initial commit of working app

user_managment/app.py

@@ -0,0 +1,317 @@
+# This file contains an example Flask-User application.
+# To keep the example simple, we are applying some unusual techniques:
+# - Placing everything in one file
+# - Using class-based configuration (instead of file-based configuration)
+# - Using string-based templates (instead of file-based templates)
+
+from flask import Flask, render_template_string, request, make_response, jsonify, render_template, Markup
+from flask_sqlalchemy import SQLAlchemy
+from flask_user import login_required, UserManager, UserMixin, user_registered, roles_required
+from flask_login import current_user
+from wtforms import StringField, SubmitField
+import requests
+import base64, hashlib
+from dmr_utils3.utils import int_id, bytes_4
+from config import *
+import ast
+import json
+import datetime
+from flask_babelex import Babel
+
+def gen_passphrase(dmr_id):
+    _new_peer_id = bytes_4(int(str(dmr_id)[:7]))
+    calc_passphrase = base64.b64encode((_new_peer_id) + append_int.to_bytes(2, 'big'))
+    return str(calc_passphrase)[2:-1]
+
+def get_ids(callsign):
+    try:
+        url = "https://www.radioid.net"
+        response = requests.get(url+"/api/dmr/user/?callsign=" + callsign)
+        result = response.json()
+    #        id_list = []
+        id_list = {}
+        for i in result['results']:
+             id_list[i['id']] = ''
+        return str(id_list)
+    except:
+        return ''
+
+# Class-based application configuration
+class ConfigClass(object):
+    """ Flask application config """
+
+    # Flask settings
+    SECRET_KEY = 'Change me'
+
+    # Flask-SQLAlchemy settings
+    SQLALCHEMY_DATABASE_URI = 'sqlite:///mmdvm_users.sqlite'    # File-based SQL database
+    SQLALCHEMY_TRACK_MODIFICATIONS = False    # Avoids SQLAlchemy warning
+
+    # Flask-User settings
+    USER_APP_NAME = title      # Shown in and email templates and page footers
+    USER_ENABLE_EMAIL = False      # Disable email authentication
+    USER_ENABLE_USERNAME = True    # Enable username authentication
+    USER_REQUIRE_RETYPE_PASSWORD = True    # Simplify register form
+    USER_ENABLE_CHANGE_USERNAME = False
+
+
+# Setup Flask-User
+def create_app():
+    """ Flask application factory """
+    
+    # Create Flask app load app.config
+    app = Flask(__name__)
+    app.config.from_object(__name__+'.ConfigClass')
+
+        # Initialize Flask-BabelEx
+    babel = Babel(app)
+
+    # Initialize Flask-SQLAlchemy
+    db = SQLAlchemy(app)
+
+    # Define the User data-model.
+    # NB: Make sure to add flask_user UserMixin !!!
+    class User(db.Model, UserMixin):
+        __tablename__ = 'users'
+        id = db.Column(db.Integer, primary_key=True)
+        active = db.Column('is_active', db.Boolean(), nullable=False, server_default='1')
+
+        # User authentication information. The collation='NOCASE' is required
+        # to search case insensitively when USER_IFIND_MODE is 'nocase_collation'.
+        username = db.Column(db.String(100, collation='NOCASE'), nullable=False, unique=True)
+        password = db.Column(db.String(255), nullable=False, server_default='')
+        email_confirmed_at = db.Column(db.DateTime())
+
+        # User information
+        first_name = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
+        last_name = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
+        dmr_ids = db.Column(db.String(100, collation='NOCASE'), nullable=False, server_default='')
+        # Define the relationship to Role via UserRoles
+        roles = db.relationship('Role', secondary='user_roles')
+        
+    # Define the Role data-model
+    class Role(db.Model):
+        __tablename__ = 'roles'
+        id = db.Column(db.Integer(), primary_key=True)
+        name = db.Column(db.String(50), unique=True)
+
+    # Define the UserRoles association table
+    class UserRoles(db.Model):
+        __tablename__ = 'user_roles'
+        id = db.Column(db.Integer(), primary_key=True)
+        user_id = db.Column(db.Integer(), db.ForeignKey('users.id', ondelete='CASCADE'))
+        role_id = db.Column(db.Integer(), db.ForeignKey('roles.id', ondelete='CASCADE'))
+
+        
+    user_manager = UserManager(app, db, User)
+
+
+    # Create all database tables
+    db.create_all()
+
+
+    if not User.query.filter(User.username == 'admin').first():
+        user = User(
+            username='admin',
