SparkN0de-git - /page/blob.mu

Micron Document

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

| SparkN0de-git | SparkN0de |

Node / ReticulumProjects / MeshChatX.git / files / meshchatx / src / backend / http / routes / auth.py

Displaying Raw • Download

meshchatx/src/backend/http/routes/auth.py e41daa5b65e07a5baa1aaad32d97f90482f1cd1c (e41daa5b) Text, 16.01 KB

T8b949e# SPDX-License-Identifier: 0BSD

T8b949e"""HTTP routes: auth."""

Tff7b72from T7ee787__future__ Tff7b72import Te6edf3annotations

Tff7b72from T7ee787meshchatxT7ee787.T7ee787srcT7ee787.T7ee787backendT7ee787.T7ee787httpT7ee787.T7ee787meshchat_names Tff7b72import Tb4b4b4( T8b949e# noqa: F401

Te6edf3GeoValidationErrorTb4b4b4,

Te6edf3OutboundHttpBlockedErrorTb4b4b4,

Te6edf3OverlayExportErrorTb4b4b4,

Te6edf3OverlaySourceParseErrorTb4b4b4,

Te6edf3PluginSecurityErrorTb4b4b4,

Te6edf3AsyncUtilsTb4b4b4,

Te6edf3InterfaceConfigParserTb4b4b4,

Te6edf3InterfaceDiscoveryTb4b4b4,

Te6edf3InterfaceEditorTb4b4b4,

Te6edf3LOGIN_PATHTb4b4b4,

Te6edf3LXMFTb4b4b4,

Te6edf3LxmfAudioFieldTb4b4b4,

Te6edf3LxmfFileAttachmentTb4b4b4,

Te6edf3LxmfFileAttachmentsFieldTb4b4b4,

Te6edf3LxmfImageFieldTb4b4b4,

Te6edf3MAX_EXPORT_TILESTb4b4b4,

Te6edf3MarkdownRendererTb4b4b4,

Te6edf3NomadnetFileDownloaderTb4b4b4,

Te6edf3NomadnetPageDownloaderTb4b4b4,

Te6edf3RNProbeHandlerTb4b4b4,

Te6edf3RNSTb4b4b4,

Te6edf3ReticulumMeshChatTb4b4b4,

Te6edf3SETUP_PATHTb4b4b4,

Te6edf3TRANSPARENT_TILETb4b4b4,

Te6edf3TelemeterTb4b4b4,

Te6edf3UTCTb4b4b4,

Te6edf3WSMsgTypeTb4b4b4,

Te6edf3_is_chaquopy_androidTb4b4b4,

Te6edf3_is_loopback_bind_hostTb4b4b4,

Te6edf3_request_client_ipTb4b4b4,

Te6edf3aiohttpTb4b4b4,

Te6edf3app_versionTb4b4b4,

Te6edf3assert_migration_context_pathsTb4b4b4,

Te6edf3asyncioTb4b4b4,

Te6edf3base64Tb4b4b4,

Te6edf3bcryptTb4b4b4,

Te6edf3binasciiTb4b4b4,

Te6edf3build_blocklist_export_documentTb4b4b4,

Te6edf3build_export_documentTb4b4b4,

Te6edf3build_messages_export_bundleTb4b4b4,

Te6edf3cache_statsTb4b4b4,

Te6edf3cancel_inbound_deliveriesTb4b4b4,

Te6edf3castTb4b4b4,

Te6edf3compute_lxmf_conversation_unread_from_latest_rowTb4b4b4,

Te6edf3configparserTb4b4b4,

Te6edf3contextlibTb4b4b4,

Te6edf3convert_db_favourite_to_dictTb4b4b4,

Te6edf3convert_db_lxmf_message_to_dictTb4b4b4,

Te6edf3convert_lxmf_message_to_dictTb4b4b4,

Te6edf3convert_nomadnet_field_data_to_mapTb4b4b4,

Te6edf3convert_nomadnet_string_data_to_mapTb4b4b4,

Te6edf3convert_propagation_node_state_to_stringTb4b4b4,

Te6edf3copyTb4b4b4,

Te6edf3datetimeTb4b4b4,

