2022-11-15 09:19:08 +00:00
import sqlalchemy . exc
from files . classes import *
2022-05-04 23:09:46 +00:00
from files . helpers . alerts import *
from files . helpers . const import *
2022-11-15 09:19:08 +00:00
from files . helpers . get import *
from files . routes . wrappers import *
2022-05-04 23:09:46 +00:00
from files . __main__ import app , limiter
@app.get ( " /authorize " )
@auth_required
def authorize_prompt ( v ) :
client_id = request . values . get ( " client_id " )
application = g . db . query ( OauthApp ) . filter_by ( client_id = client_id ) . one_or_none ( )
if not application : return { " oauth_error " : " Invalid `client_id` " } , 401
return render_template ( " oauth.html " , v = v , application = application )
@app.post ( " /authorize " )
2022-11-13 06:43:35 +00:00
@limiter.limit ( DEFAULT_RATELIMIT_SLOWER )
2022-05-04 23:09:46 +00:00
@auth_required
2022-11-13 10:18:52 +00:00
@ratelimit_user ( )
2022-05-04 23:09:46 +00:00
def authorize ( v ) :
client_id = request . values . get ( " client_id " )
application = g . db . query ( OauthApp ) . filter_by ( client_id = client_id ) . one_or_none ( )
if not application : return { " oauth_error " : " Invalid `client_id` " } , 401
access_token = secrets . token_urlsafe ( 128 ) [ : 128 ]
try :
new_auth = ClientAuth ( oauth_client = application . id , user_id = v . id , access_token = access_token )
g . db . add ( new_auth )
except sqlalchemy . exc . IntegrityError :
g . db . rollback ( )
2022-11-15 15:39:00 +00:00
g . db . close ( )
del g . db
2022-05-04 23:09:46 +00:00
old_auth = g . db . query ( ClientAuth ) . filter_by ( oauth_client = application . id , user_id = v . id ) . one ( )
access_token = old_auth . access_token
return redirect ( f " { application . redirect_uri } ?token= { access_token } " )
2022-07-15 00:12:54 +00:00
@app.post ( " /rescind/<aid> " )
2022-11-13 06:43:35 +00:00
@limiter.limit ( DEFAULT_RATELIMIT_SLOWER )
2022-07-15 00:12:54 +00:00
@auth_required
2022-11-13 10:18:52 +00:00
@ratelimit_user ( )
2022-07-15 00:12:54 +00:00
def rescind ( v , aid ) :
auth = g . db . query ( ClientAuth ) . filter_by ( oauth_client = aid , user_id = v . id ) . one_or_none ( )
if not auth : abort ( 400 )
g . db . delete ( auth )
return { " message " : " Authorization revoked! " }
2022-05-04 23:09:46 +00:00
@app.post ( " /api_keys " )
2022-11-13 06:43:35 +00:00
@limiter.limit ( DEFAULT_RATELIMIT_SLOWER )
2022-05-04 23:09:46 +00:00
@is_not_permabanned
2022-11-13 10:18:52 +00:00
@ratelimit_user ( )
2022-05-04 23:09:46 +00:00
def request_api_keys ( v ) :
new_app = OauthApp (
app_name = request . values . get ( ' name ' ) . replace ( ' < ' , ' ' ) . replace ( ' > ' , ' ' ) ,
redirect_uri = request . values . get ( ' redirect_uri ' ) ,
author_id = v . id ,
description = request . values . get ( " description " ) [ : 256 ]
)
g . db . add ( new_app )
body = f " @ { v . username } has requested API keys for ` { request . values . get ( ' name ' ) } `. You can approve or deny the request [here](/admin/apps). "
body_html = sanitize ( body )
2022-07-08 19:03:04 +00:00
new_comment = Comment ( author_id = AUTOJANNY_ID ,
2022-09-04 23:15:37 +00:00
parent_submission = None ,
level = 1 ,
body_html = body_html ,
sentto = 2 ,
distinguish_level = 6 ,
is_bot = True
)
2022-05-04 23:09:46 +00:00
g . db . add ( new_comment )
g . db . flush ( )
new_comment . top_comment_id = new_comment . id
2022-10-06 07:40:36 +00:00
for admin in g . db . query ( User ) . filter ( User . admin_level > = PERMS [ ' APPS_MODERATION ' ] ) . all ( ) :
2022-05-04 23:09:46 +00:00
notif = Notification ( comment_id = new_comment . id , user_id = admin . id )
g . db . add ( notif )
return redirect ( ' /settings/apps ' )
@app.post ( " /delete_app/<aid> " )
