#!/usr/bin/python3
import cgi
import sys
import os
import time
sys.path.insert(0, '/opt/ngon/apps')
sys.path.append(os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
from managers.auth_manager import AuthManager, generate_login_page_html, generate_access_denied_html
from links import generate_dropdown_html, generate_dropdown_css, generate_dropdown_js
# Authentication
form = cgi.FieldStorage()
auth = AuthManager('status')
auth_required, should_exit, headers = auth.require_auth(form)
if should_exit:
print("Content-Type: application/json")
if headers:
print(headers)
print("")
if auth_required:
print('{"success": false, "error": "Authentication required"}')
else:
print('{"success": true}')
sys.exit(0)
# Handle logout (must come BEFORE the text/html headers below). Clears the
# domain-scoped session cookie, which also signs the user out of the other
# *.ngon.us apps — intended, since this exists so people can get off the shared
# 'ngon' account and back on as themselves.
if not auth_required and form.getvalue('logout'):
print("Content-Type: application/json")
print(AuthManager.logout_cookie_header())
print("")
print('{"success": true}')
sys.exit(0)
# Handle password change request (must come BEFORE the text/html headers below)
if not auth_required and form.getvalue('change_password'):
import json
current_pw = form.getvalue('current_password', '')
new_pw = form.getvalue('new_password', '')
username = AuthManager.get_current_user()
success, error, cookie_header = AuthManager.change_password(username, current_pw, new_pw)
print("Content-Type: application/json")
if cookie_header:
print(cookie_header)
print("")
if success:
print(json.dumps({"success": True}))
else:
print(json.dumps({"success": False, "error": error}))
sys.exit(0)
# Cache-busting version based on most recent file modification
_dir = os.path.dirname(os.path.abspath(__file__))
_v = int(max(os.path.getmtime(os.path.join(_dir, f)) for f in os.listdir(_dir) if f.endswith(('.css', '.js')) and not f.startswith('.')))
print("Content-Type: text/html")
print("Cache-Control: no-cache, no-store, must-revalidate")
print("Pragma: no-cache")
print("Expires: 0")
print()
# If not authenticated, show login page
if auth_required:
# Check if logged in but no access (vs not logged in at all)
username = auth.is_authenticated()
if username:
print(generate_login_page_html("NGON Status Dashboard").replace(
'
', generate_access_denied_html("NGON Status Dashboard") + ''
).replace('display: block;', 'display: none;'))
else:
print(generate_login_page_html("NGON Status Dashboard"))
sys.exit(0)
# Get user access for filtered nav
_user_access = AuthManager.get_user_access()
_current_user = AuthManager.get_current_user() or 'STATUS'
# Whether this user may restart services (Site Manager access)
_can_restart_services = AuthManager('site_manager').check_access(AuthManager.get_current_user() or '')
# Whether this user may issue generator control commands (Gen Control access)
_can_gen_control = AuthManager('gen_control').check_access(AuthManager.get_current_user() or '')
# Clean, minimal HTML - all logic in status_widgets.js / status_data.js / status_desktop.js
html = '''