Locazia: v1 auth (not tested yet)

app/api/__init__.py

@@ -1,9 +1,44 @@
-from sanic import Sanic
+import traceback
+
+from sanic import Sanic, response
+from app.core.logger import make_log
 
 app = Sanic(__name__)
 
+from app.api.middleware import attach_user_to_request, close_db_session
+
+app.register_middleware(attach_user_to_request, "request")
+app.register_middleware(close_db_session, "response")
+
 from app.api.routes._index import s_index
+from app.api.routes.auth import s_api_v1_auth_twa
 from app.api.routes.tonconnect import s_api_tonconnect_manifest
+from app.api.routes.node_storage import s_api_v1_storage_post, s_api_v1_storage_get
+from app.api.routes.custodial import s_api_v1_custodial_upload_content
 
 app.add_route(s_index, "/")
+
 app.add_route(s_api_tonconnect_manifest, "/api/tonconnect-manifest.json")
+
+app.add_route(s_api_v1_auth_twa, "/api/v1/auth.twa", methods=["POST"])
+
+app.add_route(s_api_v1_storage_post, "/api/v1/storage", methods=["POST"])
+app.add_route(s_api_v1_storage_get, "/api/v1/storage/<file_hash>", methods=["GET"])
+
+app.add_route(s_api_v1_custodial_upload_content, "/api/v1/custodial.uploadContent", methods=["POST"])
+
+
+@app.exception(BaseException)
+async def s_handle_exception(request, exception):
+    try:
+        request.ctx.db_session.close()
+    except BaseException as e:
+        pass
+
+    try:
+        raise exception
+    except BaseException as e:
+        make_log("sanic_exception", f"Exception: {e}" + '\n' + str(traceback.format_exc()), level='error')
+
+    return response.json({"error": "An internal server error occurred"}, status=500)
+

app/api/middleware.py

@@ -0,0 +1,70 @@
+from app.core.models.user import User
+from app.core.models.keys import KnownKey
+from app.core.storage import Session
+from app.core.logger import make_log
+
+from base58 import b58encode, b58decode
+
+
+async def try_authorization(request):
+    token = request.headers.get("Authorization")
+    if not token:
+        return
+
+    token_bin = b58decode(token)
+    if len(token_bin) != 57:
+        make_log("auth", "Invalid token length", level="warning")
+        return
+
+    known_key = request.ctx.db_session.query(KnownKey).filter(KnownKey.seed == token).first()
+    if not known_key:
+        make_log("auth", "Unknown key", level="warning")
+        return
+
+    if known_key.type != "USER_API_V1":
+        make_log("auth", "Invalid key type", level="warning")
+        return
+
+    (
+        token_version,
+        user_id,
+        timestamp,
+        randpart
+    ) = (
+        int.from_bytes(token_bin[0:1], 'big'),
+        int.from_bytes(token_bin[1:17], 'big'),
+        int.from_bytes(token_bin[17:25], 'big'),
+        token_bin[25:]
+    )
+    assert token_version == 1, "Invalid token version"
+    assert user_id > 0, "Invalid user_id"
+    assert timestamp > 0, "Invalid timestamp"
+
+    if known_key.meta.get('I_user_id', -1) != user_id:
+        make_log("auth", f"User ID mismatch: {known_key.meta.get('I_user_id', -1)} != {user_id}", level="warning")
+        return
+
+    user = request.ctx.db_session.query(User).filter(User.id == known_key.meta['I_user_id']).first()
+    if not user:
+        make_log("auth", "No user from key", level="warning")
+        return
+
+    request.ctx.user = user
+    request.ctx.user_key = known_key
+
+
+async def attach_user_to_request(request):
+    request.ctx.db_session = Session()
+    try_authorization(request)
+
+
+async def close_db_session(request, response):
+    try:
+        request.ctx.db_session.close()
+    except BaseException as e:
+        pass
+
+    response.headers["Access-Control-Allow-Origin"] = "*"
+    response.headers["Access-Control-Allow-Methods"] = "GET, POST, PUT, DELETE, OPTIONS"
+    response.headers["Access-Control-Allow-Headers"] = "Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token, Authorization, Refer"
+