+            email_confirmed_at=datetime.datetime.utcnow(),
+            password=user_manager.hash_password('admin'),
+        )
+        user.roles.append(Role(name='Admin'))
+        user.roles.append(Role(name='User'))
+        db.session.add(user)
+        db.session.commit()
+    
+##    from flask_user.forms import RegisterForm
+##    class CustomRegisterForm(RegisterForm):
+##        # Add a country field to the Register form
+##        call = StringField(('Callsign'))
+##
+##    # Customize the User profile form:
+##    from flask_user.forms import EditUserProfileForm
+##    class CustomUserProfileForm(EditUserProfileForm):
+##        # Add a country field to the UserProfile form
+##        call = StringField(('Callsign'))
+##
+##    # Customize Flask-User
+##    class CustomUserManager(UserManager):
+##
+##        def customize(self, app):
+##
+##            # Configure customized forms
+##            self.RegisterFormClass = CustomRegisterForm
+##            #self.UserProfileFormClass = CustomUserProfileForm
+##            # NB: assign:  xyz_form = XyzForm   -- the class!
+##            #   (and not:  xyz_form = XyzForm() -- the instance!)
+##        # Setup Flask-User and specify the User data-model
+    #user_manager = CustomUserManager(app, db, User)
+
+    # Query radioid.net for list of DMR IDs, then add to DB
+    @user_registered.connect_via(app)
+    def _after_user_registered_hook(sender, user, **extra):
+        edit_user = User.query.filter(User.username == user.username).first()
+        edit_user.dmr_ids = get_ids(user.username)
+        db.session.commit()       
+        
+    # The Home page is accessible to anyone
+    @app.route('/')
+    def home_page():
+        content = Markup('<strong>The HTML String</strong>')
+        # String-based templates
+##        return render_template_string("""
+##            {% extends "flask_user_layout.html" %}
+##            {% block content %}
+##                <h2>Home page</h2>
+##                <p><a href={{ url_for('user.register') }}>Register</a></p>
+##                <p><a href={{ url_for('user.login') }}>Sign in</a></p>
+##                <p><a href={{ url_for('home_page') }}>Home page</a> (accessible to anyone)</p>
+##                <p><a href={{ url_for('member_page') }}>Member page</a> (login required)</p>
+##                <p><a href={{ url_for('user.logout') }}>Sign out</a></p>
+##            {% endblock %}
+##            """)
+        return render_template('index.html', markup_content = content, logo = logo)
+    
+    @app.route('/generate_passphrase', methods = ['GET'])
+    @login_required
+    def gen():
+        #content = Markup('<strong>The HTML String</strong>')
+        #user_id = request.args.get('user_id')
+        u = current_user
+        print(u.username)
+        id_dict = ast.literal_eval(u.dmr_ids)
+        #u = User.query.filter_by(username=user).first()
+##        print(user_id)
+##        print(request.args.get('mode'))
+##        if request.args.get('mode') == 'generated':
+        content = ''
+        for i in id_dict.items():
+            if i[1] == '':
+                content = content + '''\n
+        <p style="text-align: center;">Your passphrase for <strong>''' + str(i[0]) + '''</strong>:</p>
+        <p style="text-align: center;"><strong>''' + str(gen_passphrase(int(i[0]))) + '''</strong></p>
+    '''
+            elif i[1] == 0:
+                content = content + '''\n<p style="text-align: center;">Using legacy auth</p>'''
+            else:
+                content = content + '''\n<p style="text-align: center;">Using custom auth passphrase: ''' + str(i[1]) + '''</p>'''
+        
+            
+        #return str(content)
+        return render_template('flask_user_layout.html', markup_content = Markup(content), logo = logo)
+
+    # The Members page is only accessible to authenticated users via the @login_required decorator
+    @app.route('/members')
+    @login_required    # User must be authenticated
+    def member_page():
+        # String-based templates
+##        return render_template_string("""
+##            {% extends "flask_user_layout.html" %}
+##            {% block content %}
+##                <h2>Members page</h2>
+##                <p><a href={{ url_for('user.register') }}>Register</a></p>
+##                <p><a href={{ url_for('user.login') }}>Sign in</a></p>
+##                <p><a href={{ url_for('home_page') }}>Home page</a> (accessible to anyone)</p>
