417 lines
12 KiB
Python
417 lines
12 KiB
Python
import sqlite3, random, string, subprocess, sys, threading, os, bcrypt, secrets, time
|
|
from flask import Flask, jsonify, request, abort, session
|
|
from functools import wraps
|
|
from flask_cors import CORS
|
|
from kthread import KThread
|
|
|
|
|
|
class SQLite():
|
|
def __init__(self, db_name) -> None:
|
|
self.conn = None
|
|
self.cur = None
|
|
self.db_name = db_name
|
|
self.lock = threading.Lock()
|
|
|
|
def connect(self) -> None:
|
|
if not os.path.exists("db"): os.mkdir("db")
|
|
try:
|
|
self.conn = sqlite3.connect("db/" + self.db_name + '.db', check_same_thread = False)
|
|
except Exception:
|
|
with open(self.db_name + '.db', 'x') as f:
|
|
pass
|
|
self.conn = sqlite3.connect("db/" + self.db_name + '.db', check_same_thread = False)
|
|
|
|
def disconnect(self) -> None:
|
|
self.conn.close()
|
|
|
|
def check_integrity(self, tables = {}) -> None:
|
|
cur = self.conn.cursor()
|
|
for t in tables:
|
|
cur.execute('''
|
|
SELECT name FROM sqlite_master WHERE type='table' AND name='{}';
|
|
'''.format(t))
|
|
|
|
if len(cur.fetchall()) == 0:
|
|
cur.execute('''CREATE TABLE main.{}({});'''.format(t, ''.join([(c + ' ' + tables[t][c] + ', ') for c in tables[t]])[:-2]))
|
|
cur.close()
|
|
|
|
def query(self, query, values = ()):
|
|
cur = self.conn.cursor()
|
|
try:
|
|
with self.lock:
|
|
cur.execute(query, values)
|
|
return cur.fetchall()
|
|
finally:
|
|
cur.close()
|
|
self.conn.commit()
|
|
|
|
def from_name_get_id(name):
|
|
serv_id = name.strip().replace(" ","-")
|
|
serv_id = "".join([c for c in serv_id if c in (string.ascii_uppercase + string.ascii_lowercase + string.digits + "-")])
|
|
return serv_id.lower()
|
|
|
|
def gen_internal_port():
|
|
while True:
|
|
res = random.randint(30000, 45000)
|
|
if len(db.query('SELECT 1 FROM services WHERE internal_port = ?;', (res,))) == 0:
|
|
break
|
|
return res
|
|
|
|
|
|
|
|
|
|
# DB init
|
|
db = SQLite('firegex')
|
|
db.connect()
|
|
|
|
|
|
class KeyValueStorage:
|
|
def __init__(self):
|
|
pass
|
|
|
|
def get(self, key):
|
|
q = db.query('SELECT value FROM keys_values WHERE key = ?', (key,))
|
|
if len(q) == 0:
|
|
return None
|
|
else:
|
|
return q[0][0]
|
|
|
|
def put(self, key, value):
|
|
if self.get(key) is None:
|
|
db.query('INSERT INTO keys_values (key, value) VALUES (?, ?);', (key,str(value)))
|
|
else:
|
|
db.query('UPDATE keys_values SET value=? WHERE key = ?;', (str(value), key))
|
|
|
|
|
|
|
|
app = Flask(__name__)
|
|
conf = KeyValueStorage()
|
|
proxy_table = {}
|
|
|
|
DEBUG = len(sys.argv) > 1 and sys.argv[1] == "DEBUG"
|
|
|
|
def is_loggined():
|
|
if DEBUG: return True
|
|
return True if session.get("loggined") else False
|
|
|
|
def login_required(f):
|
|
@wraps(f)
|
|
def decorated_function(*args, **kwargs):
|
|
if is_loggined() or DEBUG:
|
|
return f(*args, **kwargs)
|
|
else:
|
|
