soc-fortress/iris-web/source/app/views.py

#!/usr/bin/env python3
#
#  IRIS Source Code
#  Copyright (C) 2021 - Airbus CyberSecurity (SAS)
#  ir@cyberactionlab.net
#
#  This program is free software; you can redistribute it and/or
#  modify it under the terms of the GNU Lesser General Public
#  License as published by the Free Software Foundation; either
#  version 3 of the License, or (at your option) any later version.
#
#  This program is distributed in the hope that it will be useful,
#  but WITHOUT ANY WARRANTY; without even the implied warranty of
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
#  Lesser General Public License for more details.
#
#  You should have received a copy of the GNU Lesser General Public License
#  along with this program; if not, write to the Free Software Foundation,
#  Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

# Python modules

# Flask modules

# App modules

from app import app
from app import lm
from app.blueprints.activities.activities_routes import activities_blueprint
from app.blueprints.alerts.alerts_routes import alerts_blueprint
from app.blueprints.api.api_routes import api_blueprint
from app.blueprints.case.case_routes import case_blueprint
from app.blueprints.context.context import ctx_blueprint
# Blueprints
from app.blueprints.dashboard.dashboard_routes import dashboard_blueprint
from app.blueprints.datastore.datastore_routes import datastore_blueprint
from app.blueprints.demo_landing.demo_landing import demo_blueprint
from app.blueprints.dim_tasks.dim_tasks import dim_tasks_blueprint
from app.blueprints.filters.filters_routes import saved_filters_blueprint
from app.blueprints.login.login_routes import login_blueprint
from app.blueprints.manage.manage_access_control import manage_ac_blueprint
from app.blueprints.manage.manage_alerts_status_routes import manage_alerts_status_blueprint
from app.blueprints.manage.manage_analysis_status_routes import manage_anastatus_blueprint
from app.blueprints.manage.manage_assets_type_routes import manage_assets_blueprint
from app.blueprints.manage.manage_attributes_routes import manage_attributes_blueprint
from app.blueprints.manage.manage_case_classifications import manage_case_classification_blueprint
from app.blueprints.manage.manage_case_state import manage_case_state_blueprint
from app.blueprints.manage.manage_cases_routes import manage_cases_blueprint
from app.blueprints.manage.manage_customers_routes import manage_customers_blueprint
from app.blueprints.manage.manage_event_categories_routes import manage_event_cat_blueprint
from app.blueprints.manage.manage_groups import manage_groups_blueprint
from app.blueprints.manage.manage_ioc_types_routes import manage_ioc_type_blueprint
from app.blueprints.manage.manage_modules_routes import manage_modules_blueprint
from app.blueprints.manage.manage_objects_routes import manage_objects_blueprint
from app.blueprints.manage.manage_severities_routes import manage_severities_blueprint
from app.blueprints.manage.manage_srv_settings_routes import manage_srv_settings_blueprint
from app.blueprints.manage.manage_task_status_routes import manage_task_status_blueprint
from app.blueprints.manage.manage_templates_routes import manage_templates_blueprint
from app.blueprints.manage.manage_tlps_routes import manage_tlp_type_blueprint
from app.blueprints.manage.manage_case_templates_routes import manage_case_templates_blueprint
from app.blueprints.manage.manage_users import manage_users_blueprint
from app.blueprints.overview.overview_routes import overview_blueprint
from app.blueprints.profile.profile_routes import profile_blueprint
from app.blueprints.reports.reports_route import reports_blueprint
from app.blueprints.search.search_routes import search_blueprint
from app.models.authorization import User
from app.post_init import run_post_init

app.register_blueprint(dashboard_blueprint)
app.register_blueprint(overview_blueprint)
app.register_blueprint(login_blueprint)
app.register_blueprint(profile_blueprint)
app.register_blueprint(search_blueprint)
app.register_blueprint(manage_cases_blueprint)
app.register_blueprint(manage_assets_blueprint)
app.register_blueprint(manage_srv_settings_blueprint)
app.register_blueprint(manage_users_blueprint)
app.register_blueprint(manage_templates_blueprint)
app.register_blueprint(manage_modules_blueprint)
app.register_blueprint(manage_customers_blueprint)
app.register_blueprint(manage_anastatus_blueprint)
app.register_blueprint(manage_ioc_type_blueprint)
app.register_blueprint(manage_event_cat_blueprint)
app.register_blueprint(manage_objects_blueprint)
app.register_blueprint(manage_tlp_type_blueprint)
app.register_blueprint(manage_case_templates_blueprint)
app.register_blueprint(manage_task_status_blueprint)
app.register_blueprint(manage_attributes_blueprint)
app.register_blueprint(manage_ac_blueprint)
app.register_blueprint(manage_groups_blueprint)
app.register_blueprint(manage_case_classification_blueprint)
app.register_blueprint(manage_alerts_status_blueprint)
app.register_blueprint(manage_severities_blueprint)
app.register_blueprint(manage_case_state_blueprint)
app.register_blueprint(saved_filters_blueprint)

app.register_blueprint(ctx_blueprint)
app.register_blueprint(case_blueprint)
app.register_blueprint(reports_blueprint)
app.register_blueprint(activities_blueprint)
app.register_blueprint(dim_tasks_blueprint)
app.register_blueprint(datastore_blueprint)
app.register_blueprint(alerts_blueprint)

app.register_blueprint(api_blueprint)
app.register_blueprint(demo_blueprint)

try:

    run_post_init(development=app.config["DEVELOPMENT"])

except Exception as e:
    app.logger.exception(f"Post init failed. IRIS not started")
    raise e


# provide login manager with load_user callback
@lm.user_loader
def load_user(user_id):
    return User.query.get(int(user_id))


@lm.request_loader
def load_user_from_request(request):

    # first, try to login using the api_key url arg
    api_key = request.args.get('api_key')
    if api_key:
        user = User.query.filter(
            User.api_key == api_key,
            User.active == True
        ).first()
        if user:
            return user

    # next, try to login using Basic Auth
    api_key = request.headers.get('Authorization')
    if api_key:
        api_key = api_key.replace('Bearer ', '', 1)

        user = User.query.filter(
            User.api_key == api_key,
            User.active == True
        ).first()

        if user:
            return user

    # finally, return None if both methods did not login the user
    return None