mirror of https://github.com/kianby/stacosys
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
99 lines
3.1 KiB
Python
99 lines
3.1 KiB
Python
#!/usr/bin/env python
|
|
# -*- coding: utf-8 -*-
|
|
|
|
import logging
|
|
from flask import request, jsonify, abort
|
|
from app import app
|
|
from app.models.site import Site
|
|
from app.models.comment import Comment
|
|
from app.helpers.hashing import md5
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
@app.route("/comments", methods=['GET'])
|
|
def query_comments():
|
|
|
|
comments = []
|
|
try:
|
|
token = request.args.get('token', '')
|
|
url = request.args.get('url', '')
|
|
|
|
logger.info('retrieve comments for token %s, url %s' % (token, url))
|
|
for comment in Comment.select(Comment).join(Site).where(
|
|
(Comment.url == url) &
|
|
(Site.token == token)).order_by(+Comment.published):
|
|
d = {}
|
|
d['author'] = comment.author_name
|
|
d['content'] = comment.content
|
|
if comment.author_site:
|
|
d['site'] = comment.author_site
|
|
if comment.author_email:
|
|
d['avatar'] = md5(comment.author_email.strip().lower())
|
|
d['date'] = comment.published.strftime("%Y-%m-%d %H:%M:%S")
|
|
logger.info(d)
|
|
comments.append(d)
|
|
r = jsonify({'data': comments})
|
|
r.status_code = 200
|
|
except:
|
|
logger.warn('bad request')
|
|
r = jsonify({'data': []})
|
|
r.status_code = 400
|
|
return r
|
|
|
|
|
|
@app.route("/comments/count", methods=['GET'])
|
|
def get_comments_count():
|
|
try:
|
|
token = request.args.get('token', '')
|
|
url = request.args.get('url', '')
|
|
count = Comment.select(Comment).join(Site).where(
|
|
(Comment.url == url) &
|
|
(Site.token == token)).count()
|
|
r = jsonify({'count': count})
|
|
r.status_code = 200
|
|
except:
|
|
r = jsonify({'count': 0})
|
|
r.status_code = 200
|
|
return r
|
|
|
|
|
|
@app.route("/comments", methods=['POST'])
|
|
def new_comment():
|
|
|
|
try:
|
|
data = request.get_json()
|
|
logger.info(data)
|
|
|
|
# validate token: retrieve site entity
|
|
token = data.get('token', '')
|
|
site = Site.select().where(Site.token == token).get()
|
|
if site is None:
|
|
logger.warn('Unknown site %s' % token)
|
|
abort(400)
|
|
|
|
# get values
|
|
url = data.get('url', '')
|
|
author_name = data.get('author', '')
|
|
author_email = data.get('email', '')
|
|
author_site = data.get('site', '')
|
|
message = data.get('message', '')
|
|
subscribe = data.get('subscribe', '')
|
|
|
|
# honeypot for spammers
|
|
captcha = data.get('captcha', '')
|
|
if captcha:
|
|
logger.warn('discard spam: captcha %s author %s email %s site %s url %s message %s'
|
|
% (captcha, author_name, author_email, author_site, url, message))
|
|
else:
|
|
# TODO push new comment to backend service
|
|
logger.info('process: captcha %s author %s email %s site %s url %s message %s subscribe %s'
|
|
% (captcha, author_name, author_email, author_site,
|
|
url, message, subscribe))
|
|
|
|
except:
|
|
logger.exception("new comment failure")
|
|
abort(400)
|
|
|
|
return "OK"
|