2019-08-03 21:35:08 +01:00
|
|
|
from flask import Blueprint, session, flash, request, redirect, url_for, render_template
|
2020-04-30 14:54:05 +01:00
|
|
|
from werkzeug.security import generate_password_hash
|
|
|
|
from music.model.user import User
|
2020-06-30 16:38:06 +01:00
|
|
|
from music.model.config import Config
|
2019-07-29 11:44:10 +01:00
|
|
|
|
2020-07-29 10:45:40 +01:00
|
|
|
from urllib.parse import urlencode, urlunparse
|
2019-07-31 12:24:10 +01:00
|
|
|
import datetime
|
2019-08-17 18:30:13 +01:00
|
|
|
import logging
|
2019-07-31 12:24:10 +01:00
|
|
|
from base64 import b64encode
|
|
|
|
import requests
|
|
|
|
|
2019-07-29 11:44:10 +01:00
|
|
|
blueprint = Blueprint('authapi', __name__)
|
|
|
|
|
2019-08-17 18:30:13 +01:00
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
2019-07-29 11:44:10 +01:00
|
|
|
|
|
|
|
@blueprint.route('/login', methods=['GET', 'POST'])
|
|
|
|
def login():
|
|
|
|
|
|
|
|
if request.method == 'POST':
|
|
|
|
|
|
|
|
session.pop('username', None)
|
|
|
|
|
2019-08-05 21:43:09 +01:00
|
|
|
username = request.form.get('username', None)
|
|
|
|
password = request.form.get('password', None)
|
|
|
|
|
|
|
|
if username is None or password is None:
|
|
|
|
flash('malformed request')
|
|
|
|
return redirect(url_for('index'))
|
|
|
|
|
2020-04-30 14:54:05 +01:00
|
|
|
user = User.collection.filter('username', '==', username.strip().lower()).get()
|
2019-07-29 11:44:10 +01:00
|
|
|
|
2019-10-27 19:05:50 +00:00
|
|
|
if user is None:
|
2019-07-30 16:25:01 +01:00
|
|
|
flash('user not found')
|
|
|
|
return redirect(url_for('index'))
|
|
|
|
|
2019-10-27 19:05:50 +00:00
|
|
|
if user.check_password(password):
|
|
|
|
if user.locked:
|
2019-08-17 18:30:13 +01:00
|
|
|
logger.warning(f'locked account attempt {username}')
|
2019-08-03 21:35:08 +01:00
|
|
|
flash('account locked')
|
|
|
|
return redirect(url_for('index'))
|
|
|
|
|
2019-10-27 19:05:50 +00:00
|
|
|
user.last_login = datetime.datetime.utcnow()
|
2020-04-30 14:54:05 +01:00
|
|
|
user.update()
|
2019-07-31 12:24:10 +01:00
|
|
|
|
2019-08-17 18:30:13 +01:00
|
|
|
logger.info(f'success {username}')
|
2019-07-29 11:44:10 +01:00
|
|
|
session['username'] = username
|
|
|
|
return redirect(url_for('app_route'))
|
|
|
|
else:
|
2019-08-17 18:30:13 +01:00
|
|
|
logger.warning(f'failed attempt {username}')
|
2019-07-29 11:44:10 +01:00
|
|
|
flash('incorrect password')
|
|
|
|
return redirect(url_for('index'))
|
|
|
|
|
|
|
|
else:
|
|
|
|
return redirect(url_for('index'))
|
|
|
|
|
|
|
|
|
|
|
|
@blueprint.route('/logout', methods=['GET', 'POST'])
|
|
|
|
def logout():
|
2019-08-17 18:30:13 +01:00
|
|
|
if 'username' in session:
|
|
|
|
logger.info(f'logged out {session["username"]}')
|
2019-07-29 11:44:10 +01:00
|
|
|
session.pop('username', None)
|
|
|
|
