Spaces:

Lizabrand
/

optom

Sleeping

App Files Files Community

Kgshop commited on Jul 30, 2025

Commit

205bee1

verified ·

1 Parent(s): 370af8e

Update app.py

Browse files

Files changed (1) hide show

app.py +79 -12

app.py CHANGED Viewed

@@ -1,4 +1,4 @@
-from flask import Flask, render_template_string, request, redirect, url_for
 import json
 import os
 import logging
@@ -8,19 +8,23 @@ from datetime import datetime
 from huggingface_hub import HfApi, hf_hub_download
 from huggingface_hub.utils import RepositoryNotFoundError
 from werkzeug.utils import secure_filename
 app = Flask(__name__)
 DATA_FILE = 'data_lizabrand.json'
-# Настройки Hugging Face
 REPO_ID = "Kgshop/clients"
 HF_TOKEN_WRITE = os.getenv("HF_TOKEN")
 HF_TOKEN_READ = os.getenv("HF_TOKEN_READ")
-# Ссылка на логотип
 LOGO_URL = "https://cdn-avatars.huggingface.co/v1/production/uploads/67c280ccb9d3dfdee58ecfdd/hyc6QWsSZ6FejTAAqDGUS.jpeg"
-# Настройка логирования
 logging.basicConfig(level=logging.DEBUG)
 def load_data():
@@ -93,6 +97,64 @@ def periodic_backup():
         upload_db_to_hf()
         time.sleep(800)
 @app.route('/')
 def catalog():
     data = load_data()
@@ -450,7 +512,6 @@ def catalog():
             </div>
         </div>
-        <!-- Product Modal -->
         <div id="productModal" class="modal">
             <div class="modal-content">
                 <span class="close" onclick="closeModal('productModal')">×</span>
@@ -458,7 +519,6 @@ def catalog():
             </div>
         </div>
-        <!-- Quantity and Color Modal -->
         <div id="quantityModal" class="modal">
             <div class="modal-content">
                 <span class="close" onclick="closeModal('quantityModal')">×</span>
@@ -469,7 +529,6 @@ def catalog():
             </div>
         </div>
-        <!-- Cart Modal -->
         <div id="cartModal" class="modal">
             <div class="modal-content">
                 <span class="close" onclick="closeModal('cartModal')">×</span>
@@ -719,6 +778,9 @@ def product_detail(index):
 @app.route('/admin', methods=['GET', 'POST'])
 def admin():
     data = load_data()
     products = data['products']
     categories = data['categories']
@@ -753,7 +815,7 @@ def admin():
             photos_list = []
             if photos_files:
-                for photo in photos_files[:10]:  # Ограничение до 10 фото
                     if photo and photo.filename:
                         photo_filename = secure_filename(photo.filename)
                         uploads_dir = 'uploads'
@@ -800,7 +862,7 @@ def admin():
             if photos_files and any(photo.filename for photo in photos_files):
                 new_photos_list = []
-                for photo in photos_files[:10]:  # Ограничение до 10 фото
                     if photo and photo.filename:
                         photo_filename = secure_filename(photo.filename)
                         uploads_dir = 'uploads'
@@ -957,9 +1019,14 @@ def admin():
     </head>
     <body>
         <div class="container">
-            <div class="header">
-                <img src="''' + LOGO_URL + '''" alt="Logo" class="header-logo">
-                <h1>Админ-панель</h1>
             </div>
             <h1>Добавление товара</h1>
             <form method="POST" enctype="multipart/form-data">