2022-11-13 06:43:35 +00:00
@limiter.limit ( DEFAULT_RATELIMIT_SLOWER )
2022-05-04 23:09:46 +00:00
@auth_required
2022-11-13 10:18:52 +00:00
@ratelimit_user ( )
2022-05-04 23:09:46 +00:00
def delete_oauth_app ( v , aid ) :
2022-10-16 09:51:42 +00:00
try :
aid = int ( aid )
except :
abort ( 404 )
2022-06-18 00:57:23 +00:00
app = g . db . get ( OauthApp , aid )
2022-09-23 12:08:54 +00:00
if not app : abort ( 404 )
2022-05-04 23:09:46 +00:00
if app . author_id != v . id : abort ( 403 )
for auth in g . db . query ( ClientAuth ) . filter_by ( oauth_client = app . id ) . all ( ) :
g . db . delete ( auth )
g . db . delete ( app )
return redirect ( ' /apps ' )
@app.post ( " /edit_app/<aid> " )
2022-11-13 06:43:35 +00:00
@limiter.limit ( DEFAULT_RATELIMIT_SLOWER )
2022-05-04 23:09:46 +00:00
@is_not_permabanned
2022-11-13 10:18:52 +00:00
@ratelimit_user ( )
2022-05-04 23:09:46 +00:00
def edit_oauth_app ( v , aid ) :
2022-10-16 09:51:42 +00:00
try :
aid = int ( aid )
except :
abort ( 404 )
2022-06-18 00:57:23 +00:00
app = g . db . get ( OauthApp , aid )
2022-09-23 12:08:54 +00:00
if not app : abort ( 404 )
2022-05-04 23:09:46 +00:00
if app . author_id != v . id : abort ( 403 )
app . redirect_uri = request . values . get ( ' redirect_uri ' )
app . app_name = request . values . get ( ' name ' )
app . description = request . values . get ( " description " ) [ : 256 ]
g . db . add ( app )
return redirect ( ' /settings/apps ' )
@app.post ( " /admin/app/approve/<aid> " )
2022-11-13 06:43:35 +00:00
@limiter.limit ( DEFAULT_RATELIMIT_SLOWER )
2022-10-06 07:40:36 +00:00
@admin_level_required ( PERMS [ ' APPS_MODERATION ' ] )
2022-05-04 23:09:46 +00:00
def admin_app_approve ( v , aid ) :
2022-06-18 00:57:23 +00:00
app = g . db . get ( OauthApp , aid )
2022-09-23 12:08:54 +00:00
if not app : abort ( 404 )
2022-05-04 23:09:46 +00:00
user = app . author
2022-07-18 00:46:46 +00:00
if not app . client_id :
app . client_id = secrets . token_urlsafe ( 64 ) [ : 64 ]
g . db . add ( app )
access_token = secrets . token_urlsafe ( 128 ) [ : 128 ]
new_auth = ClientAuth (
oauth_client = app . id ,
user_id = user . id ,
access_token = access_token
)
2022-05-04 23:09:46 +00:00
2022-07-18 00:46:46 +00:00
g . db . add ( new_auth )
2022-05-04 23:09:46 +00:00
2022-10-16 08:14:15 +00:00
send_repeatable_notification ( user . id , f " @ { v . username } (Admin) has approved your application ` { app . app_name } `. Here ' s your access token: ` { access_token } ` \n Please check the guide [here](/api) if you don ' t know what to do next! " )
2022-05-04 23:09:46 +00:00
2022-07-18 00:46:46 +00:00
ma = ModAction (
kind = " approve_app " ,
user_id = v . id ,
target_user_id = user . id ,
)
g . db . add ( ma )
2022-05-04 23:09:46 +00:00
2022-09-11 14:32:00 +00:00
return { " message " : f " ' { app . app_name } ' approved! " }
2022-05-04 23:09:46 +00:00
@app.post ( " /admin/app/revoke/<aid> " )
2022-11-13 06:43:35 +00:00
@limiter.limit ( DEFAULT_RATELIMIT_SLOWER )
2022-10-06 07:40:36 +00:00
@admin_level_required ( PERMS [ ' APPS_MODERATION ' ] )
2022-05-04 23:09:46 +00:00
def admin_app_revoke ( v , aid ) :
2022-06-18 00:57:23 +00:00
app = g . db . get ( OauthApp , aid )
2022-05-04 23:09:46 +00:00
if app :
for auth in g . db . query ( ClientAuth ) . filter_by ( oauth_client = app . id ) . all ( ) : g . db . delete ( auth )
2022-08-25 15:56:51 +00:00
if v . id != app . author . id :
2022-10-10 06:11:17 +00:00
send_repeatable_notification ( app . author . id , f " @ { v . username } (Admin) has revoked your application ` { app . app_name } `. " )
2022-05-04 23:09:46 +00:00
g . db . delete ( app )
ma = ModAction (
kind = " revoke_app " ,
user_id = v . id ,
target_user_id = app . author . id ,
)
g . db . add ( ma )