app/api/routes/auth.py

@@ -0,0 +1,45 @@
+from sanic import response
+from app.core._config import TELEGRAM_API_KEY
+from app.core.models.user import User
+from app.core.logger import make_log
+from aiogram.utils.web_app import safe_parse_webapp_init_data
+from datetime import datetime
+import os
+import hashlib
+
+
+async def s_api_v1_auth_twa(request):
+    if not request.json:
+        return response.json({"error": "No data provided"}, status=400)
+
+    if not request.json.get('twa_data'):
+        return response.json({"error": "No TWA data provided"}, status=400)
+
+    twa_data = request.json['twa_data']
+    twa_data = safe_parse_webapp_init_data(token=TELEGRAM_API_KEY, init_data=twa_data)
+    assert twa_data
+
+    known_user = request.ctx.db_session.query(User).filter(User.telegram_id == twa_data.user.id).first()
+    if not known_user:
+        new_user = User(
+            telegram_id=twa_data.user.id,
+            username=twa_data.user.username,
+            meta={
+                "first_name": twa_data.user.first_name,
+                "last_name": twa_data.user.last_name,
+                "photo_url": twa_data.user.photo_url
+            },
+            lang_code=twa_data.user.language_code,
+            last_use=datetime.now(),
+            created=datetime.now()
+        )
+        request.ctx.db_session.add(new_user)
+        request.ctx.db_session.commit()
+
+        known_user = request.ctx.db_session.query(User).filter(User.telegram_id == twa_data.user.id).first()
+        assert known_user, "User not created"
+
+    return response.json({
+        'user': known_user.json_format(),
+        'auth_v1_token': known_user.create_api_token_v1(request.ctx.db_session, "USER_API_V1")['auth_v1_token']
+    })

app/api/routes/custodial.py

@@ -0,0 +1,36 @@
+from sanic import response
+from app.core._config import TELEGRAM_API_KEY
+from app.core.models.user import User
+from app.core.logger import make_log
+from datetime import datetime
+import os
+import hashlib
+
+
+async def s_api_v1_custodial_upload_content(request):
+    if not request.json:
+        return response.json({"error": "No data provided"}, status=400)
+
+    if not request.json.get('content'):
+        return response.json({"error": "No content provided"}, status=400)
+
+    if not request.json.get('content_hash'):
+        return response.json({"error": "No content hash provided"}, status=400)
+
+    content = request.json['content']
+    content_hash = request.json['content_hash']
+
+    known_user = request.ctx.db_session.query(User).filter(User.telegram_id == request.ctx.user.telegram_id).first()
+    if not known_user:
+        return response.json({"error": "User not found"}, status=400)
+
+    content_path = os.path.join(os.path.abspath(os.path.dirname(__file__)), f"../../../content/{content_hash}")
+    if os.path.exists(content_path):
+        return response.json({"error": "Content already exists"}, status=400)
+
+    with open(content_path, "wb") as f:
+        f.write(content)
+
+    return response.json({
+        'content_hash': content_hash
+    })

app/api/routes/node_storage.py

@@ -0,0 +1,58 @@
+from sanic import response
+from app.core._config import UPLOADS_DIR
+from app.core.storage import db_session
+from app.core.models.node_storage import StoredContent
+from app.core.logger import make_log
+from datetime import datetime
+from base58 import b58encode, b58decode
+import os
+import hashlib
+
+
+async def s_api_v1_storage_post(request):
+    if not request.files and not request.json:
+        return response.json({"error": "No file provided"}, status=400)
+
+    file_param = list(request.files.values())[0][0] if request.files else None
+    file_name_json = request.json.get("filename") if request.json else None
+
+    if file_param:
+        file_content = file_param.body
+        file_name = file_name_json or file_param.name
+    else:
+        return response.json({"error": "No file provided"}, status=400)
+
+    try:
+        file_hash = b58encode(hashlib.sha256(file_content).digest()).decode()
+        new_content = StoredContent(
+            hash=file_hash,
+            filename=file_name,
+            user_id=None,
+            meta={},
+            created=datetime.now(),
+            key_id=None
+        )
+        request.ctx.db_session.add(new_content)
+        request.ctx.db_session.commit()
+
+        file_path = os.path.join(UPLOADS_DIR, file_hash)
+        with open(file_path, "wb") as file:
+            file.write(file_content)
+
+        return response.json({"content_sha256": file_hash})
+    except BaseException as e:
+        return response.json({"error": f"Error: {e}"}, status=500)
+
+
+async def s_api_v1_storage_get(request, file_hash):
+    content = request.ctx.db_session.query(StoredContent).filter(StoredContent.hash == file_hash).first()
+    if not content:
+        return response.json({"error": "File not found"}, status=404)
+
+    make_log(f"File {file_hash} requested by {request.ip}")
+
+    file_path = os.path.join(UPLOADS_DIR, file_hash)
+    if not os.path.exists(file_path):
+        return response.json({"error": "File not found"}, status=404)
+
+    return await response.file(file_path)