app.py

from flask import Flask, request, render_template_string, jsonify, session, redirect, flash
from flask_session import Session
import logging
import requests
from flask_sqlalchemy import SQLAlchemy
from sqlalchemy.exc import IntegrityError
import argparse
import os
from datetime import datetime, timedelta




# Initialize Flask app

app = Flask(__name__)
app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:////usr/app/src/db/users.db'
app.config['SESSION_TYPE'] = 'filesystem'
app.config['SECRET_KEY'] = 'supersecretkey'
#SET THIS TO 1 to enable approvals
new_users_approvals = 0
# Initialize SQLAlchemy with app
db = SQLAlchemy(app)

# Initialize session
Session(app)

# Define models
class User(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    username = db.Column(db.String(80), unique=True, nullable=False)
    password = db.Column(db.String(120), nullable=False)
    approved = db.Column(db.Boolean, default=False)
    is_logged_in = db.Column(db.Boolean, default=False)
    last_active = db.Column(db.DateTime, nullable=True)

class SystemStatus(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    online = db.Column(db.Boolean, default=False)
def get_active_users():
    five_minutes_ago = datetime.utcnow() - timedelta(minutes=5)
    active_users = User.query.filter(User.last_active >= five_minutes_ago).all()
    print("Active users:", active_users)  # Debug line
    return active_users


logged_in_users = set()
global_online_status = False

@app.route('/admin/add_user', methods=['GET', 'POST'])
def add_user():
    if not session.get('logged_in'):
        return redirect('/login')

    if request.method == 'POST':
        username = request.form['username'].lower()
        password = request.form['password']

        try:
            new_user = User(username=username, password=password)
            db.session.add(new_user)
            db.session.commit()
            return redirect('/admin')
        except IntegrityError:
            db.session.rollback()
            return "Username already exists."

    return render_template_string(open('add_user.html').read())

from flask import flash

@app.route('/login', methods=['GET', 'POST'])
def login():
    if request.method == 'POST':
        username = request.form['username'].lower()
        password = request.form['password']
        user = User.query.filter_by(username=username, password=password).first()
        if user:
            user.last_active = datetime.utcnow()
            db.session.commit()
            if user.username == 'admin' or user.approved:
                session['logged_in'] = True
                session['username'] = username
                flash('Login successful', 'success')
                return redirect('/')
            else:
                return "Your account is pending approval. <a href='/'>Back to Main Page</a>"
        else:
            return "Invalid credentials, <a href='/login'>try again</a> or <a href='/register'>register</a>. <a href='/'>Back to Main Page</a>"
    return render_template_string(open('login.html').read() + "<a href='/'>Back to Main Page</a>")




@app.route('/logout', methods=['GET'])
def logout():
    username = session.pop('username', None)
    user = User.query.filter_by(username=username).first()
    if user:
        user.is_logged_in = False
        db.session.commit()    
    username = session.pop('username', None)
    session.pop('logged_in', None)
    if username:
        logged_in_users.discard(username)  # Remove username from set
    return redirect('/')

@app.route('/show_logged_in_users', methods=['GET'])
def show_logged_in_users():
    if not session.get('logged_in') or session.get('username') != 'admin':
        return redirect('/login')
    return jsonify({"logged_in_users": list(logged_in_users)})


@app.route('/admin/toggle', methods=['GET'])
def toggle_online():
    if not session.get('logged_in'):
        return redirect('/login')
    status = SystemStatus.query.first()
    status.online = not status.online
    db.session.commit()
    return jsonify({"status": "success", "online": status.online}), 200


@app.route('/status', methods=['GET'])
def get_status():
    status = SystemStatus.query.first()
    return jsonify({"online": status.online}), 200


