taiko-web/app.py

769 lines
26 KiB
Python
Raw Normal View History

2020-03-13 03:45:42 +01:00
#!/usr/bin/env python3
2018-10-17 23:16:53 +02:00
2020-03-17 02:27:06 +01:00
import base64
2020-03-13 03:45:42 +01:00
import bcrypt
2020-03-17 02:27:06 +01:00
import hashlib
try:
import config
except ModuleNotFoundError:
raise FileNotFoundError('No such file or directory: \'config.py\'. Copy the example config file config.example.py to config.py')
2018-10-10 22:57:29 +02:00
import json
2018-08-27 14:28:30 +02:00
import re
2020-03-17 02:27:06 +01:00
import requests
2020-03-13 03:45:42 +01:00
import schema
2018-08-27 14:28:30 +02:00
import os
import time
2020-03-13 03:45:42 +01:00
2024-02-13 02:17:15 +01:00
import flask
2020-03-13 03:45:42 +01:00
from functools import wraps
2024-02-13 02:17:15 +01:00
from flask import Flask, g, jsonify, render_template, request, abort, redirect, session, flash, make_response, send_from_directory
2019-02-14 11:31:23 +01:00
from flask_caching import Cache
2020-03-13 03:45:42 +01:00
from flask_session import Session
2020-03-17 03:18:18 +01:00
from flask_wtf.csrf import CSRFProtect, generate_csrf, CSRFError
2018-10-17 23:16:53 +02:00
from ffmpy import FFmpeg
2020-03-13 03:45:42 +01:00
from pymongo import MongoClient
2020-04-06 10:29:23 +02:00
from redis import Redis
2018-08-26 18:14:56 +02:00
def take_config(name, required=False):
if hasattr(config, name):
return getattr(config, name)
elif required:
raise ValueError('Required option is not defined in the config.py file: {}'.format(name))
else:
return None
2018-08-26 18:14:56 +02:00
app = Flask(__name__)
2024-02-13 02:17:15 +01:00
client = MongoClient(host=os.environ.get("TAIKO_WEB_MONGO_HOST") or take_config('MONGO', required=True)['host'])
basedir = take_config('BASEDIR') or '/'
2020-03-13 03:45:42 +01:00
app.secret_key = take_config('SECRET_KEY') or 'change-me'
2020-03-13 03:45:42 +01:00
app.config['SESSION_TYPE'] = 'redis'
redis_config = take_config('REDIS', required=True)
2024-02-13 02:17:15 +01:00
redis_config['CACHE_REDIS_HOST'] = os.environ.get("TAIKO_WEB_REDIS_HOST") or redis_config['CACHE_REDIS_HOST']
2020-04-06 10:29:23 +02:00
app.config['SESSION_REDIS'] = Redis(
host=redis_config['CACHE_REDIS_HOST'],
port=redis_config['CACHE_REDIS_PORT'],
password=redis_config['CACHE_REDIS_PASSWORD'],
db=redis_config['CACHE_REDIS_DB']
2020-04-06 10:29:23 +02:00
)
app.cache = Cache(app, config=redis_config)
2020-03-13 03:45:42 +01:00
sess = Session()
sess.init_app(app)
2020-03-17 03:10:47 +01:00
csrf = CSRFProtect(app)
2020-03-13 03:45:42 +01:00
db = client[take_config('MONGO', required=True)['database']]
2020-03-13 03:45:42 +01:00
db.users.create_index('username', unique=True)
2020-03-17 00:30:44 +01:00
db.songs.create_index('id', unique=True)
2022-02-18 00:07:12 +01:00
db.scores.create_index('username')
2018-08-26 18:14:56 +02:00
2020-03-17 02:27:06 +01:00
class HashException(Exception):
pass
2020-03-13 03:45:42 +01:00
def api_error(message):
return jsonify({'status': 'error', 'message': message})
2020-03-17 02:27:06 +01:00
def generate_hash(id, form):
md5 = hashlib.md5()
if form['type'] == 'tja':
urls = ['%s%s/main.tja' % (take_config('SONGS_BASEURL', required=True), id)]
2020-03-17 02:27:06 +01:00
else:
urls = []
for diff in ['easy', 'normal', 'hard', 'oni', 'ura']:
if form['course_' + diff]:
urls.append('%s%s/%s.osu' % (take_config('SONGS_BASEURL', required=True), id, diff))
2020-03-17 02:27:06 +01:00
for url in urls:
if url.startswith("http://") or url.startswith("https://"):
resp = requests.get(url)
if resp.status_code != 200:
raise HashException('Invalid response from %s (status code %s)' % (resp.url, resp.status_code))
md5.update(resp.content)
else:
if url.startswith(basedir):
url = url[len(basedir):]
path = os.path.normpath(os.path.join("public", url))
if not os.path.isfile(path):
raise HashException("File not found: %s" % (os.path.abspath(path)))
with open(path, "rb") as file:
md5.update(file.read())
2020-03-17 02:27:06 +01:00
