yusur/freak
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix csrf_token, add guild suggestion

Browse source
This commit is contained in:
Yusur 2025-10-23 03:10:06 +02:00
parent 3a77357b8e
commit 6b11bf4537
2 changed files with 27 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
freak/__init__.py
View file

@ -26,7 +26,7 @@ from suou import twocolon_list, WantsContentType
from .colors import color_themes, theme_classes from .colors import color_themes, theme_classes
__version__ = '0.5.0-dev41' __version__ = '0.5.0-dev42'
APP_BASE_DIR = os.path.dirname(os.path.dirname(__file__)) APP_BASE_DIR = os.path.dirname(os.path.dirname(__file__))

28
freak/rest/__init__.py
View file

@ -2,9 +2,9 @@
from __future__ import annotations from __future__ import annotations
from typing import Iterable from typing import Iterable
from flask import abort from quart import session
from quart import abort, Blueprint, redirect, request, url_for
from pydantic import BaseModel from pydantic import BaseModel
from quart import Blueprint, redirect, request, url_for
from quart_auth import AuthUser, current_user, login_required, login_user, logout_user from quart_auth import AuthUser, current_user, login_required, login_user, logout_user
from quart_schema import QuartSchema, validate_request, validate_response from quart_schema import QuartSchema, validate_request, validate_response
from sqlalchemy import select from sqlalchemy import select
@ -57,9 +57,15 @@ async def health():
@bp.get('/oath') @bp.get('/oath')
async def oath(): async def oath():
try:
## pull csrf token from session
csrf_tok = session['csrf_token']
except Exception as e:
print(e)
abort(503, "csrf_token is null")
return dict( return dict(
## XXX might break any time! ## XXX might break any time!
csrf_token= await csrf._get_csrf_token() csrf_token= csrf_tok
) )
## TODO coverage of REST is still partial, but it's planned ## TODO coverage of REST is still partial, but it's planned
@ -276,3 +282,19 @@ async def search_top(data: QueryIn):
return dict(has = [p.feed_info() for p in result]) return dict(has = [p.feed_info() for p in result])
## SUGGEST
@bp.post("/suggest/guild")
@validate_request(QueryIn)
async def suggest_guild(data: QueryIn):
if not data.query.isidentifier():
return dict(has=[])
async with db as session:
sq = select(Guild).where(Guild.name.like(data.query + "%"))
result: Iterable[Guild] = (await session.execute(sq.limit(10))).scalars()
return dict(has = [g.simple_info() for g in result])