server.py

from flask import Flask,make_response,jsonify,request,send_file
from flask.ext.restful import Api,Resource,reqparse
from flask.ext.restful.utils import cors
import werkzeug
from flask.ext.httpauth import HTTPBasicAuth
from flask.ext.sqlalchemy import SQLAlchemy
from ofs.local import PTOFS
import argparse
import hashlib
app=Flask(__name__)
api = Api(app)
# api.decorators=[cors.crossdomain(origin='*')]
auth = HTTPBasicAuth()
o=PTOFS()
app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///test.db'
db = SQLAlchemy(app)

class User(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    username = db.Column(db.String(80), unique=True)
    email = db.Column(db.String(120), unique=True)
    password =db.Column(db.String(120), unique=False)
    key = db.Column(db.String(200),unique=True)
    uuid = db.Column(db.String(200),unique=True)

    def __init__(self, username, email, passw, key,uuid):
        self.username = username
        self.email = email
        self.password = passw
        self.key = key
        self.uuid = uuid

    def __repr__(self):
        return '<User %r>' % self.username
@auth.get_password
def get_pw(username):
    user=User.query.filter_by(username=username).first()
    if user:
        return user.password
    return None

@auth.hash_password
def hash_pw(password):
    return hashlib.md5(password).hexdigest()

@auth.error_handler
def unauthorized():
    return make_response(jsonify( { 'message': 'Unauthorized access' } ), 401)


class SendAPI(Resource):
	decorators = [auth.login_required]
	def __init__(self):
		self.reqparse=reqparse.RequestParser()
		self.reqparse.add_argument('file', type=werkzeug.datastructures.FileStorage, location='files')
		super(SendAPI, self).__init__()
	def get(self,id):
		user=User.query.filter_by(username=id).first()
		if user and id != "all":
		    return {"Id":id,"key":user.key}
		if id == "all":
			k=[]
			lst=User.query.all()
			for i in lst:
				k.append(i.username)
			k.remove("admin")
			return k
	def post(self,id):
		details=id.split("/")
		user=User.query.filter_by(username=details[0]).first()
		uuid=user.uuid
		o.put_stream(uuid,details[1],self.reqparse.parse_args()["file"].stream.read(),params={"sign":details[2],"user":auth.username()})
		print o.get_metadata(uuid,details[1])
		return 200
class ReceiveAPI(Resource):
	decorators = [auth.login_required]

	def get(self,id):
		user=User.query.filter_by(username=auth.username()).first()
		action=id.split("/")[0]
		id=id.split("/")[1]
		if user and action=="get":
			files=o.list_labels(user.uuid)
			print id
			if id=="all":
				return files 
			elif int(id) < len(files)+1:
				label=o.list_labels(user.uuid)[int(id)-1]
				return send_file(o.get_url(user.uuid,label)[7:])
			else:
				return "Invalid id"
		elif user and action=="delete":
			files=o.list_labels(user.uuid)
			if int(id) < len(files)+1:
				label=o.list_labels(user.uuid)[int(id)-1]
				o.del_stream(user.uuid,label)
				return 200
		elif user and action=="verify":
			return o.get_metadata(user.uuid,o.list_labels(user.uuid)[int(id)-1])	

	def post(self,id):
		pass
class Authenticate(Resource):
	decorators = [auth.login_required]
	def get(self):
		return 200
	# def options(self):
	# 	pass
class Change(Resource):
	decorators = [auth.login_required]

	def get(self,id):
		user=User.query.filter_by(username=auth.username()).first()
		if user.password==hashlib.md5(id.split("/")[0]).hexdigest():
			user.password=hashlib.md5(id.split("/")[1]).hexdigest()
			db.session.commit()
			return "Password successfully changed"
		else:
			return "Old password not accepted"
class CreateUser(Resource):
	def get(self,detail):
		det=detail.split(":")
		if len(det)==7:
			usern=det[0]
			user=User.query.filter_by(username=usern).first()
			if user:
				return {"Error":"Username exists"}
			passw=det[1]
			email=det[2]
			key=":".join(det[3:])
			uuid=o.claim_bucket()
			user=User(usern,email,hashlib.md5(passw).hexdigest(),key,uuid)
			db.session.add(user)
			db.session.commit()
			return {"Details":detail,"key":key}
		else:
			return {"Error":"Not enough values"}

api.add_resource(SendAPI,'/send/<path:id>')
api.add_resource(ReceiveAPI,'/receive/<path:id>')
api.add_resource(CreateUser,'/create/<path:detail>')
api.add_resource(Authenticate,'/auth/')
api.add_resource(Change,'/change/<path:id>')

if __name__ == '__main__':
	parser = argparse.ArgumentParser(description='Arcanum server',prefix_chars='-+/',)
	parser.add_argument('-H','--host', help='Host name for Arcanum server',nargs='?', default='0.0.0.0')
	parser.add_argument('+ssl', action="store_true", default=None)
	args = parser.parse_args()
	if args.ssl:
	    app.run(host=args.host,ssl_context=('key.crt', 'key.key'))
	else:
		app.run(host=args.host)