return base64.b64encode(md5.digest())[:-2].decode('utf-8')
2020-03-13 03:45:42 +01:00
def login_required(f):
@wraps(f)
def decorated_function(*args, **kwargs):
if not session.get('username'):
return api_error('not_logged_in')
return f(*args, **kwargs)
return decorated_function
2020-03-17 00:30:44 +01:00
def admin_required(level):
def decorated_function(f):
@wraps(f)
def wrapper(*args, **kwargs):
if not session.get('username'):
return abort(403)
user = db.users.find_one({'username': session.get('username')})
if user['user_level'] < level:
return abort(403)
2018-08-26 18:14:56 +02:00
2020-03-17 00:30:44 +01:00
return f(*args, **kwargs)
return wrapper
2020-03-13 03:45:42 +01:00
return decorated_function
2018-08-26 18:14:56 +02:00
2020-03-17 03:18:18 +01:00
@app.errorhandler(CSRFError)
def handle_csrf_error(e):
return api_error('invalid_csrf')
@app.before_request
def before_request_func():
if session.get('session_id'):
if not db.users.find_one({'session_id': session.get('session_id')}):
session.clear()
def get_config(credentials=False):
2020-03-17 00:30:44 +01:00
config_out = {
'basedir': basedir,
'songs_baseurl': take_config('SONGS_BASEURL', required=True),
'assets_baseurl': take_config('ASSETS_BASEURL', required=True),
'email': take_config('EMAIL'),
'accounts': take_config('ACCOUNTS'),
'custom_js': take_config('CUSTOM_JS'),
'plugins': take_config('PLUGINS') and [x for x in take_config('PLUGINS') if x['url']],
'preview_type': take_config('PREVIEW_TYPE') or 'mp3',
'multiplayer_url': take_config('MULTIPLAYER_URL')
2020-03-17 00:30:44 +01:00
}
relative_urls = ['songs_baseurl', 'assets_baseurl']
for name in relative_urls:
if not config_out[name].startswith("/") and not config_out[name].startswith("http://") and not config_out[name].startswith("https://"):
config_out[name] = basedir + config_out[name]
if credentials:
google_credentials = take_config('GOOGLE_CREDENTIALS')
min_level = google_credentials['min_level'] or 0
if not session.get('username'):
user_level = 0
else:
user = db.users.find_one({'username': session.get('username')})
user_level = user['user_level']
if user_level >= min_level:
config_out['google_credentials'] = google_credentials
else:
config_out['google_credentials'] = {
'gdrive_enabled': False
}
2018-10-28 10:59:49 +01:00
2020-03-17 00:30:44 +01:00
if not config_out.get('songs_baseurl'):
config_out['songs_baseurl'] = ''.join([request.host_url, 'songs']) + '/'
if not config_out.get('assets_baseurl'):
config_out['assets_baseurl'] = ''.join([request.host_url, 'assets']) + '/'
2018-10-28 10:59:49 +01:00
2020-03-17 00:30:44 +01:00
config_out['_version'] = get_version()
return config_out
2018-10-28 10:59:49 +01:00
2018-12-05 22:47:35 +01:00
def get_version():
version = {'commit': None, 'commit_short': '', 'version': None, 'url': take_config('URL')}
2018-12-05 22:47:35 +01:00
if os.path.isfile('version.json'):
2019-02-06 19:49:25 +01:00
try:
ver = json.load(open('version.json', 'r'))
except ValueError:
print('Invalid version.json file')
return version
for key in version.keys():
if ver.get(key):
version[key] = ver.get(key)
2018-12-05 22:47:35 +01:00
return version
def get_db_don(user):
don_body_fill = user['don_body_fill'] if 'don_body_fill' in user else get_default_don('body_fill')
don_face_fill = user['don_face_fill'] if 'don_face_fill' in user else get_default_don('face_fill')
return {'body_fill': don_body_fill, 'face_fill': don_face_fill}
def get_default_don(part=None):
if part == None:
return {
'body_fill': get_default_don('body_fill'),
'face_fill': get_default_don('face_fill')
}
elif part == 'body_fill':
return '#5fb7c1'
elif part == 'face_fill':
return '#ff5724'
def is_hex(input):
try:
int(input, 16)
return True
except ValueError:
return False
2018-12-05 22:47:35 +01:00
@app.route(basedir)
2018-10-10 22:57:29 +02:00
def route_index():
2018-12-05 22:47:35 +01:00
version = get_version()
2018-10-28 10:59:49 +01:00
return render_template('index.html', version=version, config=get_config())
