273 lines
12 KiB
Python
273 lines
12 KiB
Python
import os
|
||
import tempfile
|
||
import subprocess
|
||
from flask import (
|
||
Flask, request, render_template_string,
|
||
jsonify, send_file, redirect, url_for, flash
|
||
)
|
||
from werkzeug.utils import secure_filename
|
||
from flask_talisman import Talisman
|
||
from flask_limiter import Limiter
|
||
from flask_limiter.util import get_remote_address
|
||
from functools import wraps
|
||
from dotenv import load_dotenv
|
||
|
||
# Load environment variables from .env (for local dev only)
|
||
load_dotenv()
|
||
|
||
BASE_DIR = os.path.dirname(os.path.abspath(__file__))
|
||
MOJO_FMT_PATH = os.path.join(BASE_DIR, "mojofmt.py")
|
||
|
||
# Get secrets from environment variables
|
||
SECRET_KEY = os.environ.get('FLASK_SECRET_KEY')
|
||
API_TOKEN = os.environ.get('FLASK_API_TOKEN')
|
||
if not SECRET_KEY or not API_TOKEN:
|
||
raise RuntimeError("FLASK_SECRET_KEY and FLASK_API_TOKEN must be set")
|
||
|
||
app = Flask(__name__)
|
||
app.secret_key = SECRET_KEY
|
||
|
||
# Secure cookies
|
||
app.config.update(
|
||
SESSION_COOKIE_HTTPONLY=True,
|
||
SESSION_COOKIE_SECURE=True, # requires HTTPS in production
|
||
SESSION_COOKIE_SAMESITE='Lax'
|
||
)
|
||
|
||
# Security headers with Flask‑Talisman (CSP allowing only self + cdn.jsdelivr.net)
|
||
csp = {
|
||
'default-src': ["'self'"],
|
||
'script-src': ["'self'", 'https://cdn.jsdelivr.net'],
|
||
'style-src': ["'self'", 'https://cdn.jsdelivr.net', "'unsafe-inline'"],
|
||
}
|
||
Talisman(app, content_security_policy=csp)
|
||
|
||
# Rate limiting
|
||
limiter = Limiter(key_func=get_remote_address, app=app, default_limits=["100/hour"])
|
||
|
||
# Token authentication decorator
|
||
def require_api_token(f):
|
||
@wraps(f)
|
||
def decorated(*args, **kwargs):
|
||
auth = request.headers.get('Authorization', '')
|
||
if not auth.startswith('Bearer ') or auth[len('Bearer '):] != API_TOKEN:
|
||
return jsonify({"error": "Unauthorized"}), 401
|
||
return f(*args, **kwargs)
|
||
return decorated
|
||
|
||
# ----------------------------- HTML TEMPLATE -----------------------------
|
||
HTML_TEMPLATE = """
|
||
<!DOCTYPE html>
|
||
<html>
|
||
<head>
|
||
<title>Mojolicious Template Code Formatter</title>
|
||
<style>
|
||
body { font-family: 'Segoe UI', Arial, sans-serif; margin:0; padding:0;
|
||
background:linear-gradient(90deg, #fdeff9 0%, #ecb6ff 100%);
|
||
height:100vh; display:flex; flex-direction:column; }
|
||
header { background:#8247c2; color:#fff; display:flex; align-items:center;
|
||
justify-content:space-between; padding:1em; }
|
||
header h1 { margin:0; font-size:1.6em; }
|
||
.icon-links { display:flex; align-items:center; }
|
||
.icon-links a { display:inline-flex; align-items:center; margin-left:16px; color:white; text-decoration:none; }
|
||
.icon-links a svg { width:28px; height:28px; fill:white; }
|
||
.flash-messages ul { margin:0; padding:0; list-style:none; color:#d91454; text-align:center; }
|
||
form { flex:1; display:flex; flex-direction:column; margin:0; }
|
||
.container { display:flex; flex-direction:row; gap:16px; padding:20px; flex:1;
|
||
box-sizing:border-box; height:calc(100vh - 140px); }
|
||
.panel { background:#fff; border-radius:10px; box-shadow:0 8px 18px -7px #ac83ce44;
|
||
padding:22px; flex:1 1 50%; min-width:300px; display:flex; flex-direction:column; height:100%; }
|
||
label { font-weight:bold; margin-bottom:5px; }
|
||
.controls { display:flex; gap:8px; margin:14px 0 8px 0; }
|
||
button { background:#a950e6; border:none; color:#fff; border-radius:5px;
|
||
padding:9px 16px; font-size:15px; cursor:pointer; box-shadow:0 2px 7px -3px #bb76c1; }
|
||
button:hover { background:#7634a2; }
|
||
input[type="file"] { margin-bottom:10px; }
|
||
textarea { width:100%; flex:1 1 auto; min-height:0; font-family:'Fira Mono', monospace;