return abort(401)
|
|
|
|
return decorated_function
|
|
|
|
def get_service_data(id):
|
|
q = db.query('SELECT * FROM services WHERE service_id=?;',(id,))
|
|
if len(q) == 0: return None
|
|
srv = q[0]
|
|
return {
|
|
'id': srv[1],
|
|
'status': srv[0],
|
|
'public_port': srv[3],
|
|
'internal_port': srv[2]
|
|
}
|
|
|
|
def service_manager(id):
|
|
data = get_service_data(id)
|
|
if data is None: return
|
|
|
|
|
|
|
|
@app.before_first_request
|
|
def before_first_request():
|
|
|
|
|
|
services = [
|
|
|
|
]
|
|
|
|
for srv in services:
|
|
|
|
|
|
|
|
|
|
app.config['SECRET_KEY'] = secrets.token_hex(32)
|
|
if DEBUG:
|
|
app.config["STATUS"] = "run"
|
|
elif conf.get("password") is None:
|
|
app.config["STATUS"] = "init"
|
|
else:
|
|
app.config["STATUS"] = "run"
|
|
|
|
@app.route("/api/status")
|
|
def get_status():
|
|
return {
|
|
"status":app.config["STATUS"],
|
|
"loggined": is_loggined()
|
|
}
|
|
|
|
@app.route("/api/login", methods = ['POST'])
|
|
def login():
|
|
if not conf.get("password"): return abort(404)
|
|
req = request.get_json(force = True)
|
|
if not "password" in req or not isinstance(req["password"],str):
|
|
return abort(400)
|
|
if req["password"] == "":
|
|
return {"status":"Cannot insert an empty password!"}
|
|
time.sleep(.3) # No bruteforce :)
|
|
if bcrypt.checkpw(req["password"].encode(), conf.get("password").encode()):
|
|
session["loggined"] = True
|
|
return { "status":"ok" }
|
|
return {"status":"Wrong password!"}
|
|
|
|
@app.route("/api/logout")
|
|
def logout():
|
|
session["loggined"] = False
|
|
return { "status":"ok" }
|
|
|
|
@app.route('/api/change-password', methods = ['POST'])
|
|
@login_required
|
|
def change_password():
|
|
req = request.get_json(force = True)
|
|
if not "password" in req or not isinstance(req["password"],str):
|
|
return abort(400)
|
|
if req["password"] == "":
|
|
return {"status":"Cannot insert an empty password!"}
|
|
if req["expire"]:
|
|
app.config['SECRET_KEY'] = secrets.token_hex(32)
|
|
session["loggined"] = True
|
|
hash_psw = bcrypt.hashpw(req["password"].encode(), bcrypt.gensalt())
|
|
conf.put("password",hash_psw.decode())
|
|
return {"status":"ok"}
|
|
|
|
|
|
@app.route('/api/set-password', methods = ['POST'])
|
|
def set_password():
|
|
if conf.get("password"): return abort(404)
|
|
req = request.get_json(force = True)
|
|
if not "password" in req or not isinstance(req["password"],str):
|
|
return abort(400)
|
|
if req["password"] == "":
|
|
return {"status":"Cannot insert an empty password!"}
|
|
|
|
hash_psw = bcrypt.hashpw(req["password"].encode(), bcrypt.gensalt())
|
|
conf.put("password",hash_psw.decode())
|
|
app.config["STATUS"] = "run"
|
|
session["loggined"] = True
|
|
return {"status":"ok"}
|
|
|
|
@app.route('/api/general-stats')
|
|
@login_required
|
|
def get_general_stats():
|
|
n_services = db.query('''
|
|
SELECT COUNT (*) FROM services;