+from flask import Flask, render_template_string, request, redirect, url_for, session
 import json
 import os
 import logging
 from huggingface_hub import HfApi, hf_hub_download
 from huggingface_hub.utils import RepositoryNotFoundError
 from werkzeug.utils import secure_filename
+import requests
 app = Flask(__name__)
+app.secret_key = os.getenv("FLASK_SECRET_KEY", "a_very_secret_key_for_development")
 DATA_FILE = 'data_lizabrand.json'
 REPO_ID = "Kgshop/clients"
 HF_TOKEN_WRITE = os.getenv("HF_TOKEN")
 HF_TOKEN_READ = os.getenv("HF_TOKEN_READ")
+VK_APP_ID = os.getenv("VK_APP_ID")
+VK_APP_SECRET = os.getenv("VK_APP_SECRET")
+ADMIN_VK_IDS = os.getenv("ADMIN_VK_IDS", "").split(',')
+REDIRECT_URI = "https://lizabrand-optom.hf.space/vk_callback"
 LOGO_URL = "https://cdn-avatars.huggingface.co/v1/production/uploads/67c280ccb9d3dfdee58ecfdd/hyc6QWsSZ6FejTAAqDGUS.jpeg"
 logging.basicConfig(level=logging.DEBUG)
 def load_data():
         upload_db_to_hf()
         time.sleep(800)
+@app.route('/login')
+def login():
+    if not VK_APP_ID:
+        return "VK_APP_ID не настроен на сервере.", 500
+    vk_auth_url = f"https://oauth.vk.com/authorize?client_id={VK_APP_ID}&display=page&redirect_uri={REDIRECT_URI}&scope=offline&response_type=code&v=5.131"
+    login_html = f'''
+    <!DOCTYPE html>
+    <html lang="ru">
+    <head>
+        <meta charset="UTF-8">
+        <title>Вход</title>
+        <style>
+            body {{ display: flex; justify-content: center; align-items: center; height: 100vh; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif; background-color: #f0f2f5; }}
+            a {{ padding: 12px 24px; background-color: #4C75A3; color: white; text-decoration: none; border-radius: 8px; font-size: 16px; font-weight: 500; box-shadow: 0 2px 4px rgba(0,0,0,0.1); transition: background-color 0.2s; }}
+            a:hover {{ background-color: #456b92; }}
+        </style>
+    </head>
+    <body>
+        <a href="{vk_auth_url}">Войти через ВКонтакте</a>
+    </body>
+    </html>
+    '''
+    return render_template_string(login_html)
+@app.route('/vk_callback')
+def vk_callback():
+    code = request.args.get('code')
+    if not code:
+        return "Ошибка: код авторизации не получен.", 400
+    if not VK_APP_ID or not VK_APP_SECRET:
+        return "Учетные данные приложения VK не настроены на сервере.", 500
+    token_url = 'https://oauth.vk.com/access_token'
+    params = {
+        'client_id': VK_APP_ID,
+        'client_secret': VK_APP_SECRET,
+        'redirect_uri': REDIRECT_URI,
+        'code': code
+    }
+    try:
+        response = requests.get(token_url, params=params)
+        response.raise_for_status()
+        data = response.json()
+    except requests.RequestException as e:
+        return f"Сетевая ошибка при аутентификации: {e}", 500
+    if 'access_token' in data and 'user_id' in data:
+        session['vk_user_id'] = data['user_id']
+        return redirect(url_for('admin'))
+    else:
+        error_description = data.get('error_description', 'Неизвестная ошибка')
+        return f"Ошибка при аутентификации: {error_description}", 400
+@app.route('/logout')
+def logout():
+    session.pop('vk_user_id', None)
+    return redirect(url_for('catalog'))
 @app.route('/')
 def catalog():
     data = load_data()
             </div>
         </div>
         <div id="productModal" class="modal">
             <div class="modal-content">
                 <span class="close" onclick="closeModal('productModal')">×</span>
             </div>
         </div>
         <div id="quantityModal" class="modal">
             <div class="modal-content">
                 <span class="close" onclick="closeModal('quantityModal')">×</span>
             </div>
         </div>
         <div id="cartModal" class="modal">
             <div class="modal-content">
                 <span class="close" onclick="closeModal('cartModal')">×</span>
 @app.route('/admin', methods=['GET', 'POST'])
 def admin():
+    if 'vk_user_id' not in session or str(session.get('vk_user_id')) not in ADMIN_VK_IDS:
+        return redirect(url_for('login'))
     data = load_data()
     products = data['products']
     categories = data['categories']
             photos_list = []
             if photos_files:
+                for photo in photos_files[:10]:
                     if photo and photo.filename:
                         photo_filename = secure_filename(photo.filename)
                         uploads_dir = 'uploads'
             if photos_files and any(photo.filename for photo in photos_files):
                 new_photos_list = []
+                for photo in photos_files[:10]:
                     if photo and photo.filename:
                         photo_filename = secure_filename(photo.filename)
                         uploads_dir = 'uploads'
     </head>
     <body>
         <div class="container">
+            <div class="header" style="justify-content: space-between;">
+                <div style="display: flex; align-items: center;">
+                    <img src="''' + LOGO_URL + '''" alt="Logo" class="header-logo">
+                    <h1 style="margin-bottom: 0;">Админ-панель</h1>
+                </div>
+                 <a href="{{ url_for('logout') }}" style="text-decoration: none;">
+                    <button type="button" class="delete-button" style="margin-top: 0;">Выйти</button>
+                </a>
             </div>
             <h1>Добавление товара</h1>
             <form method="POST" enctype="multipart/form-data">