flash('logged out')
|
|
|
|
return redirect(url_for('index'))
|
2019-07-31 12:24:10 +01:00
|
|
|
|
|
|
|
|
2019-08-03 21:35:08 +01:00
|
|
|
@blueprint.route('/register', methods=['GET', 'POST'])
|
|
|
|
def register():
|
|
|
|
|
|
|
|
if 'username' in session:
|
|
|
|
return redirect(url_for('index'))
|
|
|
|
|
|
|
|
if request.method == 'GET':
|
|
|
|
return render_template('register.html')
|
|
|
|
else:
|
|
|
|
|
2019-08-05 21:43:09 +01:00
|
|
|
username = request.form.get('username', None)
|
|
|
|
password = request.form.get('password', None)
|
|
|
|
password_again = request.form.get('password_again', None)
|
2019-08-03 21:35:08 +01:00
|
|
|
|
2019-08-05 21:43:09 +01:00
|
|
|
if username is None or password is None or password_again is None:
|
|
|
|
flash('malformed request')
|
2019-08-03 21:35:08 +01:00
|
|
|
return redirect('authapi.register')
|
|
|
|
|
2019-08-05 21:43:09 +01:00
|
|
|
username = username.lower()
|
|
|
|
|
2019-08-03 21:35:08 +01:00
|
|
|
if password != password_again:
|
|
|
|
flash('password mismatch')
|
|
|
|
return redirect('authapi.register')
|
|
|
|
|
2020-04-30 14:54:05 +01:00
|
|
|
if username in [i.username for i in
|
|
|
|
User.collection.fetch()]:
|
2019-08-05 21:43:09 +01:00
|
|
|
flash('username already registered')
|
|
|
|
return redirect('authapi.register')
|
|
|
|
|
2020-04-30 14:54:05 +01:00
|
|
|
user = User()
|
|
|
|
user.username = username
|
|
|
|
user.password = generate_password_hash(password)
|
2020-06-30 16:38:06 +01:00
|
|
|
user.last_login = datetime.datetime.utcnow()
|
2020-04-30 14:54:05 +01:00
|
|
|
|
|
|
|
user.save()
|
2019-08-03 21:35:08 +01:00
|
|
|
|
2019-08-17 18:30:13 +01:00
|
|
|
logger.info(f'new user {username}')
|
2019-08-03 21:35:08 +01:00
|
|
|
session['username'] = username
|
|
|
|
return redirect(url_for('authapi.auth'))
|
|
|
|
|
|
|
|
|
2019-07-31 12:24:10 +01:00
|
|
|
@blueprint.route('/spotify')
|
|
|
|
def auth():
|
|
|
|
|
|
|
|
if 'username' in session:
|
|
|
|
|
2020-06-30 16:38:06 +01:00
|
|
|
config = Config.collection.get("config/music-tools")
|
2020-07-29 10:45:40 +01:00
|
|
|
params = urlencode(
|
2019-07-31 12:24:10 +01:00
|
|
|
{
|
2020-06-30 16:38:06 +01:00
|
|
|
'client_id': config.spotify_client_id,
|
2019-07-31 12:24:10 +01:00
|
|
|
'response_type': 'code',
|
2020-07-29 10:45:40 +01:00
|
|
|
'scope': 'playlist-modify-public playlist-modify-private playlist-read-private '
|
|
|
|
'user-read-playback-state user-modify-playback-state user-library-read',
|
2020-01-29 12:31:19 +00:00
|
|
|
'redirect_uri': 'https://music.sarsoo.xyz/auth/spotify/token'
|
2019-07-31 12:24:10 +01:00
|
|
|
}
|
|
|
|
)
|
|
|
|
|
2020-07-29 10:45:40 +01:00
|
|
|
return redirect(urlunparse(['https', 'accounts.spotify.com', 'authorize', '', params, '']))
|
2019-07-31 12:24:10 +01:00
|
|
|
|
2019-07-31 20:31:01 +01:00