+##                <p><a href={{ url_for('member_page') }}>Member page</a> (login required)</p>
+##                <p><a href={{ url_for('user.logout') }}>Sign out</a></p>
+##            {% endblock %}
+##            """)
+        content = 'Mem only'
+        return render_template('flask_user_layout.html', markup_content = content, logo = logo)
+    # The Admin page requires an 'Admin' role.
+    @app.route('/admin')
+    @roles_required('Admin')    # Use of @roles_required decorator
+    def admin_page():
+        return render_template_string("""
+                {% extends "flask_user_layout.html" %}
+                {% block content %}
+                    <h2>{%trans%}Admin Page{%endtrans%}</h2>
+                    <p><a href={{ url_for('user.register') }}>{%trans%}Register{%endtrans%}</a></p>
+                    <p><a href={{ url_for('user.login') }}>{%trans%}Sign in{%endtrans%}</a></p>
+                    <p><a href={{ url_for('home_page') }}>{%trans%}Home Page{%endtrans%}</a> (accessible to anyone)</p>
+                    <p><a href={{ url_for('member_page') }}>{%trans%}Member Page{%endtrans%}</a> (login_required: member@example.com / Password1)</p>
+                    <p><a href={{ url_for('admin_page') }}>{%trans%}Admin Page{%endtrans%}</a> (role_required: admin@example.com / Password1')</p>
+                    <p><a href={{ url_for('user.logout') }}>{%trans%}Sign out{%endtrans%}</a></p>
+                {% endblock %}
+                """)
+
+    def authorized_peer(peer_id):
+        try:
+            u = User.query.filter(User.dmr_ids.contains(str(peer_id))).first()
+            login_passphrase = ast.literal_eval(u.dmr_ids)
+            return [u.is_active, login_passphrase[peer_id]]
+        except:
+            return [False]
+
+    @app.route('/test')
+    def test_peer():
+##        #u = User.query.filter_by(username='kf7eel').first()
+##        u = User.query.filter(User.dmr_ids.contains('3153591')).first()
+##        #tu = User.query.all()
+##        #tu = User.query().all()
+####        print((tu.dmr_ids))
+####        #print(tu.dmr_ids)
+####        return str(tu.dmr_ids) #str(get_ids('kf7eel'))
+##        login_passphrase = ast.literal_eval(u.dmr_ids)
+##        print('|' + login_passphrase[3153591] + '|')
+##        #print(u.dmr_ids)
+##        #tu.dmr_ids = 'jkgfldj'
+##        #db.session.commit()
+##        return str(u.dmr_ids)
+##        u = User.query.filter(User.dmr_ids.contains('3153591')).first()
+##        #tu = User.query.all()
+##        #tu = User.query().all()
+####        print((tu.dmr_ids))
+####        #print(tu.dmr_ids)
+####        return str(tu.dmr_ids) #str(get_ids('kf7eel'))
+##        print(u)
+##        login_passphrase = ast.literal_eval(u.dmr_ids)
+##        
+##        #tu.dmr_ids = 'jkgfldj'
+##        #db.session.commit()
+##        return str([u.is_active, login_passphrase[3153591]])
+
+        return str(authorized_peer(3153591)[0])
+
+
+
+
+
+    @app.route('/auth', methods=['POST'])
+    def auth():
+        hblink_req = request.json
+        #print((hblink_req))
+        if hblink_req['secret'] in shared_secrets:
+            if authorized_peer(hblink_req['id'])[0]:
+                if authorized_peer(hblink_req['id'])[1] == 0:
+                    response = jsonify(
+                            allow=True,
+                            mode='legacy',
+                            )
+                elif authorized_peer(hblink_req['id'])[1] == '':
+                # normal
+                    response = jsonify(
+                            allow=True,
+                            mode='normal',
+                            )
+                elif authorized_peer(hblink_req['id'])[1] != '' or authorized_peer(hblink_req['id'])[1] != 0:
+                    response = jsonify(
+                            allow=True,
+                            mode='override',
+                            value=auth_dict[hblink_req['id']]
+                                )
+            if authorized_peer(hblink_req['id'])[0] == False:
+                response = jsonify(
+                            allow=False)
+        else:
+            message = jsonify(message='Authentication error')
+            response = make_response(message, 401)
+            
+        return response
+
+
+
+    return app
+
+
+if __name__ == '__main__':
+    app = create_app()
+    app.run(debug = True, port=ums_port, host=ums_host)

