76 lines
2.4 KiB
Python
76 lines
2.4 KiB
Python
|
from flask import Blueprint, render_template, request, redirect, url_for, session, flash
|
||
|
|
from web.config import Config
|
||
|
|
from web.auth import admin_required
|
||
|
|
from web.database import query_db
|
||
|
|
import os
|
||
|
|
|
||
|
|
bp = Blueprint('admin', __name__, url_prefix='/admin')
|
||
|
|
|
||
|
|
@bp.route('/login', methods=['GET', 'POST'])
|
||
|
|
def login():
|
||
|
|
if request.method == 'POST':
|
||
|
|
token = request.form.get('token')
|
||
|
|
if token == Config.ADMIN_TOKEN:
|
||
|
|
session['is_admin'] = True
|
||
|
|
return redirect(url_for('admin.dashboard'))
|
||
|
|
else:
|
||
|
|
flash('Invalid Token', 'error')
|
||
|
|
return render_template('admin/login.html')
|
||
|
|
|
||
|
|
@bp.route('/logout')
|
||
|
|
def logout():
|
||
|
|
session.pop('is_admin', None)
|
||
|
|
return redirect(url_for('main.index'))
|
||
|
|
|
||
|
|
@bp.route('/')
|
||
|
|
@admin_required
|
||
|
|
def dashboard():
|
||
|
|
return render_template('admin/dashboard.html')
|
||
|
|
|
||
|
|
from web.services.etl_service import EtlService
|
||
|
|
|
||
|
|
@bp.route('/trigger_etl', methods=['POST'])
|
||
|
|
@admin_required
|
||
|
|
def trigger_etl():
|
||
|
|
script_name = request.form.get('script')
|
||
|
|
allowed = ['L1A.py', 'L2_Builder.py', 'L3_Builder.py']
|
||
|
|
if script_name not in allowed:
|
||
|
|
return "Invalid script", 400
|
||
|
|
|
||
|
|
success, message = EtlService.run_script(script_name)
|
||
|
|
status_code = 200 if success else 500
|
||
|
|
return message, status_code
|
||
|
|
|
||
|
|
@bp.route('/sql', methods=['GET', 'POST'])
|
||
|
|
@admin_required
|
||
|
|
def sql_runner():
|
||
|
|
result = None
|
||
|
|
error = None
|
||
|
|
query = ""
|
||
|
|
db_name = "l2"
|
||
|
|
|
||
|
|
if request.method == 'POST':
|
||
|
|
query = request.form.get('query')
|
||
|
|
db_name = request.form.get('db_name', 'l2')
|
||
|
|
|
||
|
|
# Safety check
|
||
|
|
forbidden = ['DELETE', 'DROP', 'UPDATE', 'INSERT', 'ALTER', 'GRANT', 'REVOKE']
|
||
|
|
if any(x in query.upper() for x in forbidden):
|
||
|
|
error = "Only SELECT queries allowed in Web Runner."
|
||
|
|
else:
|
||
|
|
try:
|
||
|
|
# Enforce limit if not present
|
||
|
|
if 'LIMIT' not in query.upper():
|
||
|
|
query += " LIMIT 50"
|
||
|
|
|
||
|
|
rows = query_db(db_name, query)
|
||
|
|
if rows:
|
||
|
|
columns = rows[0].keys()
|
||
|
|
result = {'columns': columns, 'rows': rows}
|
||
|
|
else:
|
||
|
|
result = {'columns': [], 'rows': []}
|
||
|
|
except Exception as e:
|
||
|
|
error = str(e)
|
||
|
|
|
||
|
|
return render_template('admin/sql.html', result=result, error=error, query=query, db_name=db_name)
|