trilium/src/app.py

import os

import base64
from flask import Flask, request, send_from_directory
from flask import render_template, redirect
from flask_cors import CORS
from flask_login import LoginManager, UserMixin, login_user, login_required, logout_user

from notes_api import notes_api
from sql import connect, getOption
from tree_api import tree_api
from notes_move_api import notes_move_api
from password_api import password_api
from settings_api import settings_api
from notes_history_api import notes_history_api
from audit_api import audit_api
import config_provider
import my_scrypt

config = config_provider.getConfig()

documentPath = config['Document']['documentPath']
connect(documentPath)

flask_secret_key = getOption("flask_secret_key")

if not flask_secret_key:
    print("Application has not been setup yet. Run 'python setup.py' to finish setup.")
    exit(1)

app = Flask(__name__)
app.secret_key = flask_secret_key
app.register_blueprint(tree_api)
app.register_blueprint(notes_api)
app.register_blueprint(notes_move_api)
app.register_blueprint(password_api)
app.register_blueprint(settings_api)
app.register_blueprint(notes_history_api)
app.register_blueprint(audit_api)

class User(UserMixin):
    pass

@app.route('/login', methods=['GET'])
def login_form():
    return render_template('login.html')

@app.route('/app', methods=['GET'])
@login_required
def show_app():
    return render_template('app.html')

@app.route('/logout', methods=['POST'])
@login_required
def logout():
    logout_user()
    return redirect('login')

user = User()
user.id = getOption('username')

port = config['Network']['port']
https = config['Network']['https']
certPath = config['Network']['certPath']
certKeyPath = config['Network']['certKeyPath']

def verify_password(guessed_password):
    hashed_password = base64.b64decode(getOption('password_verification_hash'))

    guess_hashed = my_scrypt.getVerificationHash(guessed_password)

    return guess_hashed == hashed_password

@app.route('/login', methods=['POST'])
def login_post():
    guessedPassword = request.form['password'].encode('utf-8')

    if request.form['username'] == user.id and verify_password(guessedPassword):
        rememberMe = True if 'remember-me' in request.form else False

        login_user(user, remember=rememberMe)

        return redirect('app')
    else:
        return render_template('login.html', failedAuth=True)

CORS(app)

@app.route('/stat/<path:path>')
def send_stc(path):
    return send_from_directory(os.path.join(os.getcwd(), 'static'), path)

login_manager = LoginManager()
login_manager.init_app(app)
login_manager.login_view = 'login_form'

@login_manager.user_loader
def load_user(user_id):
    if user_id == user.id:
        return user
    else:
        return None

@login_manager.unauthorized_handler
def unauthorized_handler():
    if request.path.startswith('/api'):
        return 'Unauthorized', 401
    else:
        return redirect('/login')

if __name__ == "__main__":
    ssl_context = None

    if https == "true":
        ssl_context = (certPath, certKeyPath)

    app.run(host='0.0.0.0', port=port, ssl_context = ssl_context)