|
||
font-size:15px; border:2px solid #bdb0da; background:#f6eafe;
|
||
border-radius:7px; padding:8px; color:#432d67; resize:vertical; }
|
||
select { padding:6px 10px; border-radius:5px; border:1px solid #b993d6;
|
||
background:#eee0f6; color:#6d378d; font-size:15px; }
|
||
#output_block, #output_code, pre[class*="language-"], code[class*="language-"] {
|
||
font-family:'Fira Mono', monospace !important; font-size:15px !important; line-height:1 !important;
|
||
}
|
||
#output_block { background:#16151a !important; color:white !important; border-radius:8px; padding:1em;
|
||
margin-top:10px; overflow-y:auto; resize:vertical; white-space:pre-wrap;
|
||
border:2px solid #bdb0da; flex:1 1 auto; min-height:0; }
|
||
@media (max-width:800px) {
|
||
.container { flex-direction:column; height:auto; }
|
||
.panel { height:auto; min-width:0; }
|
||
}
|
||
</style>
|
||
<link href="https://cdn.jsdelivr.net/npm/prismjs@1/themes/prism-tomorrow.min.css" rel="stylesheet" />
|
||
<script src="https://cdn.jsdelivr.net/npm/prismjs@1/prism.min.js"></script>
|
||
<script src="https://cdn.jsdelivr.net/npm/prismjs@1/components/prism-perl.min.js"></script>
|
||
<script src="https://cdn.jsdelivr.net/npm/prismjs@1/components/prism-markup.min.js"></script>
|
||
</head>
|
||
<body>
|
||
<header>
|
||
<h1>Mojolicious Template Code Formatter</h1>
|
||
<div class="icon-links">
|
||
<a href="https://github.com/brianread108" target="_blank" aria-label="GitHub">
|
||
<svg viewBox="0 0 16 16"><path fill-rule="evenodd"
|
||
d="M8 0C3.58 0 0 3.58 0 8a8..."/></svg>
|
||
</a>
|
||
<a href="https://mojolicious.org" target="_blank" aria-label="Mojolicious">
|
||
<svg viewBox="0 0 64 64"><path d="M32 2C20 18..."/></svg>
|
||
</a>
|
||
</div>
|
||
</header>
|
||
<div class="flash-messages">
|
||
{% with messages = get_flashed_messages() %}
|
||
{% if messages %}<ul>{% for m in messages %}<li>{{ m }}</li>{% endfor %}</ul>{% endif %}
|
||
{% endwith %}
|
||
</div>
|
||
<form method="post" action="/" enctype="multipart/form-data">
|
||
<div class="container">
|
||
<div class="panel">
|
||
<label for="input_text">Input data:</label>
|
||
<textarea name="input_text" id="input_text">{{ input_text|default('') }}</textarea>
|
||
<label for="input_file">Upload a file:</label>
|
||
<input type="file" name="input_file" id="input_file" accept=".txt,.mojo,.pl,.html,.tmpl,.tt,.tt2,.template,text/plain">
|
||
<div class="controls">
|
||
<button type="submit" name="action" value="format">Format</button>
|
||
<button type="submit" name="action" value="download">Download</button>
|
||
<button type="button" onclick="clearFields()">Clear</button>
|
||
</div>
|
||
</div>
|
||
<div class="panel">
|
||
<label>Formatted Output:</label>
|
||
<div style="margin-top:8px;">
|
||
<label for="syntaxmode">Output Syntax:</label>
|
||
<select id="syntaxmode" onchange="highlightOutput()">
|
||
<option value="none">Plain Text</option>
|
||
<option value="perl">Perl</option>
|
||
<option value="html">HTML</option>
|
||
</select>
|
||
</div>
|
||
<pre id="output_block"><code id="output_code" class="language-none">{% if formatted_text is defined %}{{ formatted_text|e }}{% endif %}</code></pre>
|
||
</div>
|
||
</div>
|
||
</form>
|
||
<script>
|
||
document.addEventListener("DOMContentLoaded", function() {
|
||
const inputTextEl = document.getElementById("input_text");
|
||
const inputFileEl = document.getElementById("input_file");
|
||
const outputCodeEl = document.getElementById("output_code");
|
||
|
||
function clearOutput() {
|
||
outputCodeEl.textContent = '';
|
||
Prism.highlightElement(outputCodeEl);
|
||
}
|
||
function clearFields() {
|
||
inputTextEl.value = '';
|
||
clearOutput();
|
||
}
|
||
window.clearFields = clearFields;
|
||
|
||
inputTextEl.addEventListener("input", clearOutput);
