cubbyshare/frontend/frontend.py

import os
import base64

import hvac
import requests
from flask import Blueprint, render_template, flash, redirect, url_for, current_app
from flask_bootstrap import __version__ as FLASK_BOOTSTRAP_VERSION
from flask_nav.elements import Navbar, View, Subgroup, Link, Text, Separator
from markupsafe import escape

from .forms import DataForm
from .nav import nav

frontend = Blueprint('frontend', __name__)


nav.register_element('frontend_top', Navbar(
    View('Cubbyshare', '.index'),
    View('Home', '.index'),
    View('About', '.about'),
))


@frontend.route('/', defaults={'path': ''})
@frontend.route('/<path:path>')
def index(path):
    token = path
    if not token:
        form = DataForm()
        return render_template('index.html', form=form, data='')

    vault_uri = os.environ.get('VAULT_URI', None)
    if not vault_uri:
        flash('Missing VAULT_URI')
        return redirect(url_for('.index'))

    try:
        cubby = hvac.Client(url=vault_uri, token=token)
        result = cubby.read('cubbyhole/%s' % token)
    except hvac.exceptions.Forbidden:
        flash('Something went wrong')
        return redirect(url_for('.index'))
    secret = base64.b64decode(result['data']['wrap']).decode()
    return render_template('index.html', form='', data=secret)


@frontend.route('/add', methods=['POST'])
def add_entry():
    form = DataForm()

    if form.validate_on_submit():
        secret_data = base64.b64encode(form.secrets.data.encode()).decode()
        root_token = current_app.get_token()

        vault_uri = os.environ.get('VAULT_URI', None)
        if not vault_uri:
            flash('Missing VAULT_URI')
            return redirect(url_for('.index'))

        vault = hvac.Client(url=vault_uri, token=root_token)
        token = vault.create_token(lease='24h', num_uses=2, renewable=False, no_default_policy=True)
        token_id = token['auth']['client_token']

        cubby = hvac.Client(url=vault_uri, token=token_id)
        cubby.write('cubbyhole/%s' % token_id, wrap=secret_data)
        flash('Successfully saved')

        return render_template('success.html', token=token_id)
    else:
        for error_field, error_message in form.errors.items():
            flash("Field : {field}; error : {error}".format(field=error_field, error=error_message))

    return redirect(url_for('.index'))


@frontend.route('/about')
def about():
    return render_template('about.html')