|
|
|
return redirect(url_for('index'))
|
2019-07-31 12:24:10 +01:00
|
|
|
|
|
|
|
|
|
|
|
@blueprint.route('/spotify/token')
|
|
|
|
def token():
|
|
|
|
|
|
|
|
if 'username' in session:
|
|
|
|
|
|
|
|
code = request.args.get('code', None)
|
|
|
|
if code is None:
|
2019-08-05 21:43:09 +01:00
|
|
|
flash('authorization failed')
|
|
|
|
return redirect('app_route')
|
2019-07-31 12:24:10 +01:00
|
|
|
else:
|
2020-06-30 16:38:06 +01:00
|
|
|
config = Config.collection.get("config/music-tools")
|
2019-07-31 12:24:10 +01:00
|
|
|
|
2020-06-30 16:38:06 +01:00
|
|
|
idsecret = b64encode(
|
|
|
|
bytes(config.spotify_client_id + ':' + config.spotify_client_secret, "utf-8")
|
|
|
|
).decode("ascii")
|
2019-07-31 12:24:10 +01:00
|
|
|
headers = {'Authorization': 'Basic %s' % idsecret}
|
|
|
|
|
|
|
|
data = {
|
|
|
|
'grant_type': 'authorization_code',
|
|
|
|
'code': code,
|
2020-01-29 12:31:19 +00:00
|
|
|
'redirect_uri': 'https://music.sarsoo.xyz/auth/spotify/token'
|
2019-07-31 12:24:10 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
req = requests.post('https://accounts.spotify.com/api/token', data=data, headers=headers)
|
|
|
|
|
2019-08-05 21:43:09 +01:00
|
|
|
if 200 <= req.status_code < 300:
|
|
|
|
|
|
|
|
resp = req.json()
|
|
|
|
|
2020-04-30 14:54:05 +01:00
|
|
|
user = User.collection.filter('username', '==', session['username'].strip().lower()).get()
|
2019-07-31 12:24:10 +01:00
|
|
|
|
2020-04-30 14:54:05 +01:00
|
|
|
user.access_token = resp['access_token']
|
|
|
|
user.refresh_token = resp['refresh_token']
|
|
|
|
user.last_refreshed = datetime.datetime.now(datetime.timezone.utc)
|
|
|
|
user.token_expiry = resp['expires_in']
|
|
|
|
user.spotify_linked = True
|
|
|
|
|
|
|
|
user.update()
|
2019-07-31 12:24:10 +01:00
|
|
|
|
2019-08-05 21:43:09 +01:00
|
|
|
else:
|
|
|
|
flash('http error on token request')
|
|
|
|
return redirect('app_route')
|
2019-07-31 12:24:10 +01:00
|
|
|
|
|
|
|
return redirect('/app/settings/spotify')
|
|
|
|
|
2019-07-31 20:31:01 +01:00
|
|
|
return redirect(url_for('index'))
|
2019-07-31 12:24:10 +01:00
|
|
|
|
|
|
|
|
|
|
|
@blueprint.route('/spotify/deauth')
|
|
|
|
def deauth():
|
|
|
|
|
|
|
|
if 'username' in session:
|
|
|
|
|
2020-04-30 14:54:05 +01:00
|
|
|
user = User.collection.filter('username', '==', session['username'].strip().lower()).get()
|
|
|
|
|
|
|
|
user.access_token = None
|
|
|
|
user.refresh_token = None
|
|
|
|
user.last_refreshed = datetime.datetime.now(datetime.timezone.utc)
|
|
|
|
user.token_expiry = None
|
|
|
|
user.spotify_linked = False
|
2019-07-31 12:24:10 +01:00
|
|
|
|
2020-04-30 14:54:05 +01:00
|
|
|
user.update()
|
2019-07-31 12:24:10 +01:00
|
|
|
|
|
|
|
return redirect('/app/settings/spotify')
|
|
|
|
|
2019-07-31 20:31:01 +01:00
|
|
|
return redirect(url_for('index'))
|