|
||
inputFileEl.addEventListener("change", e => {
|
||
const file = e.target.files[0];
|
||
if (!file) return;
|
||
const reader = new FileReader();
|
||
reader.onload = ev => {
|
||
inputTextEl.value = ev.target.result;
|
||
clearOutput();
|
||
};
|
||
reader.readAsText(file);
|
||
});
|
||
|
||
highlightOutput();
|
||
});
|
||
|
||
function highlightOutput() {
|
||
const mode = document.getElementById("syntaxmode").value;
|
||
const code = document.getElementById("output_code");
|
||
code.className = "";
|
||
if (mode === "perl") code.classList.add("language-perl");
|
||
else if (mode === "html") code.classList.add("language-markup");
|
||
else code.classList.add("language-none");
|
||
Prism.highlightElement(code);
|
||
}
|
||
</script>
|
||
</body>
|
||
</html>
|
||
"""
|
||
|
||
# ----------------------------- Core logic -----------------------------
|
||
def run_mojofmt(input_text: str) -> str:
|
||
with tempfile.TemporaryDirectory() as tmpdir:
|
||
in_path = os.path.join(tmpdir, "input.txt")
|
||
out_path = os.path.join(tmpdir, "output.txt")
|
||
with open(in_path, 'w', encoding='utf-8') as f:
|
||
f.write(input_text)
|
||
result = subprocess.run(
|
||
['python3', MOJO_FMT_PATH, '-o', out_path, in_path],
|
||
stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True
|
||
)
|
||
if result.returncode != 0:
|
||
raise RuntimeError(f"mojofmt failed:\n{result.stderr.strip()}")
|
||
with open(out_path, 'r', encoding='utf-8') as f:
|
||
return f.read()
|
||
|
||
@app.route("/", methods=["GET", "POST"])
|
||
def index():
|
||
input_text, formatted_text = "", None
|
||
if request.method == "POST":
|
||
action = request.form.get("action")
|
||
f_obj = request.files.get("input_file")
|
||
input_text = request.form.get("input_text", "")
|
||
if f_obj and f_obj.filename:
|
||
try:
|
||
input_text = f_obj.read().decode('utf-8')
|
||
except Exception as e:
|
||
flash(f"Error reading uploaded file: {e}")
|
||
return render_template_string(HTML_TEMPLATE, input_text=input_text)
|
||
|
||
if action in ("format", "download"):
|
||
if not input_text.strip():
|
||
flash("No input data provided.")
|
||
return render_template_string(HTML_TEMPLATE, input_text=input_text)
|
||
try:
|
||
formatted_text = run_mojofmt(input_text)
|
||
except RuntimeError as e:
|
||
flash(str(e))
|
||
return render_template_string(HTML_TEMPLATE, input_text=input_text)
|
||
if action == "download":
|
||
tmpfile = tempfile.NamedTemporaryFile(delete=False, mode='w', encoding='utf-8', suffix='.txt')
|
||
tmpfile.write(formatted_text)
|
||
tmpfile.close()
|
||
return redirect(url_for('download_file', filename=os.path.basename(tmpfile.name)))
|
||
return render_template_string(HTML_TEMPLATE, input_text=input_text, formatted_text=formatted_text)
|
||
|
||
@app.route("/download/<filename>")
|
||
def download_file(filename):
|
||
safe_name = secure_filename(filename)
|
||
path = os.path.join(tempfile.gettempdir(), safe_name)
|
||
if not os.path.exists(path):
|
||
return "File not found", 404
|
||
resp = send_file(path, as_attachment=True, download_name="formatted_output.txt")
|
||
try:
|
||
os.unlink(path)
|
||
except Exception:
|
||
pass
|
||
return resp
|
||
|
||
@app.route("/api/format", methods=["POST"])
|
||
@limiter.limit("10/minute")
|
||
@require_api_token
|
||
def api_format():
|
||
if not request.is_json:
|
||
return jsonify({"error": "JSON body required"}), 400
|
||
data = request.get_json()
|
||
text = data.get("text", "")
|
||
if not text:
|
||
return jsonify({"error": "Missing 'text'"}), 400
|
||
try:
|
||
formatted = run_mojofmt(text)
|
||
return jsonify({"formatted_text": formatted})
|
||
except RuntimeError as e:
|
||
return jsonify({"error": str(e)}), 500
|
||
|
||
if __name__ == "__main__":
|
||
app.run(host="0.0.0.0", port=8000, debug=True) # debug=False in prod |