Te6edf3describe_port_conflictTb4b4b4,

Te6edf3detect_image_format_from_magicTb4b4b4,

Te6edf3ensure_outbound_http_allowedTb4b4b4,

Te6edf3ensure_session_csrf_tokenTb4b4b4,

Te6edf3filter_announced_dicts_by_search_queryTb4b4b4,

Te6edf3fresh_storage_at_targetTb4b4b4,

Te6edf3get_cached_active_linkTb4b4b4,

Te6edf3get_file_pathTb4b4b4,

Te6edf3get_sessionTb4b4b4,

Te6edf3get_trusted_proxy_cidrsTb4b4b4,

Te6edf3gif_utilsTb4b4b4,

Te6edf3i2p_supportTb4b4b4,

Te6edf3import_messages_export_bundleTb4b4b4,

Te6edf3ioTb4b4b4,

Te6edf3is_mbtiles_filenameTb4b4b4,

Te6edf3is_path_within_dirTb4b4b4,

Te6edf3is_port_in_useTb4b4b4,

Te6edf3is_user_facing_lxmf_payloadTb4b4b4,

Te6edf3jsonTb4b4b4,

Te6edf3list_host_network_interfacesTb4b4b4,

Te6edf3list_inbound_deliveriesTb4b4b4,

Te6edf3list_portsTb4b4b4,

Te6edf3load_app_security_settingsTb4b4b4,

Te6edf3loggerTb4b4b4,

Te6edf3loggingTb4b4b4,

Te6edf3lxmf_sidebar_preview_for_conversation_latest_rowTb4b4b4,

Te6edf3memory_log_handlerTb4b4b4,

Te6edf3message_fields_have_attachmentsTb4b4b4,

Te6edf3migrate_legacy_to_targetTb4b4b4,

Te6edf3mime_for_image_typeTb4b4b4,

Te6edf3normalize_identity_storage_hashTb4b4b4,

Te6edf3normalize_lxmf_sieve_filtersTb4b4b4,

Te6edf3normalize_message_blocklistTb4b4b4,

Te6edf3osTb4b4b4,

Te6edf3parse_bool_query_paramTb4b4b4,

Te6edf3parse_import_documentTb4b4b4,

Te6edf3parse_lxmf_display_nameTb4b4b4,

Te6edf3parse_lxmf_propagation_node_app_dataTb4b4b4,

Te6edf3parse_lxmf_sieve_filters_jsonTb4b4b4,

Te6edf3parse_lxmf_stamp_costTb4b4b4,

Te6edf3parse_message_blocklist_jsonTb4b4b4,

Te6edf3parse_nomadnetwork_node_display_nameTb4b4b4,

Te6edf3platformTb4b4b4,

Te6edf3privacy_mode_enabledTb4b4b4,

Te6edf3psutilTb4b4b4,

Te6edf3purge_messages_before_cutoffTb4b4b4,

Te6edf3reTb4b4b4,

Te6edf3resolve_message_age_cutoffTb4b4b4,

Te6edf3reticulum_pathfindingTb4b4b4,

Te6edf3rotate_session_csrf_tokenTb4b4b4,

Te6edf3rrc_protocolTb4b4b4,

Te6edf3safe_path_under_dirTb4b4b4,

Te6edf3sanitize_sticker_emojiTb4b4b4,

Te6edf3sanitize_sticker_nameTb4b4b4,

Te6edf3sanitize_websocket_config_updateTb4b4b4,

Te6edf3save_app_security_settingsTb4b4b4,

Te6edf3secretsTb4b4b4,

Te6edf3shutilTb4b4b4,

Te6edf3sqlite3Tb4b4b4,

Te6edf3sticker_pack_utilsTb4b4b4,

Te6edf3sysTb4b4b4,

Te6edf3tempfileTb4b4b4,

Te6edf3threadingTb4b4b4,

Te6edf3timeTb4b4b4,

Te6edf3tracebackTb4b4b4,

Te6edf3user_agent_hashTb4b4b4,

Te6edf3validate_export_documentTb4b4b4,

Te6edf3webTb4b4b4,

Te6edf3websocket_type_requires_authTb4b4b4,

Te6edf3zipfileTb4b4b4,

Tb4b4b4)

