rDrama/files/helpers/wrappers.py

147 lines
3.1 KiB
Python
Raw Normal View History

2021-10-15 14:08:27 +00:00
from .get import *
from .alerts import send_notification
from files.helpers.const import *
def get_logged_in_user():
if request.headers.get("Authorization"):
token = request.headers.get("Authorization")
if not token: return None
2021-10-29 02:32:23 +00:00
try:
2021-11-06 15:52:48 +00:00
client = g.db.query(ClientAuth).filter(ClientAuth.access_token == token).first()
2021-10-29 02:32:23 +00:00
x = (client.user, client) if client else (None, None)
except: x = (None, None)
2021-10-15 14:08:27 +00:00
else:
uid = session.get("user_id")
nonce = session.get("login_nonce", 0)
if not uid: x= (None, None)
try:
2021-11-06 15:52:48 +00:00
if g.db: v = g.db.query(User).filter_by(id=uid).first()
2021-10-15 14:08:27 +00:00
else: v = None
except: v = None
if v and (nonce < v.login_nonce):
x= (None, None)
else:
x=(v, None)
if x[0]: x[0].client=x[1]
return x[0]
def check_ban_evade(v):
2021-11-16 00:05:54 +00:00
if v and v.ban_evade and v.admin_level == 0 and not v.is_suspended:
if random.randint(0,30) < v.ban_evade: v.shadowbanned = "AutoJanny"
else: v.ban_evade +=1
2021-10-15 14:08:27 +00:00
g.db.add(v)
2021-11-16 00:05:54 +00:00
g.db.commit()
2021-10-15 14:08:27 +00:00
def auth_desired(f):
def wrapper(*args, **kwargs):
v = get_logged_in_user()
2021-12-13 21:37:45 +00:00
2021-12-14 19:34:31 +00:00
if request.host == 'old.rdrama.net' and not (v and v.admin_level) and '/log' not in request.path:
2021-12-15 19:30:26 +00:00
return redirect(request.full_path.replace('https://old.','https://'))
2021-10-15 14:08:27 +00:00
check_ban_evade(v)
resp = make_response(f(*args, v=v, **kwargs))
return resp
wrapper.__name__ = f.__name__
return wrapper
def auth_required(f):
def wrapper(*args, **kwargs):
v = get_logged_in_user()
if not v: abort(401)
2021-12-15 19:30:26 +00:00
if request.host == 'old.rdrama.net' and not v.admin_level:
return redirect(request.full_path.replace('https://old.','https://'))
2021-12-13 21:37:45 +00:00
2021-10-15 14:08:27 +00:00
check_ban_evade(v)
g.v = v
resp = make_response(f(*args, v=v, **kwargs))
return resp
wrapper.__name__ = f.__name__
return wrapper
def is_not_banned(f):
def wrapper(*args, **kwargs):
v = get_logged_in_user()
if not v: abort(401)
2021-12-15 19:30:26 +00:00
if request.host == 'old.rdrama.net' and not v.admin_level:
return redirect(request.full_path.replace('https://old.','https://'))
2021-10-15 14:08:27 +00:00
check_ban_evade(v)
2021-11-30 17:19:55 +00:00
if v.is_suspended: return {"error": "You can't perform this action while being banned."}, 403
2021-10-15 14:08:27 +00:00
g.v = v
resp = make_response(f(*args, v=v, **kwargs))
return resp
wrapper.__name__ = f.__name__
return wrapper
def admin_level_required(x):
def wrapper_maker(f):
def wrapper(*args, **kwargs):
v = get_logged_in_user()
if not v: abort(401)
if v.admin_level < x: abort(403)
g.v = v
response = f(*args, v=v, **kwargs)
if isinstance(response, tuple): resp = make_response(response[0])
else: resp = make_response(response)
return resp
wrapper.__name__ = f.__name__
return wrapper
return wrapper_maker
def validate_formkey(f):
def wrapper(*args, v, **kwargs):
if not request.headers.get("Authorization"):
submitted_key = request.values.get("formkey", None)
if not submitted_key: abort(401)
elif not v.validate_formkey(submitted_key): abort(401)
return f(*args, v=v, **kwargs)
wrapper.__name__ = f.__name__
2021-09-17 11:14:45 +00:00
return wrapper