2018-10-10 22:57:29 +02:00
@app.route(basedir + 'api/csrftoken')
2020-03-17 05:03:10 +01:00
def route_csrftoken():
return jsonify({'status': 'ok', 'token': generate_csrf()})
@app.route(basedir + 'admin')
2020-03-17 00:30:44 +01:00
@admin_required(level=50)
2020-03-13 03:45:42 +01:00
def route_admin():
return redirect(basedir + 'admin/songs')
2020-03-13 03:45:42 +01:00
@app.route(basedir + 'admin/songs')
2020-03-17 00:30:44 +01:00
@admin_required(level=50)
2020-03-13 03:45:42 +01:00
def route_admin_songs():
songs = sorted(list(db.songs.find({})), key=lambda x: x['id'])
categories = db.categories.find({})
2020-03-17 00:30:44 +01:00
user = db.users.find_one({'username': session['username']})
return render_template('admin_songs.html', songs=songs, admin=user, categories=list(categories), config=get_config())
2020-03-13 03:45:42 +01:00
@app.route(basedir + 'admin/songs/<int:id>')
2020-03-17 00:30:44 +01:00
@admin_required(level=50)
2020-03-13 03:45:42 +01:00
def route_admin_songs_id(id):
song = db.songs.find_one({'id': id})
if not song:
return abort(404)
categories = list(db.categories.find({}))
song_skins = list(db.song_skins.find({}))
2020-03-15 17:16:18 +01:00
makers = list(db.makers.find({}))
user = db.users.find_one({'username': session['username']})
2020-03-13 03:45:42 +01:00
return render_template('admin_song_detail.html',
song=song, categories=categories, song_skins=song_skins, makers=makers, admin=user, config=get_config())
2020-03-15 17:16:18 +01:00
@app.route(basedir + 'admin/songs/new')
2020-03-17 00:30:44 +01:00
@admin_required(level=100)
def route_admin_songs_new():
categories = list(db.categories.find({}))
song_skins = list(db.song_skins.find({}))
makers = list(db.makers.find({}))
seq = db.seq.find_one({'name': 'songs'})
seq_new = seq['value'] + 1 if seq else 1
2020-03-17 00:30:44 +01:00
return render_template('admin_song_new.html', categories=categories, song_skins=song_skins, makers=makers, config=get_config(), id=seq_new)
2020-03-17 00:30:44 +01:00
@app.route(basedir + 'admin/songs/new', methods=['POST'])
2020-03-17 00:30:44 +01:00
@admin_required(level=100)
def route_admin_songs_new_post():
output = {'title_lang': {}, 'subtitle_lang': {}, 'courses': {}}
output['enabled'] = True if request.form.get('enabled') else False
output['title'] = request.form.get('title') or None
output['subtitle'] = request.form.get('subtitle') or None
for lang in ['ja', 'en', 'cn', 'tw', 'ko']:
output['title_lang'][lang] = request.form.get('title_%s' % lang) or None
output['subtitle_lang'][lang] = request.form.get('subtitle_%s' % lang) or None
for course in ['easy', 'normal', 'hard', 'oni', 'ura']:
if request.form.get('course_%s' % course):
output['courses'][course] = {'stars': int(request.form.get('course_%s' % course)),
'branch': True if request.form.get('branch_%s' % course) else False}
else:
output['courses'][course] = None
output['category_id'] = int(request.form.get('category_id')) or None
output['type'] = request.form.get('type')
output['music_type'] = request.form.get('music_type')
2020-03-17 00:30:44 +01:00
output['offset'] = float(request.form.get('offset')) or None
output['skin_id'] = int(request.form.get('skin_id')) or None
output['preview'] = float(request.form.get('preview')) or None
output['volume'] = float(request.form.get('volume')) or None
output['maker_id'] = int(request.form.get('maker_id')) or None
output['lyrics'] = True if request.form.get('lyrics') else False
output['hash'] = request.form.get('hash')
2020-03-17 00:30:44 +01:00
seq = db.seq.find_one({'name': 'songs'})
seq_new = seq['value'] + 1 if seq else 1
hash_error = False
if request.form.get('gen_hash'):
try:
output['hash'] = generate_hash(seq_new, request.form)
except HashException as e:
hash_error = True
flash('An error occurred: %s' % str(e), 'error')
2020-03-17 00:30:44 +01:00
output['id'] = seq_new
output['order'] = seq_new
2020-03-17 00:30:44 +01:00
db.songs.insert_one(output)
if not hash_error:
flash('Song created.')
