import secrets import user_agents from files.helpers.const import * from files.helpers.settings import get_setting from files.helpers.cloudflare import CLOUDFLARE_AVAILABLE from files.routes.wrappers import * from files.__main__ import app, limiter def session_init(): if not session.get("session_id"): session.permanent = True session["session_id"] = secrets.token_hex(49) @app.before_request def before_request(): g.desires_auth = False if SITE == 'marsey.world' and request.path != '/kofi': abort(404) g.agent = request.headers.get("User-Agent", "") if not g.agent and request.path != '/kofi': return 'Please use a "User-Agent" header!', 403 if request.host != SITE: return {"error": "Unauthorized host provided"}, 403 if request.headers.get("CF-Worker"): return {"error": "Cloudflare workers are not allowed to access this website."}, 403 if not get_setting('bots') and request.headers.get("Authorization"): abort(403) g.agent_parsed = str(user_agents.parse(g.agent)) if '; wv) ' in g.agent.lower(): g.browser = 'webview' elif g.agent_parsed.startswith('Firefox / '): g.browser = 'firefox' elif any(g.agent_parsed.startswith(x) for x in ('iPhone', 'iPad', 'iPod', 'PC / Mac OS X')): g.browser = 'apple' else: g.browser = 'chromium' g.is_tor = request.headers.get("cf-ipcountry") == "T1" request.path = request.path.rstrip('/') if not request.path: request.path = '/' request.full_path = request.full_path.rstrip('?').rstrip('/') if not request.full_path: request.full_path = '/' session_init() limiter.check() g.db = db_session() @app.after_request def after_request(response): if response.status_code < 400: if CLOUDFLARE_AVAILABLE and CLOUDFLARE_COOKIE_VALUE and g.desires_auth: logged_in = bool(getattr(g, 'v', None)) response.set_cookie("lo", CLOUDFLARE_COOKIE_VALUE if logged_in else '', max_age=60*60*24*365 if logged_in else 1, samesite="Lax") if getattr(g, 'db', None): g.db.commit() g.db.close() del g.db return response @app.teardown_appcontext def teardown_request(error): if getattr(g, 'db', None): g.db.rollback() g.db.close() del g.db stdout.flush()