niming_backend/app.py

import os

from flask import Flask
from bcrypt import checkpw, gensalt, hashpw
from sqlalchemy import create_engine

from utils import setting_loader, logger, dbhelper
from utils.pgclass import Base, SQLuser
from utils.platform_consts import PLIST_ROOT
from blueprints.article import article
from blueprints.log     import log
from blueprints.admin   import admin

# env
PG_HOST = os.getenv("PG_HOST", None)
PG_PORT = os.getenv("PG_PORT", None)
PG_NAME = os.getenv("PG_NAME", None)
PG_USER = os.getenv("PG_USER", None)
PG_PASS = os.getenv("PG_PASS", None)
JWT_KEY = os.getenv("JWT_KEY", None)
PLATFORM_ROOT_PASSWORD = os.getenv("PLATFORM_ROOT_PASSWORD", None)

# env checker
errmsg = []
if not JWT_KEY:
    errmsg.append("Invalid JWT_KEY")
if not PLATFORM_ROOT_PASSWORD:
    errmsg.append("Invalid PLATFORM_ROOT_PASSWORD")
if errmsg:
    print(f"[X] Env check failed: {errmsg}")
    exit(0)

# settings checker
settings = setting_loader.loadset()
for s in settings:
    if not setting_loader.typechecker(s, settings.get(s)):
        print("[X] Settings.json data type check failed: %s"%(s))
        exit(0)
        
# Postgresql
print("[*] Connecting to Database")
dbhelper.db = dbhelper.DB(create_engine('postgresql+psycopg2://%s:%s@%s:%s/%s'%(PG_USER, PG_PASS, PG_HOST, PG_PORT, PG_NAME)))
Base.metadata.create_all(dbhelper.db._engine)

# root checker
pwhash = hashpw(PLATFORM_ROOT_PASSWORD.encode("utf-8"), gensalt()).decode("utf-8") # if needed, new password
with dbhelper.db.getsession() as session:
    root = session.query(SQLuser).filter(SQLuser.user=="root").first()
    if root is None:
        # no root user
        session.add(SQLuser(user="root",password=pwhash, permission=PLIST_ROOT))
    elif (not checkpw(PLATFORM_ROOT_PASSWORD.encode("utf-8"), root.password.encode("utf-8"))) or root.permission != PLIST_ROOT:
        # password / permission error
        session.delete(root)
        session.add(SQLuser(user="root",password=pwhash, permission=PLIST_ROOT))
    session.commit()

# flask app
app = Flask(__name__)
app.config["SECRET_KEY"] = os.urandom(64)

# register blueprints
app.register_blueprint(article, url_prefix = "/article")
app.register_blueprint(log    , url_prefix = "/log")
app.register_blueprint(admin  , url_prefix = "/admin")

# logger
logger.logger("server.start", "Server is running")

# index
@app.route("/", methods = ["GET", "POST"])
def index():
    return "Hello! World!<br>Shirakami Fubuki: cutest fox!!!"

# app run
if __name__ == "__main__":
    app.run(host="0.0.0.0", port=5000, debug=False)