2020-03-17 00:30:44 +01:00
db.seq.update_one({'name': 'songs'}, {'$set': {'value': seq_new}}, upsert=True)
return redirect(basedir + 'admin/songs/%s' % str(seq_new))
2020-03-17 00:30:44 +01:00
@app.route(basedir + 'admin/songs/<int:id>', methods=['POST'])
2020-04-06 07:36:08 +02:00
@admin_required(level=50)
2020-03-15 17:16:18 +01:00
def route_admin_songs_id_post(id):
song = db.songs.find_one({'id': id})
if not song:
return abort(404)
user = db.users.find_one({'username': session['username']})
user_level = user['user_level']
output = {'title_lang': {}, 'subtitle_lang': {}, 'courses': {}}
if user_level >= 100:
output['enabled'] = True if request.form.get('enabled') else False
output['title'] = request.form.get('title') or None
output['subtitle'] = request.form.get('subtitle') or None
for lang in ['ja', 'en', 'cn', 'tw', 'ko']:
output['title_lang'][lang] = request.form.get('title_%s' % lang) or None
output['subtitle_lang'][lang] = request.form.get('subtitle_%s' % lang) or None
for course in ['easy', 'normal', 'hard', 'oni', 'ura']:
if request.form.get('course_%s' % course):
output['courses'][course] = {'stars': int(request.form.get('course_%s' % course)),
'branch': True if request.form.get('branch_%s' % course) else False}
else:
output['courses'][course] = None
2020-03-15 17:25:38 +01:00
output['category_id'] = int(request.form.get('category_id')) or None
2020-03-15 17:16:18 +01:00
output['type'] = request.form.get('type')
output['music_type'] = request.form.get('music_type')
2020-03-15 17:16:18 +01:00
output['offset'] = float(request.form.get('offset')) or None
output['skin_id'] = int(request.form.get('skin_id')) or None
output['preview'] = float(request.form.get('preview')) or None
output['volume'] = float(request.form.get('volume')) or None
output['maker_id'] = int(request.form.get('maker_id')) or None
output['lyrics'] = True if request.form.get('lyrics') else False
2020-03-17 02:27:06 +01:00
output['hash'] = request.form.get('hash')
hash_error = False
2020-03-17 02:27:06 +01:00
if request.form.get('gen_hash'):
try:
output['hash'] = generate_hash(id, request.form)
except HashException as e:
hash_error = True
2020-03-17 02:27:06 +01:00
flash('An error occurred: %s' % str(e), 'error')
2020-03-15 17:16:18 +01:00
db.songs.update_one({'id': id}, {'$set': output})
if not hash_error:
flash('Changes saved.')
return redirect(basedir + 'admin/songs/%s' % id)
2020-03-13 03:45:42 +01:00
@app.route(basedir + 'admin/songs/<int:id>/delete', methods=['POST'])
2020-03-17 00:30:44 +01:00
@admin_required(level=100)
def route_admin_songs_id_delete(id):
song = db.songs.find_one({'id': id})
if not song:
return abort(404)
db.songs.delete_one({'id': id})
flash('Song deleted.')
return redirect(basedir + 'admin/songs')
2020-03-17 00:30:44 +01:00
@app.route(basedir + 'admin/users')
@admin_required(level=50)
def route_admin_users():
user = db.users.find_one({'username': session.get('username')})
max_level = user['user_level'] - 1
return render_template('admin_users.html', config=get_config(), max_level=max_level, username='', level='')
@app.route(basedir + 'admin/users', methods=['POST'])
@admin_required(level=50)
def route_admin_users_post():
admin_name = session.get('username')
admin = db.users.find_one({'username': admin_name})
max_level = admin['user_level'] - 1
username = request.form.get('username')
Bug fixes - Change song select mouse wheel song scrolling to be instant - Clicking on don chan in account settings toggles the animation - If the music is too long for the chart, the results screen is shown earlier - Fix weird BPM values freezing the browser (zero, negative, and very large) - Add a warning to the page when JavaScript is disabled in the browser - Fix Chrome auto dark mode by forcing light mode on the page - Add a meta keywords tag to the page - Fix plugin names getting cut off in the menu - Delay the function editing of the EditFunction class in plugins to the start() function instead of load() - When stopping one of the plugins, all the plugins have to be stopped in reverse order and started again so that patched code of a stopped plugin does not linger around - Fix importing plugins that have a SyntaxError - Fix plugins getting the same internal name when added without one, causing them to not appear in the plugin settings - Support editing args in EditFunction for plugins - Prevent multiple websockets from being opened - Fix page freezing after selecting Random song with no songs - Fix the back button being repeated twice when there are no songs - Fix /admin/users not accepting case insensitive usernames - Pressing enter on the Delete Account field does the expected action instead of refreshing the page - Better error message when custom folder access is denied - Fix being able to start netplay in custom songs after refreshing the page (#383) - Fix an error when importing songs from previous session and clicking on the white spot where you normally start multiplayer session - Fix canvas elements becoming smaller than 1x1 resolution and crashing the game (#390) - Fix song frame shadow cache on song select not being cleared when resizing the browser window, causing it to become blurry - Fix a pause-restart error when you hit both confirm keys on the restart button
2022-02-17 21:50:07 +01:00
try:
level = int(request.form.get('level')) or 0
except ValueError:
level = 0
