server.py

from __future__ import annotations

import logging
import time

import os
from flask import send_from_directory, Response, request
from flask_login import LoginManager, current_user
from flask_wtf.csrf import CSRFProtect, generate_csrf
from flask_compress import Compress
from bson import ObjectId

from endpoints.authorization import authorization
from endpoints.api import api
from endpoints.stats import stats
import endpoints.webpush

from utils import User, AddStaticFileHashFlask, get_user, send_error, update_database, meta_to_database


app = AddStaticFileHashFlask(__name__)
DEBUG = os.getenv("debug")

SECRET_KEY = os.getenv("SECRET_KEY") if os.getenv("SECRET_KEY") else "DEBUG_KEY"
app.secret_key = SECRET_KEY
app.config["TEMPLATES_AUTO_RELOAD"] = True
app.config["PERMANENT_SESSION_LIFETIME"] = 32140800

compress = Compress()
compress.init_app(app)

csrf = CSRFProtect(app)
csrf.init_app(app)


# authorization
login_manager = LoginManager()
login_manager.login_view = 'login'
login_manager.init_app(app)

# endpoints
app.register_blueprint(authorization)
app.register_blueprint(api)
app.register_blueprint(stats, url_prefix="/stats")


@app.after_request
def after_request(resp):
    if request.path.startswith("/public"):
        return resp
    if request.host == "localhost:5000" or request.host == "127.0.0.1:5000" or request.remote_addr == "127.0.0.1":
        return resp
    request_data = {
        "time": time.time(),
        "host": request.host,
        "path": request.full_path,
        "method": request.method,
        "user-agent": request.user_agent.string,
        "ip": request.remote_addr,
    }
    if current_user:
        request_data["userId"] = ObjectId(current_user.get_id())
    meta_to_database(request_data)
    return resp


@login_manager.user_loader
def user_loader(user_id: str) -> User | None:
    tmp_user = get_user(user_id)
    if tmp_user is None:
        return
    tmp_user = User(user_id)
    return tmp_user


@login_manager.unauthorized_handler
def unauthorized_callback() -> Response:
    return send_error("Für diese Anfrage musst du eingeloggt sein.")


# COMPILED SVELTE FILES
@app.route("/", methods=["GET"])
def base() -> Response:
    resp = send_from_directory('client/public', 'index.html')
    resp.set_cookie("csrftoken", generate_csrf())
    return resp


@app.route("/public/<path:path>", methods=["GET"])
def home(path) -> Response:
    return send_from_directory('client/public', path)


@app.route("/serviceworker.js", methods=["GET"])
def sw() -> Response:
    return send_from_directory('client/public', 'serviceworker.js')


if __name__ == "__main__":
    update_database()
    app.run(debug=DEBUG, host="0.0.0.0")