|
def get_db():
|
|
db = sqlite3.connect("main.sqlite")
|
|
return db
|
|
|
|
@app.route("/users", methods=["POST"])
|
|
def create_user():
|
|
db = get_db()
|
|
cursor = db.cursor()
|
|
user = request.form["user"]
|
|
password = request.form["password"]
|
|
salt = request.form["salt"]
|
|
cursor.execute("INSERT INTO users (user, password, salt) \
|
|
VALUES (?, ?, ?)"
|
|
, (user, password, salt))
|
|
db.commit()
|
|
return jsonify({"message": "User created successfully"})
|
|
|
|
@app.route("/login", methods=["POST"])
|
|
def login():
|
|
db = get_db()
|
|
cursor = db.cursor()
|
|
|
|
user = request.form["user"]
|
|
password = request.form.get("password", None)
|
|
if password is None:
|
|
cursor.execute("SELECT salt FROM users WHERE user = ?", (user,))
|
|
user = cursor.fetchone()
|
|
if user is None:
|
|
return jsonify({}), 404
|
|
|
|
print(user[0])
|
|
|
|
return make_response(user[0], 200)
|
|
|
|
|
|
cursor.execute("SELECT id FROM users WHERE user = ? AND password = ?",
|
|
(user, password))
|
|
|
|
user_id = cursor.fetchone()
|
|
|
|
if user_id is None:
|
|
return jsonify({}), 403
|
|
|
|
|
|
token = b64encode(urandom(16)).decode('utf-8')
|
|
cursor.execute("INSERT INTO token (id, token, expiry) VALUES (?,?,\
|
|
unixepoch(datetime(\"NOW\", \"+30 days\"))) \
|
|
RETURNING expiry;",
|
|
(user_id[0], token))
|
|
response = make_response("", 204)
|
|
response.set_cookie("token", value=token, expires=cursor.fetchone()[0])
|
|
|
|
return response
|
|
|
|
@app.route("/products.json")
|
|
def products():
|
|
db = get_db()
|
|
cursor = db.cursor()
|
|
cursor.execute("SELECT * FROM products;")
|
|
|
|
return jsonify(cursor.fetchall())
|
|
|
|
|
|
@app.route("/")
|
|
def index():
|
|
return send_from_directory("static", "index.html")
|
|
|
|
@app.route("/<path:path>")
|
|
def serve_static_path(path):
|
|
return send_from_directory('static', path)
|
|
|
|
if __name__ == "__main__":
|
|
app.run(debug=True)
|