Madis Mägi
d37cb302bb
All checks were successful
ci/woodpecker/manual/woodpecker Pipeline was successful
269 lines
8.2 KiB
Python
269 lines
8.2 KiB
Python
from datetime import datetime, timedelta
|
|
|
|
from bson.objectid import ObjectId
|
|
from flask import Blueprint, g, redirect, render_template, request
|
|
from flask_wtf import FlaskForm
|
|
from pymongo import MongoClient
|
|
from wtforms import StringField, IntegerField, SelectField, BooleanField, DateTimeField, validators
|
|
from wtforms.validators import DataRequired
|
|
|
|
import const
|
|
from common import spam, users_lookup
|
|
from oidc import login_required, read_user
|
|
|
|
page_doorboy = Blueprint("doorboy", __name__)
|
|
db = MongoClient(const.MONGO_URI).get_default_database()
|
|
|
|
@page_doorboy.route("/m/doorboy/<event_id>/claim")
|
|
@login_required
|
|
def view_doorboy_claim(event_id):
|
|
user = read_user()
|
|
|
|
# Find swipe event OR token object by id to get card UID
|
|
event = db.inventory.find_one({
|
|
"_id": ObjectId(event_id)
|
|
})
|
|
|
|
# Find token object to associate with user
|
|
token = db.inventory.update_one({
|
|
"type": "token",
|
|
"token.uid_hash": event["token"]["uid_hash"],
|
|
"inventory.owner.username": { "$exists": False }
|
|
}, {
|
|
"$set": {
|
|
"token.enabled": datetime.utcnow(),
|
|
"inventory.owner.display_name": user["name"],
|
|
"inventory.owner.username": user["username"]
|
|
}
|
|
})
|
|
|
|
return redirect("/m/doorboy")
|
|
|
|
|
|
|
|
@page_doorboy.route("/m/doorboy/<token_id>/disable")
|
|
@login_required
|
|
def view_doorboy_disable(token_id):
|
|
user = read_user()
|
|
db.inventory.update_one({
|
|
"component": "doorboy",
|
|
"type": "token",
|
|
"_id": ObjectId(token_id),
|
|
"inventory.owner.username": user["username"]
|
|
}, {
|
|
"$set": {
|
|
"token.disabled": datetime.utcnow()
|
|
},
|
|
"$unset": {
|
|
"token.enabled": ""
|
|
}
|
|
|
|
})
|
|
return redirect("/m/doorboy")
|
|
|
|
@page_doorboy.route("/m/doorboy/<token_id>/enable")
|
|
@login_required
|
|
def view_doorboy_enable(token_id):
|
|
user = read_user()
|
|
db.inventory.update_one({
|
|
"component": "doorboy",
|
|
"type": "token",
|
|
"_id": ObjectId(token_id),
|
|
"inventory.owner.username": user["username"]
|
|
}, {
|
|
"$set": {
|
|
"token.enabled": datetime.utcnow(),
|
|
},
|
|
"$unset": {
|
|
"token.disabled": ""
|
|
}
|
|
})
|
|
return redirect("/m/doorboy")
|
|
|
|
|
|
class TokenEditForm(FlaskForm):
|
|
comment = StringField("Comment")
|
|
|
|
@page_doorboy.route("/m/doorboy/<token_id>/edit", methods=["GET"])
|
|
@login_required
|
|
def view_doorboy_edit(token_id):
|
|
user = read_user()
|
|
token = db.inventory.find_one({
|
|
"component": "doorboy",
|
|
"type": "token",
|
|
"_id": ObjectId(token_id),
|
|
"inventory.owner.username": user["username"]
|
|
})
|
|
form = TokenEditForm()
|
|
form.comment.data = token["token"].get("comment", "")
|
|
return render_template("doorboy_token_edit.html", form=form, token=token)
|
|
|
|
@page_doorboy.route("/m/doorboy/<token_id>/edit", methods=["POST"])
|
|
@login_required
|
|
def save_doorboy_edit(token_id):
|
|
user = read_user()
|
|
form = TokenEditForm(request.form)
|
|
if form.validate_on_submit():
|
|
db.inventory.update_one({
|
|
"component": "doorboy",
|
|
"type": "token",
|
|
"_id": ObjectId(token_id),
|
|
"inventory.owner.username": user["username"]
|
|
}, {
|
|
"$set": {
|
|
"token.comment": form.comment.data,
|
|
}
|
|
})
|
|
return redirect("/m/doorboy")
|
|
|
|
class HoldDoorForm(FlaskForm):
|
|
door_name = SelectField("Door name", choices=[(j,j) for j in ["grounddoor", "frontdoor", "backdoor"]], validators=[DataRequired()])
|
|
duration = IntegerField('Duration in seconds', validators=[DataRequired(), validators.NumberRange(min=5, max=21600)])
|
|
|
|
@page_doorboy.route("/m/doorboy/hold", methods=["POST"])
|
|
@login_required
|
|
def view_doorboy_hold():
|
|
user = read_user()
|
|
form = HoldDoorForm(request.form)
|
|
now = datetime.utcnow()
|
|
if form.validate_on_submit():
|
|
db.eventlog.insert_one({
|
|
"component": "doorboy",
|
|
"type": "hold",
|
|
"requester": user["name"],
|
|
"door": form.door_name.data,
|
|
"expires": datetime.utcnow() + timedelta(seconds=form.duration.data)
|
|
})
|
|