@app.route('/', methods=['GET'])
def index():
    username = session.get('username')
    if username:
        user = User.query.filter_by(username=username).first()
        if user:
            user.last_active = datetime.utcnow()
            db.session.commit()
    active_users = get_active_users()
    active_users_idle_times = {user.username: int((datetime.utcnow() - user.last_active).total_seconds()) for user in active_users}
    return render_template_string(open('index.html').read(), username=username, active_users_idle_times=active_users_idle_times)







@app.route('/admin', methods=['GET'])
def admin():
    if not session.get('logged_in') or session.get('username') != 'admin':
        return redirect('/login')
    pending_users = User.query.filter_by(approved=False).all()
    return render_template_string(open('admin.html').read(), pending_users=pending_users)


    # Get the logged-in user's username from the session
    username = session.get('username')

    # Check if the username is "admin"
    if username != 'admin':
        return redirect('/')

    logging.info("Inside admin")
    return render_template_string(open('admin.html').read(), username=session.get('username'))

@app.route('/register', methods=['GET', 'POST'])
def user_register():
    if request.method == 'POST':
        username = request.form['username'].lower()
        password = request.form['password']
        # Check the new_users_approvals variable to set the approved attribute
        approved_status = True if new_users_approvals == 0 else False
        new_user = User(username=username, password=password, approved=approved_status)
        try:
            db.session.add(new_user)
            db.session.commit()

            if new_users_approvals == 0:
                # Send a ping after successful registration
                payload = f'{username} just registered!'
                response = requests.post('http://ntfy.jersweb.net/ping-jer', data=payload)
                response.raise_for_status()

            return "Registration successful. Waiting for admin approval. <a href='/'>Back to Main Page</a>" if not approved_status else "Registration successful. <a href='/'>Back to Main Page</a>"
        except IntegrityError:
            db.session.rollback()
            return "Username already exists. <a href='/'>Back to Main Page</a>"

    return render_template_string(open('register.html').read() + "<a href='/'>Back to Main Page</a>")



@app.route('/admin/approve/<int:user_id>', methods=['GET'])
def approve_user(user_id):
    if not session.get('logged_in') or session.get('username') != 'admin':
        return redirect('/login')
    user = User.query.get(user_id)
    if user:
        user.approved = True
        db.session.commit()
        return redirect('/admin')
    return "User not found."

@app.route('/ping', methods=['POST'])
def ping():
    logging.info("Inside /ping")
    user = User.query.filter_by(username=session.get('username')).first()
    if user:
        user.last_active = datetime.utcnow()
        db.session.commit()
    try:
        data = request.get_json()
        # Use the logged-in username if available, otherwise default to 'Anon Pinger'
        name = session.get('username', data.get('name', 'Anon Pinger'))
        payload = f'Ping! From {name}'
        response = requests.post('http://ntfy.jersweb.net/ping-jer', data=payload)
        response.raise_for_status()
        return jsonify({"status": "success"}), 200
    except Exception as e:
        logging.error(f"Error in /ping: {e}")
        return jsonify({"error": str(e)}), 500


if __name__ == '__main__':
    parser = argparse.ArgumentParser(description='Run the Flask app.')
    parser.add_argument('--setup', action='store_true', help='Set up database.')
    args = parser.parse_args()

    if args.setup:
        db_path = "/usr/app/src/db/users.db"  # Adjust this path as needed

        # Delete the existing database file if it exists
        if os.path.exists(db_path):
            os.remove(db_path)
            print("Old database file deleted.")

        # Create a new database
        with app.app_context():  # Push an application context
            db.create_all()
            initial_status = SystemStatus(online=False)
            db.session.add(initial_status)
            db.session.commit()

            # Create initial admin account
            admin_user = User(username='admin', password='password', approved=True)
            try:
                db.session.add(admin_user)
                db.session.commit()
                print("Admin account created.")
            except IntegrityError:
                db.session.rollback()
                print("Admin account already exists.")

        print("Database setup complete.")
        exit(0)  # Exit the script
    else:
        app.run(host='0.0.0.0', port=8092)