254 lines
10 KiB
Python
254 lines
10 KiB
Python
from flask import render_template, send_file, url_for, flash, redirect, request, session
|
|
from lxconsole import app, db, bcrypt
|
|
from lxconsole.forms import RegistrationForm, LoginForm
|
|
from lxconsole.models import User, Server, Simplestream, Group, AccessControl, UserGroup
|
|
from flask_login import login_user, current_user, logout_user, login_required
|
|
from lxconsole.api import api
|
|
|
|
app.register_blueprint(api)
|
|
|
|
@app.route("/")
|
|
def home():
|
|
if current_user.is_authenticated:
|
|
return redirect(url_for('servers'))
|
|
else:
|
|
if User.query.first():
|
|
return redirect(url_for('login'))
|
|
if not Simplestream.query.first():
|
|
images_simplestream = Simplestream(url='https://images.linuxcontainers.org', alias='images')
|
|
ubuntu_simplestream = Simplestream(url='https://cloud-images.ubuntu.com/releases', alias='ubuntu')
|
|
ubuntu_daily_simplestream = Simplestream(url='https://cloud-images.ubuntu.com/daily', alias='ubuntu-daily')
|
|
db.session.add(images_simplestream)
|
|
db.session.add(ubuntu_simplestream)
|
|
db.session.add(ubuntu_daily_simplestream)
|
|
db.session.commit()
|
|
if not Group.query.first():
|
|
administrators_group = Group(name='Administrators', description='Default administrators group')
|
|
operators_group = Group(name='Operators', description='Default operators')
|
|
users_group = Group(name='Users', description='Default users group')
|
|
auditors_group = Group(name='Auditors', description='Default auditors group')
|
|
db.session.add(administrators_group)
|
|
db.session.add(operators_group)
|
|
db.session.add(users_group)
|
|
db.session.add(auditors_group)
|
|
db.session.commit()
|
|
if not AccessControl.query.first():
|
|
administrators_access_control = AccessControl(group_id=1, role_id=1, server_id=0, scope='global', description='Default access control for Administrators')
|
|
operators_access_control = AccessControl(group_id=2, role_id=2, server_id=0, scope='global', description='Default access control for Operators')
|
|
users_access_control = AccessControl(group_id=3, role_id=3, server_id=0, scope='global', description='Default access control for Users')
|
|
auditors_access_control = AccessControl(group_id=4, role_id=4, server_id=0, scope='global', description='Default access control for Auditors')
|
|
db.session.add(administrators_access_control)
|
|
db.session.add(operators_access_control)
|
|
db.session.add(users_access_control)
|
|
db.session.add(auditors_access_control)
|
|
db.session.commit()
|
|
return redirect(url_for('register'))
|
|
|
|
@app.route("/certificates")
|
|
@login_required
|
|
def certificates():
|
|
return render_template('certificates.html', page_title='Certificates', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/cluster-groups")
|
|
@login_required
|
|
def cluster_groups():
|
|
return render_template('cluster-groups.html', page_title='Cluster Groups', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/cluster-members")
|
|
@login_required
|
|
def cluster_members():
|
|
return render_template('cluster-members.html', page_title='Cluster Members', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/images")
|
|
@login_required
|
|
def images():
|
|
return render_template('images.html', page_title='Images', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/instance")
|
|
@login_required
|
|
def instance():
|
|
return render_template('instance.html', page_title='Instance', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/instances")
|
|
@login_required
|
|
def instances():
|
|
return render_template('instances.html', page_title='Instances', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/network-acl")
|
|
@login_required
|
|
def network_acl():
|
|
return render_template('network-acl.html', page_title='Network ACL', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/network-acls")
|
|
@login_required
|
|
def network_acls():
|
|
return render_template('network-acls.html', page_title='Network ACLs', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/network-zones")
|
|
@login_required
|
|
def network_zones():
|
|
return render_template('network-zones.html', page_title='Network Zones', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/network")
|
|
@login_required
|
|
def network():
|
|
return render_template('network.html', page_title='Network', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/networks")
|
|
@login_required
|
|
def networks():
|
|
return render_template('networks.html', page_title='Networks', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/operations")
|
|
@login_required
|
|
def operations():
|
|
return render_template('operations.html', page_title='Operations', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/profiles")
|
|
@login_required
|
|
def profiles():
|
|
return render_template('profiles.html', page_title='Profiles', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/projects")
|
|
@login_required
|
|
def projects():
|
|
return render_template('projects.html', page_title='Projects', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/server")
|
|
@login_required
|
|
def server():
|
|