return redirect("/m/doorboy")
|
|
|
|
|
|
@page_doorboy.route("/m/doorboy/<door>/open")
|
|
@login_required
|
|
def view_doorboy_open(door):
|
|
user = read_user()
|
|
if door not in ("grounddoor", "frontdoor", "backdoor"): raise
|
|
approved = user["username"] in users_lookup
|
|
db.eventlog.insert_one({
|
|
"method": "web",
|
|
"approved": approved,
|
|
"duration": 5,
|
|
"component": "doorboy",
|
|
"type": "open-door",
|
|
"door": door,
|
|
"member_id": user["username"],
|
|
"member": user["name"],
|
|
"timestamp": datetime.utcnow(),
|
|
})
|
|
status = "Permitted" if approved else "Denied"
|
|
subject = user["name"]
|
|
msg = "%s %s door access for %s via https://inventory.k-space.ee/m/doorboy" % (status, door, subject)
|
|
spam(msg)
|
|
return redirect("/m/doorboy")
|
|
|
|
|
|
@page_doorboy.route("/m/doorboy/slam", methods=["POST"])
|
|
@login_required
|
|
def view_doorboy_slam():
|
|
user = read_user()
|
|
db.eventlog.insert_one({
|
|
"component": "doorboy",
|
|
"type": "hold",
|
|
"requester": user["name"],
|
|
"door": form.door_name.data,
|
|
"expires": datetime.utcnow() + timedelta(minutes=form.duration_min.data)
|
|
})
|
|
return redirect("/m/doorboy")
|
|
|
|
|
|
@page_doorboy.route("/m/doorboy")
|
|
@login_required
|
|
def view_doorboy():
|
|
user = read_user()
|
|
latest_events = db.eventlog.find({"component": "doorboy", "type":"open-door"}).sort([("timestamp", -1)]).limit(10);
|
|
latest_swipes = db.inventory.find({"component": "doorboy", "type":"token"}).sort([("last_seen", -1)]).limit(10);
|
|
return render_template("doorboy.html", **locals())
|
|
|
|
|
|
@page_doorboy.route("/m/doorboy/swipes")
|
|
@login_required
|
|
def view_doorboy_events():
|
|
user = read_user()
|
|
latest_events = db.eventlog.find({"component": "doorboy", "event":"card-swiped"}).sort([("timestamp", -1)]).limit(500);
|
|
return render_template("doorboy.html", **locals())
|
|
|
|
|
|
@page_doorboy.route("/m/doorboy/<token_id>/events")
|
|
@login_required
|
|
def view_doorboy_token_events(token_id):
|
|
user = read_user()
|
|
token = db.inventory.find_one({"_id": ObjectId(token_id)})
|
|
latest_events = db.eventlog.find({"component": "doorboy", "event":"card-swiped", "token.uid": token.get("token").get("uid")}).sort([("timestamp", -1)])
|
|
return render_template("doorboy.html", **locals())
|
|
|
|
class FormSwipe(FlaskForm):
|
|
class Meta:
|
|
csrf = False
|
|
uid = StringField('uid', validators=[])
|
|
uid_hash = StringField('uid', validators=[])
|
|
door = StringField('door', validators=[DataRequired()])
|
|
success = BooleanField('success', validators=[])
|
|
timestamp = DateTimeField('timestamp')
|
|
|
|
@page_doorboy.route("/m/doorboy/swipe", methods=["POST"])
|
|
def view_swipe():
|
|
form = request.json
|
|
print(form)
|
|
now = datetime.utcnow()
|
|
# Make sure token exists
|
|
db.inventory.update_one({
|
|
"type": "token",
|
|
"component": "doorboy",
|
|
"token.uid_hash": form["uid_hash"]
|
|
}, {
|
|
"$set": {
|
|
"last_seen": form.get("timestamp", now)
|
|
},
|
|
"$setOnInsert": {
|
|
"component": "doorboy",
|
|
"type": "token",
|
|
"first_seen": now,
|
|
"inventory": {
|
|
"claimable": True,
|
|
}
|
|
}
|
|
}, upsert=True)
|
|
|
|
# Fetch token to read owner
|
|
token = db.inventory.find_one({
|
|
"type": "token",
|
|
"component": "doorboy",
|
|
"token.uid_hash": form["uid_hash"]
|
|
})
|
|
|
|
event_swipe = {
|
|
"component": "doorboy",
|
|
"timestamp": form["timestamp"],
|
|
"door": form["door"],
|
|
"event": "card-swiped",
|
|
"success": form["success"],
|
|
"token": {
|
|
"uid_hash": form["uid_hash"]
|
|
},
|
|
"inventory": {}
|
|
}
|
|
|
|
if token.get("inventory", {}).get("owner", {}).get("username", None):
|
|
event_swipe["inventory"]["owner_id"] = token["inventory"]["owner"]["username"]
|
|
|
|
db.eventlog.insert_one(event_swipe)
|
|
|
|
status = "Permitted" if form["success"] else "Denied"
|
|
username = token.get("inventory", {}).get("owner", {}).get("username", None)
|
|
if username and username in users_lookup:
|
|
subject = users_lookup[username].display_name or username
|
|
else:
|
|
subject = "Unknown"
|
|
msg = "%s %s door access for %s identified by keycard/keyfob" % (status, form["door"], subject)
|
|
spam(msg)
|
|
return "ok"
|