|
|
''')[0][0]
|
|
n_regexes = db.query('''
|
|
SELECT COUNT (*) FROM regexes;
|
|
''')[0][0]
|
|
n_packets = db.query('''
|
|
SELECT SUM(blocked_packets) FROM regexes;
|
|
''')[0][0]
|
|
|
|
return {
|
|
'services': n_services,
|
|
'regexes': n_regexes,
|
|
'closed': n_packets if n_packets else 0
|
|
}
|
|
|
|
@app.route('/api/services')
|
|
@login_required
|
|
def get_services():
|
|
res = []
|
|
for i in db.query('SELECT * FROM services;'):
|
|
n_regex = db.query('SELECT COUNT (*) FROM regexes WHERE service_id = ?;', (i[1],))[0][0]
|
|
n_packets = db.query('SELECT SUM(blocked_packets) FROM regexes WHERE service_id = ?;', (i[1],))[0][0]
|
|
|
|
res.append({
|
|
'id': i[1],
|
|
'status': i[0],
|
|
'public_port': i[3],
|
|
'internal_port': i[2],
|
|
'n_regex': n_regex,
|
|
'n_packets': n_packets if n_packets else 0,
|
|
'name': i[4]
|
|
})
|
|
|
|
return jsonify(res)
|
|
|
|
|
|
@app.route('/api/service/<serv>')
|
|
@login_required
|
|
def get_service(serv):
|
|
q = db.query('SELECT * FROM services WHERE service_id = ?;', (serv,))
|
|
if len(q) != 0:
|
|
n_regex = db.query('SELECT COUNT (*) FROM regexes WHERE service_id = ?;', (serv,))[0][0]
|
|
n_packets = db.query('SELECT SUM(blocked_packets) FROM regexes WHERE service_id = ?;', (serv,))[0][0]
|
|
return {
|
|
'id': q[0][1],
|
|
'status': q[0][0],
|
|
'public_port': q[0][3],
|
|
'internal_port': q[0][2],
|
|
'n_packets': n_packets if n_packets else 0,
|
|
'n_regex': n_regex,
|
|
'name': q[0][4]
|
|
}
|
|
else:
|
|
return abort(404)
|
|
|
|
@app.route('/api/service/<serv>/stop')
|
|
@login_required
|
|
def get_service_stop(serv):
|
|
db.query('''
|
|
UPDATE services SET status = 'stop' WHERE service_id = ?;
|
|
''', (serv,))
|
|
|
|
return {
|
|
'status': 'ok'
|
|
}
|
|
|
|
@app.route('/api/service/<serv>/pause')
|
|
@login_required
|
|
def get_service_pause(serv):
|
|
db.query('''
|
|
UPDATE services SET status = 'pause' WHERE service_id = ?;
|
|
''', (serv,))
|
|
|
|
return {
|
|
'status': 'ok'
|
|
}
|
|
|
|
@app.route('/api/service/<serv>/start')
|
|
@login_required
|
|
def get_service_start(serv):
|
|
db.query('''
|
|
UPDATE services SET status = 'wait' WHERE service_id = ?;
|
|
''', (serv,))
|
|
|
|
return {
|
|
'status': 'ok'
|
|
}
|
|
|
|
@app.route('/api/service/<serv>/delete')
|
|
@login_required
|
|
def get_service_delete(serv):
|
|
db.query('DELETE FROM services WHERE service_id = ?;', (serv,))
|
|
db.query('DELETE FROM regexes WHERE service_id = ?;', (serv,))
|
|
|
|
return {
|
|
'status': 'ok'
|
|
}
|
|
|
|
|
|
@app.route('/api/service/<serv>/regen-port')
|
|
@login_required
|
|
def get_regen_port(serv):
|
|
db.query('UPDATE services SET internal_port = ? WHERE service_id = ?;', (gen_internal_port(), serv))
|
|
return {
|
|
'status': 'ok'
|
|
}
|
|
|
|
|
|
@app.route('/api/service/<serv>/regexes')
|
|
@login_required
|
|
def get_service_regexes(serv):
|
|
