71 lines
2.3 KiB
Python
71 lines
2.3 KiB
Python
import time
|
|
from urllib.parse import quote, urlencode
|
|
|
|
from flask import redirect, render_template, request, session, g
|
|
|
|
from files.helpers.config.const import *
|
|
from files.helpers.settings import get_setting
|
|
|
|
from files.routes.wrappers import rpath
|
|
|
|
from files.__main__ import app, limiter
|
|
|
|
# If you're adding an error, go here:
|
|
# https://github.com/pallets/werkzeug/blob/main/src/werkzeug/exceptions.py
|
|
# and copy the description for the error code you're adding and add it to
|
|
# the constant WERKZEUG_ERROR_DESCRIPTIONS so that the default error message
|
|
# doesn't show up on the message. Be exact or it won't work properly.
|
|
|
|
@app.errorhandler(400)
|
|
@app.errorhandler(403)
|
|
@app.errorhandler(404)
|
|
@app.errorhandler(405)
|
|
@app.errorhandler(409)
|
|
@app.errorhandler(410)
|
|
@app.errorhandler(413)
|
|
@app.errorhandler(415)
|
|
@app.errorhandler(418)
|
|
@app.errorhandler(429)
|
|
def error(e):
|
|
g.desires_auth = False
|
|
title = ERROR_TITLES.get(e.code, str(e.code))
|
|
msg = ERROR_MSGS.get(e.code, str(e.code))
|
|
details = e.description
|
|
|
|
if WERKZEUG_ERROR_DESCRIPTIONS.get(e.code, None) == details:
|
|
details = None
|
|
# for here and 401, not using g.is_api_or_xhr is intentional since API users won't get invalid token errors otherwise
|
|
if request.headers.get("Authorization") or request.headers.get("xhr"):
|
|
return {"error": title, "code": e.code, "description": msg, "details": details}, e.code
|
|
img = ERROR_MARSEYS.get(e.code, 'marseyl')
|
|
return render_template('errors/error.html', err=True, title=title, msg=msg, details=details, img=img), e.code
|
|
|
|
@app.errorhandler(401)
|
|
def error_401(e):
|
|
if request.headers.get("Authorization") or request.headers.get("xhr"): return error(e)
|
|
else:
|
|
path = request.path
|
|
qs = urlencode(dict(request.values))
|
|
argval = quote(f"{path}?{qs}", safe='').replace('/logged_out','')
|
|
if not argval: argval = '/'
|
|
if session.get("history") or not get_setting("signups"):
|
|
return redirect(f"/login?redirect={argval}")
|
|
else: return redirect(f"/signup?redirect={argval}")
|
|
|
|
@app.errorhandler(500)
|
|
def error_500(e):
|
|
if hasattr(g, 'db'):
|
|
g.db.rollback()
|
|
g.db.close()
|
|
del g.db
|
|
return error(e)
|
|
|
|
|
|
@app.post("/allow_nsfw")
|
|
@limiter.limit('1/second', scope=rpath)
|
|
@limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400)
|
|
def allow_nsfw():
|
|
session["nsfw_cookies"] = int(time.time()) + 3600
|
|
redir = request.values.get("redir", "/")
|
|
return ''
|