Bug fixes - Change song select mouse wheel song scrolling to be instant - Clicking on don chan in account settings toggles the animation - If the music is too long for the chart, the results screen is shown earlier - Fix weird BPM values freezing the browser (zero, negative, and very large) - Add a warning to the page when JavaScript is disabled in the browser - Fix Chrome auto dark mode by forcing light mode on the page - Add a meta keywords tag to the page - Fix plugin names getting cut off in the menu - Delay the function editing of the EditFunction class in plugins to the start() function instead of load() - When stopping one of the plugins, all the plugins have to be stopped in reverse order and started again so that patched code of a stopped plugin does not linger around - Fix importing plugins that have a SyntaxError - Fix plugins getting the same internal name when added without one, causing them to not appear in the plugin settings - Support editing args in EditFunction for plugins - Prevent multiple websockets from being opened - Fix page freezing after selecting Random song with no songs - Fix the back button being repeated twice when there are no songs - Fix /admin/users not accepting case insensitive usernames - Pressing enter on the Delete Account field does the expected action instead of refreshing the page - Better error message when custom folder access is denied - Fix being able to start netplay in custom songs after refreshing the page (#383) - Fix an error when importing songs from previous session and clicking on the white spot where you normally start multiplayer session - Fix canvas elements becoming smaller than 1x1 resolution and crashing the game (#390) - Fix song frame shadow cache on song select not being cleared when resizing the browser window, causing it to become blurry - Fix a pause-restart error when you hit both confirm keys on the restart button
2022-02-17 21:50:07 +01:00
user = db.users.find_one({'username_lower': username.lower()})
if not user:
flash('Error: User was not found.')
Bug fixes - Change song select mouse wheel song scrolling to be instant - Clicking on don chan in account settings toggles the animation - If the music is too long for the chart, the results screen is shown earlier - Fix weird BPM values freezing the browser (zero, negative, and very large) - Add a warning to the page when JavaScript is disabled in the browser - Fix Chrome auto dark mode by forcing light mode on the page - Add a meta keywords tag to the page - Fix plugin names getting cut off in the menu - Delay the function editing of the EditFunction class in plugins to the start() function instead of load() - When stopping one of the plugins, all the plugins have to be stopped in reverse order and started again so that patched code of a stopped plugin does not linger around - Fix importing plugins that have a SyntaxError - Fix plugins getting the same internal name when added without one, causing them to not appear in the plugin settings - Support editing args in EditFunction for plugins - Prevent multiple websockets from being opened - Fix page freezing after selecting Random song with no songs - Fix the back button being repeated twice when there are no songs - Fix /admin/users not accepting case insensitive usernames - Pressing enter on the Delete Account field does the expected action instead of refreshing the page - Better error message when custom folder access is denied - Fix being able to start netplay in custom songs after refreshing the page (#383) - Fix an error when importing songs from previous session and clicking on the white spot where you normally start multiplayer session - Fix canvas elements becoming smaller than 1x1 resolution and crashing the game (#390) - Fix song frame shadow cache on song select not being cleared when resizing the browser window, causing it to become blurry - Fix a pause-restart error when you hit both confirm keys on the restart button
2022-02-17 21:50:07 +01:00
elif admin['username'] == user['username']:
flash('Error: You cannot modify your own level.')
else:
user_level = user['user_level']
if level < 0 or level > max_level:
flash('Error: Invalid level.')
elif user_level > max_level:
flash('Error: This user has higher level than you.')
else:
output = {'user_level': level}
Bug fixes - Change song select mouse wheel song scrolling to be instant - Clicking on don chan in account settings toggles the animation - If the music is too long for the chart, the results screen is shown earlier - Fix weird BPM values freezing the browser (zero, negative, and very large) - Add a warning to the page when JavaScript is disabled in the browser - Fix Chrome auto dark mode by forcing light mode on the page - Add a meta keywords tag to the page - Fix plugin names getting cut off in the menu - Delay the function editing of the EditFunction class in plugins to the start() function instead of load() - When stopping one of the plugins, all the plugins have to be stopped in reverse order and started again so that patched code of a stopped plugin does not linger around - Fix importing plugins that have a SyntaxError - Fix plugins getting the same internal name when added without one, causing them to not appear in the plugin settings - Support editing args in EditFunction for plugins - Prevent multiple websockets from being opened - Fix page freezing after selecting Random song with no songs - Fix the back button being repeated twice when there are no songs - Fix /admin/users not accepting case insensitive usernames - Pressing enter on the Delete Account field does the expected action instead of refreshing the page - Better error message when custom folder access is denied - Fix being able to start netplay in custom songs after refreshing the page (#383) - Fix an error when importing songs from previous session and clicking on the white spot where you normally start multiplayer session - Fix canvas elements becoming smaller than 1x1 resolution and crashing the game (#390) - Fix song frame shadow cache on song select not being cleared when resizing the browser window, causing it to become blurry - Fix a pause-restart error when you hit both confirm keys on the restart button
2022-02-17 21:50:07 +01:00
db.users.update_one({'username': user['username']}, {'$set': output})
flash('User updated.')