2022-09-11 14:32:00 +00:00
return { " message " : f " ' { app . app_name } ' revoked! " }
2022-05-04 23:09:46 +00:00
@app.post ( " /admin/app/reject/<aid> " )
2022-11-13 06:43:35 +00:00
@limiter.limit ( DEFAULT_RATELIMIT_SLOWER )
2022-10-06 07:40:36 +00:00
@admin_level_required ( PERMS [ ' APPS_MODERATION ' ] )
2022-05-04 23:09:46 +00:00
def admin_app_reject ( v , aid ) :
2022-06-18 00:57:23 +00:00
app = g . db . get ( OauthApp , aid )
2022-05-04 23:09:46 +00:00
if app :
for auth in g . db . query ( ClientAuth ) . filter_by ( oauth_client = app . id ) . all ( ) : g . db . delete ( auth )
2022-09-12 17:52:07 +00:00
if v . id != app . author . id :
2022-10-10 06:11:17 +00:00
send_repeatable_notification ( app . author . id , f " @ { v . username } (Admin) has rejected your application ` { app . app_name } `. " )
2022-05-04 23:09:46 +00:00
g . db . delete ( app )
ma = ModAction (
kind = " reject_app " ,
user_id = v . id ,
target_user_id = app . author . id ,
)
g . db . add ( ma )
2022-09-11 14:32:00 +00:00
return { " message " : f " ' { app . app_name } ' rejected! " }
2022-05-04 23:09:46 +00:00
2022-10-28 20:13:58 +00:00
@app.get ( " /admin/app/<aid>/posts " )
2022-10-06 07:40:36 +00:00
@admin_level_required ( PERMS [ ' APPS_MODERATION ' ] )
2022-10-28 20:13:58 +00:00
def admin_app_id_posts ( v , aid ) :
2022-05-04 23:09:46 +00:00
aid = aid
2022-06-18 00:57:23 +00:00
oauth = g . db . get ( OauthApp , aid )
2022-09-23 12:08:54 +00:00
if not oauth : abort ( 404 )
2022-05-04 23:09:46 +00:00
2022-11-15 09:19:08 +00:00
pids = oauth . idlist ( g . db , page = int ( request . values . get ( " page " , 1 ) ) )
2022-05-04 23:09:46 +00:00
next_exists = len ( pids ) == 101
pids = pids [ : 100 ]
posts = get_posts ( pids , v = v )
return render_template ( " admin/app.html " ,
2022-09-04 23:15:37 +00:00
v = v ,
app = oauth ,
listing = posts ,
next_exists = next_exists
)
2022-05-04 23:09:46 +00:00
@app.get ( " /admin/app/<aid>/comments " )
2022-10-06 07:40:36 +00:00
@admin_level_required ( PERMS [ ' APPS_MODERATION ' ] )
2022-05-04 23:09:46 +00:00
def admin_app_id_comments ( v , aid ) :
aid = aid
2022-06-18 00:57:23 +00:00
oauth = g . db . get ( OauthApp , aid )
2022-09-23 12:08:54 +00:00
if not oauth : abort ( 404 )
2022-05-04 23:09:46 +00:00
2022-11-15 09:19:08 +00:00
cids = oauth . comments_idlist ( g . db , page = int ( request . values . get ( " page " , 1 ) ) )
2022-05-04 23:09:46 +00:00
next_exists = len ( cids ) == 101
cids = cids [ : 100 ]
comments = get_comments ( cids , v = v )
return render_template ( " admin/app.html " ,
2022-09-04 23:15:37 +00:00
v = v ,
app = oauth ,
comments = comments ,
next_exists = next_exists ,
standalone = True
)
2022-05-04 23:09:46 +00:00
@app.get ( " /admin/apps " )
2022-10-06 07:40:36 +00:00
@admin_level_required ( PERMS [ ' APPS_MODERATION ' ] )
2022-05-04 23:09:46 +00:00
def admin_apps_list ( v ) :
apps = g . db . query ( OauthApp ) . order_by ( OauthApp . id . desc ( ) ) . all ( )
return render_template ( " admin/apps.html " , v = v , apps = apps )
2022-07-15 00:12:54 +00:00
@app.post ( " /reroll/<aid> " )
2022-11-13 06:43:35 +00:00
@limiter.limit ( DEFAULT_RATELIMIT_SLOWER )
2022-05-04 23:09:46 +00:00
@auth_required
2022-11-13 10:18:52 +00:00
@ratelimit_user ( )
2022-05-04 23:09:46 +00:00
def reroll_oauth_tokens ( aid , v ) :
aid = aid
2022-06-18 00:57:23 +00:00
a = g . db . get ( OauthApp , aid )
2022-09-23 12:08:54 +00:00
if not a : abort ( 404 )
2022-05-04 23:09:46 +00:00
if a . author_id != v . id : abort ( 403 )
a . client_id = secrets . token_urlsafe ( 64 ) [ : 64 ]
g . db . add ( a )
2022-09-11 14:32:00 +00:00
return { " message " : f " Client ID for ' { a . app_name } ' has been rerolled! " , " id " : a . client_id }