Tff7b72def Td2a8ffregister_auth_routesTb4b4b4(Te6edf3routesTb4b4b4, Te6edf3appTb4b4b4)Tb4b4b4:

Tf0883e@routesTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ff/api/v1/auth/altcha/challengeTa5d6ff"Tb4b4b4)

Tff7b72async Tff7b72def Td2a8ffauth_altcha_challengeTb4b4b4(Te6edf3requestTb4b4b4)Tb4b4b4:

Tff7b72if Tff7b72not Te6edf3appTff7b72.Td2a8ffaltcha_enabledTb4b4b4:

Tff7b72return Te6edf3webTff7b72.Td2a8ffjson_responseTb4b4b4(Tb4b4b4{Ta5d6ff"Ta5d6fferrorTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffALTCHA is not enabledTa5d6ff"Tb4b4b4}Tb4b4b4, Te6edf3statusTff7b72=T79c0ff404Tb4b4b4)

Tff7b72tryTb4b4b4:

Tff7b72from T7ee787meshchatxT7ee787.T7ee787srcT7ee787.T7ee787backendT7ee787.T7ee787altcha_auth Tff7b72import Te6edf3create_altcha_challenge_dict

Te6edf3challenge Tff7b72= Te6edf3create_altcha_challenge_dictTb4b4b4(Tb4b4b4)

Tff7b72except Tf85149RuntimeError Tff7b72as Te6edf3excTb4b4b4:

Tff7b72return Te6edf3webTff7b72.Td2a8ffjson_responseTb4b4b4(Tb4b4b4{Ta5d6ff"Ta5d6fferrorTa5d6ff"Tb4b4b4: Tffa657strTb4b4b4(Te6edf3excTb4b4b4)Tb4b4b4}Tb4b4b4, Te6edf3statusTff7b72=T79c0ff503Tb4b4b4)

Tff7b72return Te6edf3webTff7b72.Td2a8ffjson_responseTb4b4b4(Te6edf3challengeTb4b4b4)

Tf0883e@routesTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ff/api/v1/server/securityTa5d6ff"Tb4b4b4)

Tff7b72async Tff7b72def Td2a8ffserver_security_getTb4b4b4(Te6edf3requestTb4b4b4)Tb4b4b4:

Te6edf3settings Tff7b72= Te6edf3load_app_security_settingsTb4b4b4(Te6edf3appTff7b72.Td2a8ffstorage_dirTb4b4b4)

Tff7b72return Te6edf3webTff7b72.Td2a8ffjson_responseTb4b4b4(

Tb4b4b4{

Ta5d6ff"Ta5d6fflisten_hostTa5d6ff"Tb4b4b4: Te6edf3appTff7b72.Td2a8fflisten_hostTb4b4b4,

Ta5d6ff"Ta5d6fflisten_portTa5d6ff"Tb4b4b4: Te6edf3appTff7b72.Td2a8fflisten_portTb4b4b4,

Ta5d6ff"Ta5d6ffhttps_enabledTa5d6ff"Tb4b4b4: Te6edf3appTff7b72.Td2a8ffuse_httpsTb4b4b4,

Ta5d6ff"Ta5d6ffis_loopback_bindTa5d6ff"Tb4b4b4: Te6edf3_is_loopback_bind_hostTb4b4b4(Te6edf3appTff7b72.Td2a8fflisten_hostTb4b4b4)Tb4b4b4,

Ta5d6ff"Ta5d6ffweb_ui_ip_allowlistTa5d6ff"Tb4b4b4: Te6edf3settingsTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffweb_ui_ip_allowlistTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff"Tb4b4b4)Tb4b4b4,

Ta5d6ff"Ta5d6fftrusted_proxy_cidrsTa5d6ff"Tb4b4b4: Te6edf3settingsTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6fftrusted_proxy_cidrsTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff"Tb4b4b4)Tb4b4b4,

Tff7b72*Tff7b72*Te6edf3appTff7b72.Td2a8ff_landlock_status_dictTb4b4b4(Tb4b4b4)Tb4b4b4,

