113 lines
3.1 KiB
Python
113 lines
3.1 KiB
Python
import json
|
|
|
|
from django.shortcuts import get_object_or_404, redirect
|
|
from django.utils.translation import gettext_lazy as _
|
|
from django.views.decorators.csrf import csrf_exempt
|
|
from django.core.exceptions import ValidationError
|
|
from django.views.generic.edit import DeleteView
|
|
from django.views.generic.base import View
|
|
from django.http import JsonResponse
|
|
from django_tables2 import SingleTableView
|
|
from uuid import uuid4
|
|
|
|
from dashboard.mixins import DashboardView
|
|
from evidence.models import Annotation
|
|
from evidence.parse import Build
|
|
from user.models import User
|
|
from api.models import Token
|
|
from api.tables import TokensTable
|
|
|
|
|
|
def save_in_disk(data, user):
|
|
pass
|
|
|
|
|
|
@csrf_exempt
|
|
def NewSnapshot(request):
|
|
# Accept only posts
|
|
if request.method != 'POST':
|
|
return JsonResponse({'error': 'Invalid request method'}, status=400)
|
|
|
|
# Authentication
|
|
auth_header = request.headers.get('Authorization')
|
|
if not auth_header or not auth_header.startswith('Bearer '):
|
|
return JsonResponse({'error': 'Invalid or missing token'}, status=401)
|
|
|
|
token = auth_header.split(' ')[1]
|
|
tk = Token.objects.filter(token=token).first()
|
|
if not tk:
|
|
return JsonResponse({'error': 'Invalid or missing token'}, status=401)
|
|
|
|
# Validation snapshot
|
|
try:
|
|
data = json.loads(request.body)
|
|
except json.JSONDecodeError:
|
|
return JsonResponse({'error': 'Invalid JSON'}, status=400)
|
|
|
|
# try:
|
|
# Build(data, None, check=True)
|
|
# except Exception:
|
|
# return JsonResponse({'error': 'Invalid Snapshot'}, status=400)
|
|
|
|
exist_annotation = Annotation.objects.filter(
|
|
uuid=data['uuid']
|
|
).first()
|
|
|
|
if exist_annotation:
|
|
raise ValidationError("error: the snapshot {} exist".format(data['uuid']))
|
|
|
|
# Process snapshot
|
|
# save_in_disk(data, tk.user)
|
|
|
|
try:
|
|
Build(data, tk.user)
|
|
except Exception:
|
|
return JsonResponse({'status': 'fail'}, status=200)
|
|
|
|
return JsonResponse({'status': 'success'}, status=200)
|
|
|
|
|
|
|
|
|
|
class TokenView(DashboardView, SingleTableView):
|
|
template_name = "token.html"
|
|
title = _("Credential management")
|
|
section = "Credential"
|
|
subtitle = _('Managament Tokens')
|
|
icon = 'bi bi-key'
|
|
model = Token
|
|
table_class = TokensTable
|
|
|
|
def get_queryset(self):
|
|
"""
|
|
Override the get_queryset method to filter events based on the user type.
|
|
"""
|
|
return Token.objects.filter().order_by("-id")
|
|
|
|
def get_context_data(self, **kwargs):
|
|
context = super().get_context_data(**kwargs)
|
|
context.update({
|
|
'tokens': Token.objects,
|
|
})
|
|
return context
|
|
|
|
|
|
class TokenDeleteView(DashboardView, DeleteView):
|
|
model = Token
|
|
|
|
def get(self, request, *args, **kwargs):
|
|
self.pk = kwargs['pk']
|
|
self.object = get_object_or_404(self.model, pk=self.pk, owner=self.request.user)
|
|
self.object.delete()
|
|
|
|
return redirect('api:tokens')
|
|
|
|
|
|
class TokenNewView(DashboardView, View):
|
|
|
|
def get(self, request, *args, **kwargs):
|
|
Token.objects.create(token=uuid4(), owner=self.request.user)
|
|
|
|
return redirect('api:tokens')
|
|
|