dekun
104 lines
3.5 KiB
Python
104 lines
3.5 KiB
Python
"""Flask 实例许可门禁与 /license 页。"""
|
||
|
||
from __future__ import annotations
|
||
|
||
import os
|
||
from pathlib import Path
|
||
|
||
from flask import Flask, jsonify, redirect, render_template_string, request
|
||
|
||
from lib.license.license_lib import (
|
||
get_device_id,
|
||
get_license_status,
|
||
is_license_valid,
|
||
redeem_code,
|
||
validate_license,
|
||
)
|
||
|
||
_TEMPLATE_PATH = Path(__file__).resolve().parent / "templates" / "license.html"
|
||
|
||
|
||
def _license_public_path(path: str) -> bool:
|
||
"""未授权时仍可访问的路径（授权页 / 接口 / 静态资源）。"""
|
||
if path in ("/license", "/api/license/status", "/api/license/redeem", "/api/license/validate", "/health"):
|
||
return True
|
||
if path.startswith("/static/"):
|
||
return True
|
||
if path.startswith("/favicon"):
|
||
return True
|
||
return False
|
||
|
||
|
||
def _license_manage_requested() -> bool:
|
||
"""已授权时默认禁止进入 /license；续费/换机用 ?renew=1。"""
|
||
return (request.args.get("renew") or request.args.get("manage") or "").strip() in (
|
||
"1",
|
||
"true",
|
||
"yes",
|
||
"on",
|
||
)
|
||
|
||
|
||
def install_license_gate(app: Flask) -> None:
|
||
"""注册 /license 与 before_request 门禁。三所 Flask 共用。"""
|
||
|
||
@app.get("/health")
|
||
def _license_health():
|
||
st = get_license_status(skip_remote=True)
|
||
return jsonify({"ok": True, "license_valid": bool(st.get("valid"))})
|
||
|
||
@app.get("/api/license/status")
|
||
def _license_status_api():
|
||
return jsonify(get_license_status())
|
||
|
||
@app.post("/api/license/redeem")
|
||
def _license_redeem_api():
|
||
data = request.get_json(silent=True) or {}
|
||
code = (data.get("code") or request.form.get("code") or "").strip()
|
||
ckey = (data.get("client_api_key") or request.form.get("client_api_key") or "").strip()
|
||
return jsonify(redeem_code(code, client_api_key=ckey or None))
|
||
|
||
@app.post("/api/license/validate")
|
||
def _license_validate_api():
|
||
return jsonify(validate_license(force=True))
|
||
|
||
@app.route("/license", methods=["GET", "POST"])
|
||
def _license_page():
|
||
# 已授权：默认不可再进授权页（续费/换机：/license?renew=1）
|
||
if is_license_valid() and request.method == "GET" and not _license_manage_requested():
|
||
return redirect("/")
|
||
|
||
msg = ""
|
||
err = ""
|
||
if request.method == "POST":
|
||
code = (request.form.get("code") or "").strip()
|
||
ckey = (request.form.get("client_api_key") or "").strip()
|
||
result = redeem_code(code, client_api_key=ckey or None)
|
||
if result.get("ok"):
|
||
return redirect("/")
|
||
err = result.get("message") or "激活失败"
|
||
status = get_license_status()
|
||
html = _TEMPLATE_PATH.read_text(encoding="utf-8")
|
||
return render_template_string(
|
||
html,
|
||
device_id=get_device_id(),
|
||
status=status,
|
||
message=msg,
|
||
error=err,
|
||
api_url=status.get("api_url") or "",
|
||
wechat="dekun03",
|
||
)
|
||
|
||
@app.before_request
|
||
def _license_before_request():
|
||
if os.getenv("LICENSE_DISABLED", "").strip().lower() in ("1", "true", "yes", "on"):
|
||
return None
|
||
path = request.path or "/"
|
||
if _license_public_path(path):
|
||
return None
|
||
if is_license_valid():
|
||
return None
|
||
if path.startswith("/api/"):
|
||
return jsonify({"ok": False, "error": "license_required", "message": "请先激活许可"}), 403
|
||
return redirect("/license")
|