return render_template('admin_users.html', config=get_config(), max_level=max_level, username=username, level=level)
@app.route(basedir + 'api/preview')
2020-02-22 14:09:07 +01:00
@app.cache.cached(timeout=15, query_string=True)
2018-10-17 23:16:53 +02:00
def route_api_preview():
song_id = request.args.get('id', None)
2020-05-06 15:13:24 +02:00
if not song_id or not re.match('^[0-9]{1,9}$', song_id):
2018-10-17 23:16:53 +02:00
abort(400)
2020-05-06 15:05:55 +02:00
song_id = int(song_id)
2020-03-13 03:45:42 +01:00
song = db.songs.find_one({'id': song_id})
if not song:
2018-10-17 23:16:53 +02:00
abort(400)
2020-03-13 03:45:42 +01:00
song_type = song['type']
song_ext = song['music_type'] if song['music_type'] else "mp3"
prev_path = make_preview(song_id, song_type, song_ext, song['preview'])
2018-10-17 23:16:53 +02:00
if not prev_path:
return redirect(get_config()['songs_baseurl'] + '%s/main.%s' % (song_id, song_ext))
2018-10-17 23:16:53 +02:00
return redirect(get_config()['songs_baseurl'] + '%s/preview.mp3' % song_id)
2018-10-17 23:16:53 +02:00
@app.route(basedir + 'api/songs')
2019-02-14 11:31:23 +01:00
@app.cache.cached(timeout=15)
2018-08-26 18:14:56 +02:00
def route_api_songs():
2020-03-13 03:45:42 +01:00
songs = list(db.songs.find({'enabled': True}, {'_id': False, 'enabled': False}))
2018-08-27 14:28:30 +02:00
for song in songs:
2020-03-13 03:45:42 +01:00
if song['maker_id']:
if song['maker_id'] == 0:
song['maker'] = 0
else:
song['maker'] = db.makers.find_one({'id': song['maker_id']}, {'_id': False})
else:
song['maker'] = None
del song['maker_id']
if song['category_id']:
song['category'] = db.categories.find_one({'id': song['category_id']})['title']
else:
song['category'] = None
#del song['category_id']
2020-03-13 03:45:42 +01:00
if song['skin_id']:
song['song_skin'] = db.song_skins.find_one({'id': song['skin_id']}, {'_id': False, 'id': False})
else:
song['song_skin'] = None
del song['skin_id']
return jsonify(songs)
2018-08-26 18:14:56 +02:00
@app.route(basedir + 'api/categories')
@app.cache.cached(timeout=15)
def route_api_categories():
categories = list(db.categories.find({},{'_id': False}))
return jsonify(categories)
2018-08-26 18:14:56 +02:00
@app.route(basedir + 'api/config')
2019-02-14 11:31:23 +01:00
@app.cache.cached(timeout=15)
2018-10-27 23:42:28 +02:00
def route_api_config():
config = get_config(credentials=True)
2018-10-27 23:42:28 +02:00
return jsonify(config)
@app.route(basedir + 'api/register', methods=['POST'])
2020-03-13 03:45:42 +01:00
def route_api_register():
data = request.get_json()
if not schema.validate(data, schema.register):
return abort(400)
if session.get('username'):
session.clear()
2020-03-13 03:45:42 +01:00
username = data.get('username', '')
if len(username) < 3 or len(username) > 20 or not re.match('^[a-zA-Z0-9_]{3,20}$', username):
2020-03-13 03:45:42 +01:00
return api_error('invalid_username')
if db.users.find_one({'username_lower': username.lower()}):
return api_error('username_in_use')
password = data.get('password', '').encode('utf-8')
2020-03-13 06:32:53 +01:00
if not 6 <= len(password) <= 5000:
2020-03-13 03:45:42 +01:00
return api_error('invalid_password')
salt = bcrypt.gensalt()
hashed = bcrypt.hashpw(password, salt)
don = get_default_don()
session_id = os.urandom(24).hex()
2020-03-13 03:45:42 +01:00
db.users.insert_one({
'username': username,
'username_lower': username.lower(),
'password': hashed,
'display_name': username,
'don': don,
'user_level': 1,
'session_id': session_id
2020-03-13 03:45:42 +01:00
})
session['session_id'] = session_id
2020-03-13 03:45:42 +01:00
session['username'] = username
session.permanent = True
return jsonify({'status': 'ok', 'username': username, 'display_name': username, 'don': don})
2020-03-13 03:45:42 +01:00
@app.route(basedir + 'api/login', methods=['POST'])
2020-03-13 03:45:42 +01:00
def route_api_login():
data = request.get_json()
if not schema.validate(data, schema.login):
return abort(400)
if session.get('username'):
session.clear()
2020-03-13 03:45:42 +01:00
username = data.get('username', '')
