145 lines
4.1 KiB
Python
145 lines
4.1 KiB
Python
#!/usr/bin/python
|
|
# -*- coding: utf-8 -*-
|
|
|
|
import os,sys
|
|
import json
|
|
from datetime import datetime
|
|
from flask import Flask, render_template, jsonify, \
|
|
redirect, url_for, request, g, session, send_from_directory
|
|
from werkzeug.utils import secure_filename
|
|
import hashlib
|
|
from revprox import ReverseProxied
|
|
|
|
app = Flask(__name__)
|
|
app.config.from_object(__name__)
|
|
app.config['UPLOAD_FOLDER'] = 'data/'
|
|
app.config['SHARES_FILE'] = 'data/shares.json'
|
|
app.secret_key = 'Cz2dw5NiRt3PSMFBSLTAJJi7U2CdW7iPQqEeOaU6'
|
|
app.wsgi_app = ReverseProxied(app.wsgi_app)
|
|
|
|
@app.before_request
|
|
def before_request():
|
|
g.shares = json.load(open(app.config['SHARES_FILE'],'rt'))
|
|
|
|
@app.route("/")
|
|
def index():
|
|
printerr(g.shares)
|
|
public_shares = []
|
|
for share in g.shares:
|
|
public = get_or_none(share,'public')
|
|
if public:
|
|
public_shares.append({
|
|
'name': share['name'],
|
|
'expire': get_or_none(share,'expire'),
|
|
'upload': get_or_none(share,'upload')
|
|
})
|
|
|
|
return render_template("index.html", entries=public_shares)
|
|
|
|
@app.route('/authenticate/<name>', methods=['GET','POST'])
|
|
def authenticate(name):
|
|
if request.method == 'GET':
|
|
return render_template('authenticate.html',name=name)
|
|
if request.method == 'POST':
|
|
user_password = request.form['password'].encode('utf-8')
|
|
session[name] = hashlib.sha256(user_password).hexdigest()
|
|
return redirect(url_for('list_view',name=name))
|
|
|
|
@app.route('/upload', methods=['POST'])
|
|
def upload():
|
|
if request.method == 'POST':
|
|
file = request.files['file']
|
|
name = request.form['name']
|
|
(ok,share) = get_share(name)
|
|
if not ok:
|
|
return share
|
|
if file:
|
|
filename = os.path.join(
|
|
share['path'],
|
|
secure_filename(
|
|
file.filename
|
|
)
|
|
)
|
|
file.save(filename)
|
|
return redirect(url_for('list_view',name=name))
|
|
|
|
@app.route('/send/<name>', methods=['GET'])
|
|
def send(name):
|
|
(ok,share) = get_share(name)
|
|
if not ok:
|
|
return share
|
|
return render_template('send.html',name=name)
|
|
|
|
@app.route('/list/<name>', methods=['GET'])
|
|
def list_view(name):
|
|
(ok,share) = get_share(name)
|
|
if not ok:
|
|
return share
|
|
files = []
|
|
for file in sorted(os.listdir(share['path'])):
|
|
files.append(file_stat(os.path.join(share['path'],file)))
|
|
return render_template("list.html",name = share['name'], entries = files)
|
|
#~ return jsonify({"share":share, "files": files})
|
|
|
|
@app.route('/download/<name>/<filename>', methods=['GET'])
|
|
def download_file(name,filename):
|
|
(ok,share) = get_share(name)
|
|
if not ok:
|
|
return share
|
|
file_path = os.path.join(share['path'], filename)
|
|
if not os.path.exists(file_path):
|
|
return 'no such file'
|
|
return send_from_directory(directory=share['path'], filename=filename)
|
|
|
|
def file_stat(filename):
|
|
s = os.stat(filename)
|
|
return {
|
|
'size': s.st_size,
|
|
'mtime': s.st_mtime,
|
|
'name': os.path.basename(filename)
|
|
}
|
|
|
|
def get_or_none(d,key):
|
|
if key in d:
|
|
return d[key]
|
|
else:
|
|
return None
|
|
|
|
def get_share(name):
|
|
share = [x for x in g.shares if x['name'] == name]
|
|
if len(share) < 1:
|
|
return (False,'No such share')
|
|
share = share[0]
|
|
authenticated = True
|
|
if 'pass_hash' in share:
|
|
authenticated = False
|
|
printerr(session)
|
|
if name in session:
|
|
printerr(share['pass_hash'])
|
|
if session[name] == share['pass_hash']:
|
|
printerr(session[name])
|
|
printerr(share['pass_hash'])
|
|
authenticated = True
|
|
if not authenticated:
|
|
return (False,redirect(url_for('authenticate',name=name)))
|
|
if not 'path' in share:
|
|
return (False,'no path defined')
|
|
share.update({
|
|
"path": os.path.join(
|
|
app.config['UPLOAD_FOLDER'],
|
|
share['path']
|
|
)
|
|
})
|
|
if not os.path.exists(share['path']):
|
|
os.makedirs(share['path'])
|
|
return (True,share)
|
|
|
|
def printerr(s):
|
|
sys.stderr.write(str(s)+"\n")
|
|
sys.stderr.flush()
|
|
|
|
if __name__ == "__main__":
|
|
app.run(debug=True)
|
|
|
|
|