return jsonify([
|
|
{
|
|
'id': row[5],
|
|
'service_id': row[2],
|
|
'regex': row[0],
|
|
'is_blacklist': True if row[3] == "1" else False,
|
|
'mode': row[1],
|
|
'n_packets': row[4],
|
|
} for row in db.query('SELECT * FROM regexes WHERE service_id = ?;', (serv,))
|
|
])
|
|
|
|
|
|
@app.route('/api/regex/<int:regex_id>')
|
|
@login_required
|
|
def get_regex_id(regex_id):
|
|
q = db.query('SELECT * FROM regexes WHERE regex_id = ?;', (regex_id,))
|
|
if len(q) != 0:
|
|
return {
|
|
'id': regex_id,
|
|
'service_id': q[0][2],
|
|
'regex': q[0][0],
|
|
'is_blacklist': True if q[0][3] == "1" else False,
|
|
'mode': q[0][1],
|
|
'n_packets': q[0][4],
|
|
}
|
|
else:
|
|
return abort(404)
|
|
|
|
|
|
@app.route('/api/regex/<int:regex_id>/delete')
|
|
@login_required
|
|
def get_regex_delete(regex_id):
|
|
db.query('DELETE FROM regexes WHERE regex_id = ?;', (regex_id,))
|
|
|
|
return {
|
|
'status': 'ok'
|
|
}
|
|
|
|
|
|
@app.route('/api/regexes/add', methods = ['POST'])
|
|
@login_required
|
|
def post_regexes_add():
|
|
req = request.get_json(force = True)
|
|
|
|
db.query('''
|
|
INSERT INTO regexes (service_id, regex, is_blacklist, mode) VALUES (?, ?, ?, ?);
|
|
''', (req['service_id'], req['regex'], req['is_blacklist'], req['mode']))
|
|
|
|
return {
|
|
'status': 'ok'
|
|
}
|
|
|
|
|
|
@app.route('/api/services/add', methods = ['POST'])
|
|
@login_required
|
|
def post_services_add():
|
|
req = request.get_json(force = True)
|
|
serv_id = from_name_get_id(req['name'])
|
|
|
|
try:
|
|
db.query('''
|
|
INSERT INTO services (name, service_id, internal_port, public_port, status) VALUES (?, ?, ?, ?, ?)
|
|
''', (req['name'], serv_id, gen_internal_port(), req['port'], 'stop'))
|
|
except sqlite3.IntegrityError:
|
|
return {'status': 'Name or/and port of the service has been already assigned to another service'}
|
|
|
|
return {'status': 'ok'}
|
|
|
|
if DEBUG:
|
|
CORS(app, resources={r"/api/*": {"origins": "*"}}, supports_credentials=True )
|
|
|
|
if __name__ == '__main__':
|
|
db.check_integrity({
|
|
'services': {
|
|
'status': 'VARCHAR(100)',
|
|
'service_id': 'VARCHAR(100) PRIMARY KEY',
|
|
'internal_port': 'INT NOT NULL UNIQUE',
|
|
'public_port': 'INT NOT NULL UNIQUE',
|
|
'name': 'VARCHAR(100) NOT NULL'
|
|
},
|
|
'regexes': {
|
|
'regex': 'TEXT NOT NULL',
|
|
'mode': 'VARCHAR(1)',
|
|
'service_id': 'VARCHAR(100) NOT NULL',
|
|
'is_blacklist': 'VARCHAR(1) NOT NULL',
|
|
'blocked_packets': 'INTEGER NOT NULL DEFAULT 0',
|
|
'regex_id': 'INTEGER PRIMARY KEY',
|
|
'FOREIGN KEY (service_id)':'REFERENCES services (service_id)'
|
|
},
|
|
'keys_values': {
|
|
'key': 'VARCHAR(100) PRIMARY KEY',
|
|
'value': 'VARCHAR(100) NOT NULL',
|
|
},
|
|
})
|
|
|
|
if DEBUG:
|
|
app.run(host="0.0.0.0", port=8080 ,debug=True)
|
|
else:
|
|
subprocess.run(["uwsgi","--socket","./uwsgi.sock","--master","--module","app:app", "--enable-threads"])
|
|
|