result = db.users.find_one({'username_lower': username.lower()})
if not result:
return api_error('invalid_username_password')
password = data.get('password', '').encode('utf-8')
if not bcrypt.checkpw(password, result['password']):
return api_error('invalid_username_password')
don = get_db_don(result)
session['session_id'] = result['session_id']
2020-03-13 03:45:42 +01:00
session['username'] = result['username']
session.permanent = True if data.get('remember') else False
2020-03-13 03:45:42 +01:00
return jsonify({'status': 'ok', 'username': result['username'], 'display_name': result['display_name'], 'don': don})
2020-03-13 03:45:42 +01:00
@app.route(basedir + 'api/logout', methods=['POST'])
2020-03-13 03:45:42 +01:00
@login_required
def route_api_logout():
session.clear()
return jsonify({'status': 'ok'})
@app.route(basedir + 'api/account/display_name', methods=['POST'])
2020-03-13 03:45:42 +01:00
@login_required
def route_api_account_display_name():
data = request.get_json()
if not schema.validate(data, schema.update_display_name):
return abort(400)
display_name = data.get('display_name', '').strip()
if not display_name:
display_name = session.get('username')
elif len(display_name) > 25:
2020-03-13 03:45:42 +01:00
return api_error('invalid_display_name')
db.users.update_one({'username': session.get('username')}, {
'$set': {'display_name': display_name}
})
return jsonify({'status': 'ok', 'display_name': display_name})
2020-03-13 03:45:42 +01:00
@app.route(basedir + 'api/account/don', methods=['POST'])
@login_required
def route_api_account_don():
data = request.get_json()
if not schema.validate(data, schema.update_don):
return abort(400)
don_body_fill = data.get('body_fill', '').strip()
don_face_fill = data.get('face_fill', '').strip()
if len(don_body_fill) != 7 or\
not don_body_fill.startswith("#")\
or not is_hex(don_body_fill[1:])\
or len(don_face_fill) != 7\
or not don_face_fill.startswith("#")\
or not is_hex(don_face_fill[1:]):
return api_error('invalid_don')
db.users.update_one({'username': session.get('username')}, {'$set': {
'don_body_fill': don_body_fill,
'don_face_fill': don_face_fill,
}})
return jsonify({'status': 'ok', 'don': {'body_fill': don_body_fill, 'face_fill': don_face_fill}})
@app.route(basedir + 'api/account/password', methods=['POST'])
2020-03-13 03:45:42 +01:00
@login_required
def route_api_account_password():
data = request.get_json()
if not schema.validate(data, schema.update_password):
return abort(400)
user = db.users.find_one({'username': session.get('username')})
current_password = data.get('current_password', '').encode('utf-8')
if not bcrypt.checkpw(current_password, user['password']):
return api_error('current_password_invalid')
new_password = data.get('new_password', '').encode('utf-8')
if not 6 <= len(new_password) <= 5000:
return api_error('invalid_new_password')
2020-03-13 03:45:42 +01:00
salt = bcrypt.gensalt()
hashed = bcrypt.hashpw(new_password, salt)
session_id = os.urandom(24).hex()
2020-03-13 03:45:42 +01:00
db.users.update_one({'username': session.get('username')}, {
'$set': {'password': hashed, 'session_id': session_id}
2020-03-13 03:45:42 +01:00
})
session['session_id'] = session_id
2020-03-13 03:45:42 +01:00
return jsonify({'status': 'ok'})
@app.route(basedir + 'api/account/remove', methods=['POST'])
2020-03-13 03:45:42 +01:00
@login_required
def route_api_account_remove():
data = request.get_json()
if not schema.validate(data, schema.delete_account):
return abort(400)
user = db.users.find_one({'username': session.get('username')})
password = data.get('password', '').encode('utf-8')
if not bcrypt.checkpw(password, user['password']):
return api_error('verify_password_invalid')
2020-03-13 03:45:42 +01:00
db.scores.delete_many({'username': session.get('username')})
db.users.delete_one({'username': session.get('username')})
session.clear()
return jsonify({'status': 'ok'})
@app.route(basedir + 'api/scores/save', methods=['POST'])
2020-03-13 03:45:42 +01:00
@login_required
def route_api_scores_save():
data = request.get_json()
if not schema.validate(data, schema.scores_save):