return render_template('server.html', page_title='Server', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/servers")
|
|
@login_required
|
|
def servers():
|
|
return render_template('servers.html', page_title='Servers', page_user_id=current_user.id, page_username=current_user.username, client_crt=session['client_crt'])
|
|
|
|
@app.route("/simplestreams")
|
|
@login_required
|
|
def simplestreams():
|
|
return render_template('simplestreams.html', page_title='Simplestreams', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/storage-pools")
|
|
@login_required
|
|
def storage_pools():
|
|
return render_template('storage-pools.html', page_title='Storage Pools', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/storage-volumes")
|
|
@login_required
|
|
def storage_volumes():
|
|
return render_template('storage-volumes.html', page_title='Storage Volumes', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/backups/<serverId>/<project>/<instance>/<filename>")
|
|
@login_required
|
|
def backups(serverId, project, instance, filename):
|
|
return send_file('../backups/' + serverId + '/' + project + '/' + instance + '/' + filename )
|
|
|
|
|
|
@app.route("/register", methods=['GET', 'POST'])
|
|
def register():
|
|
if current_user.is_authenticated:
|
|
return redirect(url_for('servers'))
|
|
if User.query.first():
|
|
return redirect(url_for('login'))
|
|
else:
|
|
form = RegistrationForm()
|
|
if form.validate_on_submit():
|
|
hashed_password = bcrypt.generate_password_hash(form.password.data).decode('utf-8')
|
|
user = User(username=form.username.data, email=form.email.data, password=hashed_password)
|
|
db.session.add(user)
|
|
db.session.commit()
|
|
user_group = UserGroup(user_id=1, group_id=1)
|
|
db.session.add(user_group)
|
|
db.session.commit()
|
|
flash('Your account has been created! You are now able to log in', 'success')
|
|
return redirect(url_for('login'))
|
|
return render_template('register.html', title='Register', form=form)
|
|
|
|
|
|
@app.route("/login", methods=['GET', 'POST'])
|
|
def login():
|
|
if current_user.is_authenticated:
|
|
return redirect(url_for('servers'))
|
|
form = LoginForm()
|
|
if form.validate_on_submit():
|
|
user = User.query.filter_by(username=form.username.data).first()
|
|
if user and bcrypt.check_password_hash(user.password, form.password.data):
|
|
login_user(user, remember=form.remember.data)
|
|
next_page = request.args.get('next')
|
|
|
|
with open('certs/client.crt', 'r') as file:
|
|
session['client_crt'] = file.read()
|
|
|
|
session['roles'] = [
|
|
{'id': 1, 'name': 'Administrator', 'description': 'Default role with full privileges'},
|
|
{'id': 2, 'name': 'Operator', 'description': 'Default role granting all LXD-based privileges'},
|
|
{'id': 3, 'name': 'User', 'description': 'Default role with limited privileges'},
|
|
{'id': 4, 'name': 'Auditor', 'description': 'Default role with read-only privileges'},
|
|
]
|
|
session['global_roles'] = []
|
|
session['host_roles'] = []
|
|
groups = UserGroup.query.filter_by(user_id=current_user.id).all()
|
|
print(groups)
|
|
for group in groups:
|
|
print(group)
|
|
print(group.group_id)
|
|
access_controls = AccessControl.query.filter_by(group_id=group.group_id).all()
|
|
print(access_controls)
|
|
for access_control in access_controls:
|
|
print(access_control)
|
|
if access_control.scope == 'global':
|
|
print(access_control.scope)
|
|
for role in session['roles']:
|
|
print(role['id'])
|
|
print(access_control.role_id)
|
|
if role['id'] == access_control.role_id:
|
|
session['global_roles'].append(str(role['name']))
|
|
print(role['name'])
|
|
if access_control.scope == 'host':
|
|
for role in session['roles']:
|
|
if role['id'] == access_control.role_id:
|
|
session['host_roles'][access_control.server_id].append(str(role['name']))
|
|
|
|
return redirect(next_page) if next_page else redirect(url_for('servers'))
|
|
else:
|
|
flash('Login Unsuccessful. Please check username and password', 'danger')
|
|
return render_template('login.html', title='Login', form=form)
|
|
|
|
|
|
@app.route("/logout")
|
|
def logout():
|
|
logout_user()
|
|
return redirect(url_for('home'))
|
|
|
|
|
|
@app.route("/account")
|
|
@login_required
|
|
def account():
|
|
return render_template('account.html', title='Account')
|
|
|
|
@app.route("/users")
|
|
@login_required
|
|
def users():
|
|
return render_template('users.html', page_title='Users', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/groups")
|
|
@login_required
|
|
def groups():
|
|
return render_template('groups.html', page_title='Groups', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/roles")
|
|
@login_required
|
|
def roles():
|
|
return render_template('roles.html', page_title='Roles', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/access-controls")
|
|
@login_required
|
|
def access_controls():
|
|
return render_template('access-controls.html', page_title='Access Controls', page_user_id=current_user.id, page_username=current_user.username,)
|
|
|
|
@app.route("/logs")
|
|
@login_required
|
|
def logs():
|
|
return render_template('logs.html', page_title='Logs', page_user_id=current_user.id, page_username=current_user.username,)
|