Ta5d6ff"Ta5d6ffprivacy_mode_enabledTa5d6ff"Tb4b4b4: Te6edf3privacy_mode_enabledTb4b4b4(Te6edf3appTff7b72.Td2a8ffconfigTb4b4b4)Tb4b4b4,

Ta5d6ff"Ta5d6ffauth_enabledTa5d6ff"Tb4b4b4: Te6edf3appTff7b72.Td2a8ffauth_enabledTb4b4b4,

Tb4b4b4}Tb4b4b4,

Tb4b4b4)

Tf0883e@routesTff7b72.Td2a8ffpatchTb4b4b4(Ta5d6ff"Ta5d6ff/api/v1/server/securityTa5d6ff"Tb4b4b4)

Tff7b72async Tff7b72def Td2a8ffserver_security_patchTb4b4b4(Te6edf3requestTb4b4b4)Tb4b4b4:

Tff7b72tryTb4b4b4:

Te6edf3data Tff7b72= Tff7b72await Te6edf3requestTff7b72.Td2a8ffjsonTb4b4b4(Tb4b4b4)

Tff7b72except Tb4b4b4(Te6edf3jsonTff7b72.Td2a8ffJSONDecodeErrorTb4b4b4, Tf85149UnicodeDecodeErrorTb4b4b4, Tf85149ValueErrorTb4b4b4)Tb4b4b4:

Tff7b72return Te6edf3webTff7b72.Td2a8ffjson_responseTb4b4b4(Tb4b4b4{Ta5d6ff"Ta5d6fferrorTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffInvalid JSON bodyTa5d6ff"Tb4b4b4}Tb4b4b4, Te6edf3statusTff7b72=T79c0ff400Tb4b4b4)

Tff7b72if Tff7b72not Tffa657isinstanceTb4b4b4(Te6edf3dataTb4b4b4, Tffa657dictTb4b4b4)Tb4b4b4:

Tff7b72return Te6edf3webTff7b72.Td2a8ffjson_responseTb4b4b4(Tb4b4b4{Ta5d6ff"Ta5d6fferrorTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffInvalid request bodyTa5d6ff"Tb4b4b4}Tb4b4b4, Te6edf3statusTff7b72=T79c0ff400Tb4b4b4)

Tff7b72tryTb4b4b4:

Te6edf3updates Tff7b72= Tb4b4b4{Tb4b4b4}

Tff7b72if Ta5d6ff"Ta5d6ffweb_ui_ip_allowlistTa5d6ff" Tff7b72in Te6edf3dataTb4b4b4:

Te6edf3updatesTb4b4b4[Ta5d6ff"Ta5d6ffweb_ui_ip_allowlistTa5d6ff"Tb4b4b4] Tff7b72= Te6edf3dataTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffweb_ui_ip_allowlistTa5d6ff"Tb4b4b4)

Tff7b72if Ta5d6ff"Ta5d6fftrusted_proxy_cidrsTa5d6ff" Tff7b72in Te6edf3dataTb4b4b4:

Te6edf3updatesTb4b4b4[Ta5d6ff"Ta5d6fftrusted_proxy_cidrsTa5d6ff"Tb4b4b4] Tff7b72= Te6edf3dataTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6fftrusted_proxy_cidrsTa5d6ff"Tb4b4b4)

Tff7b72if Te6edf3updatesTb4b4b4:

Te6edf3settings Tff7b72= Te6edf3save_app_security_settingsTb4b4b4(Te6edf3appTff7b72.Td2a8ffstorage_dirTb4b4b4, Te6edf3updatesTb4b4b4)

Tff7b72elseTb4b4b4:

Te6edf3settings Tff7b72= Te6edf3load_app_security_settingsTb4b4b4(Te6edf3appTff7b72.Td2a8ffstorage_dirTb4b4b4)

Tff7b72except Tf85149ValueError Tff7b72as Te6edf3excTb4b4b4:

Tff7b72return Te6edf3webTff7b72.Td2a8ffjson_responseTb4b4b4(Tb4b4b4{Ta5d6ff"Ta5d6fferrorTa5d6ff"Tb4b4b4: Tffa657strTb4b4b4(Te6edf3excTb4b4b4)Tb4b4b4}Tb4b4b4, Te6edf3statusTff7b72=T79c0ff400Tb4b4b4)