user_managment/config-SAMPLE.py

@@ -4,9 +4,9 @@ Settings for user management portal.
 '''
 
 # Title of the Dashboard
-title = 'PNW MMDVM User Portal'
+title = 'MMDVM User Portal'
 # Logo used on dashboard page
-logo = 'http://pnwdigital.net/images/Logos/PP-PNW-Logo-12b-Clean-250c.png'
+logo = 'https://github.com/HBLink-org/hblink3/raw/master/HBlink.png'
 # Port to run server
 ums_port = 8080
 # IP to run server on

user_managment/templates/flask_user_layout.html

@@ -0,0 +1,121 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>{{ user_manager.USER_APP_NAME }}</title>
+
+    <!-- Bootstrap -->
+    <link href="//netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css" rel="stylesheet">
+
+    <!-- In-lining styles to avoid needing a separate .css file -->
+    <style>
+        hr { border-color: #cccccc; margin: 0; }
+        .no-margins { margin: 0px; }
+        .with-margins { margin: 10px; }
+        .col-centered { float: none; margin: 0 auto; }
+    </style>
+
+    <!-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries -->
+    <!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
+    <!--[if lt IE 9]>
+      <script src="//cdnjs.cloudflare.com/ajax/libs/html5shiv/3.7/html5shiv.js"></script>
+      <script src="//cdnjs.cloudflare.com/ajax/libs/respond.js/1.4.2/respond.js"></script>
+    <![endif]-->
+
+    {# *** Allow sub-templates to insert extra html to the head section *** #}
+    {% block extra_css %}{% endblock %}
+  </head>
+
+
+<body>
+<h1 style="text-align: center;">{{ user_manager.USER_APP_NAME }}</h1>
+    <p><img style="display: block; margin-left: auto; margin-right: auto;" src="{{logo}}" alt="Logo" width="300" height="144" /></p>
+<h1 style="text-align: center;">{{title}}</h1>
+<hr />
+<table style="width: 500px; margin-left: auto; margin-right: auto;" border="black" cellspacing="3" cellpadding="3">
+<tbody>
+<tr>
+    
+<td style="text-align: center;"><a href={{url}}/>Home</a></td>
+<td style="text-align: center;"><a href={{ url_for('user.register') }}>Register</a></td>
+<td style="text-align: center;"><a href={{ url_for('user.login') }}>Sign in</a></td>
+    {% if call_or_get(current_user.is_authenticated) %}
+<td style="text-align: center;"><a href={{url}}/generate_passphrase>View Passphrase(s)</a></td>
+<td style="text-align: center;"><a href="{{ url_for('user.edit_user_profile') }}">Edit {{ current_user.username or current_user.email }}</a></td>
+<td style="text-align: center;"><a href={{ url_for('user.logout') }}>Sign out</a></td>
+            {% endif %}
+
+
+    
+</tr>
+</tbody>
+</table>
+<hr />
+    {% block body %}
+<!--
+    <div id="header-div" class="clearfix with-margins">
+        <div class="pull-left"><a href="/"><h1 class="no-margins">{{ user_manager.USER_APP_NAME }}</h1></a></div>
+        <div class="pull-right">
+            {% if call_or_get(current_user.is_authenticated) %}
+                <a href="{{ url_for('user.edit_user_profile') }}">{{ current_user.username or current_user.email }}</a>
+                &nbsp; | &nbsp;
+                <a href="{{ url_for('user.logout') }}">{%trans%}Sign out{%endtrans%}</a>
+            {% else %}
+                <a href="{{ url_for('user.login') }}">{%trans%}Sign in{%endtrans%}</a>
+            {% endif %}
+        </div>
+
+    </div>
+    {% block menu %}
+    <div id="menu-div" class="with-margins">
+        <a href="/">{%trans%}Home page{%endtrans%}</a>
+    </div>
+    {% endblock %}
+-->
+    <hr class="no-margins"/>
+
+    <div id="main-div" class="with-margins">
+    {# One-time system messages called Flash messages #}
+    {% block flash_messages %}
+        {%- with messages = get_flashed_messages(with_categories=true) -%}
+            {% if messages %}
+                {% for category, message in messages %}
+                    {% if category=='error' %}
+                        {% set category='danger' %}
+                    {% endif %}
+                    <div class="alert alert-{{category}}">{{ message|safe }}</div>
+                {% endfor %}
+            {% endif %}
+        {%- endwith %}
+    {% endblock %}
+    {% block main %}
+        {% block content %}
+
+                {{markup_content}}
+
+
+    {% endblock %}
+    {% endblock %}
+    </div>
+
+    <br/>
+    <hr class="no-margins"/>
+    <div id="footer-div" class="clearfix with-margins">
+        <div class="pull-left">{{ user_manager.USER_APP_NAME }}</div>
+        <div class="pull-right">Credits: KF7EEL, W7NCX, N9VW, KC7AAD, NO7RF</div>
+    </div>
+    {% endblock %}
+
+
+    <!-- jQuery (necessary for Bootstrap's JavaScript plugins) -->
+    <script src="//code.jquery.com/jquery-1.11.0.min.js"></script>
+    <!-- Bootstrap -->
+    <script src="//netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js"></script>
+
+    {# *** Allow sub-templates to insert extra html to the bottom of the body *** #}
+    {% block extra_js %}{% endblock %}
+
+  </body>
+</html>

user_managment/templates/index.html

@@ -0,0 +1,4 @@
+{% extends 'flask_user/_public_base.html' %}
+{% block content %}
+<p>Welcome to the <strong>{{ user_manager.USER_APP_NAME }}</strong>. This tool is used to manage your access.</p>
+{% endblock %}