return abort(400)
username = session.get('username')
if data.get('is_import'):
db.scores.delete_many({'username': username})
scores = data.get('scores', [])
for score in scores:
db.scores.update_one({'username': username, 'hash': score['hash']},
{'$set': {
'username': username,
'hash': score['hash'],
'score': score['score']
}}, upsert=True)
2020-03-13 04:54:27 +01:00
return jsonify({'status': 'ok'})
2020-03-13 03:45:42 +01:00
@app.route(basedir + 'api/scores/get')
2020-03-13 03:45:42 +01:00
@login_required
def route_api_scores_get():
username = session.get('username')
scores = []
for score in db.scores.find({'username': username}):
scores.append({
'hash': score['hash'],
'score': score['score']
})
user = db.users.find_one({'username': username})
don = get_db_don(user)
return jsonify({'status': 'ok', 'scores': scores, 'username': user['username'], 'display_name': user['display_name'], 'don': don})
2020-03-13 03:45:42 +01:00
@app.route(basedir + 'privacy')
def route_api_privacy():
last_modified = time.strftime('%d %B %Y', time.gmtime(os.path.getmtime('templates/privacy.txt')))
integration = take_config('GOOGLE_CREDENTIALS')['gdrive_enabled'] if take_config('GOOGLE_CREDENTIALS') else False
response = make_response(render_template('privacy.txt', last_modified=last_modified, config=get_config(), integration=integration))
response.headers['Content-type'] = 'text/plain; charset=utf-8'
return response
def make_preview(song_id, song_type, song_ext, preview):
song_path = 'public/songs/%s/main.%s' % (song_id, song_ext)
2018-10-17 23:16:53 +02:00
prev_path = 'public/songs/%s/preview.mp3' % song_id
if os.path.isfile(song_path) and not os.path.isfile(prev_path):
2019-02-20 23:42:18 +01:00
if not preview or preview <= 0:
2019-02-06 19:49:25 +01:00
print('Skipping #%s due to no preview' % song_id)
2018-10-17 23:16:53 +02:00
return False
2019-02-06 19:49:25 +01:00
print('Making preview.mp3 for song #%s' % song_id)
2018-10-17 23:16:53 +02:00
ff = FFmpeg(inputs={song_path: '-ss %s' % preview},
outputs={prev_path: '-codec:a libmp3lame -ar 32000 -b:a 92k -y -loglevel panic'})
2018-10-17 23:16:53 +02:00
ff.run()
return prev_path
error_pages = take_config('ERROR_PAGES') or {}
def create_error_page(code, url):
if url.startswith("http://") or url.startswith("https://"):
resp = requests.get(url)
if resp.status_code == 200:
app.register_error_handler(code, lambda e: (resp.content, code))
else:
if url.startswith(basedir):
url = url[len(basedir):]
path = os.path.normpath(os.path.join("public", url))
if os.path.isfile(path):
app.register_error_handler(code, lambda e: (send_from_directory(".", path), code))
for code in error_pages:
if error_pages[code]:
create_error_page(code, error_pages[code])
2018-10-17 23:16:53 +02:00
2024-02-13 02:17:15 +01:00
def cache_wrap(res_from, secs):
res = flask.make_response(res_from)
res.headers["Cache-Control"] = f"public, max-age={secs}, s-maxage={secs}"
res.headers["CDN-Cache-Control"] = f"max-age={secs}"
return res
@app.route(basedir + "src/<path:ref>")
def send_src(ref):
return cache_wrap(send_from_directory("public/src", ref), 3600)
@app.route(basedir + "assets/<path:ref>")
def send_assets(ref):
return cache_wrap(send_from_directory("public/assets", ref), 3600)
@app.route(basedir + "songs/<path:ref>")
def send_songs(ref):
return cache_wrap(send_from_directory("public/songs", ref), 604800)
@app.route(basedir + "manifest.json")
def send_manifest():
return cache_wrap(send_from_directory("public", "manifest.json"), 3600)
2018-08-26 18:14:56 +02:00
if __name__ == '__main__':
2022-03-24 18:44:44 +01:00
import argparse
parser = argparse.ArgumentParser(description='Run the taiko-web development server.')
parser.add_argument('port', type=int, metavar='PORT', nargs='?', default=34801, help='Port to listen on.')
parser.add_argument('-b', '--bind-address', default='localhost', help='Bind server to address.')
parser.add_argument('-d', '--debug', action='store_true', help='Enable debug mode.')
args = parser.parse_args()
2022-03-24 17:09:01 +01:00
app.run(host=args.bind_address, port=args.port, debug=args.debug)