Spaces:

darkfire514
/

PostgreSQL_general

Running

App Files Files Community

darkfire514 commited on May 30

Commit

1e6ac2e

verified ·

1 Parent(s): 62b22d6

Update api.py

Browse files

Files changed (1) hide show

api.py +132 -24

api.py CHANGED Viewed

@@ -1,22 +1,25 @@
 import hashlib
 import os
 import secrets
 from datetime import datetime
 from typing import List, Optional
 import psycopg2
-from fastapi import FastAPI, Header, HTTPException
 from pydantic import BaseModel
 app = FastAPI(
     title="PostgreSQL General HF API",
     description="A lightweight PostgreSQL API service for Hugging Face Docker Spaces.",
-    version="1.0.0",
 )
 POSTGRES_USER = os.environ.get("POSTGRES_USER", "admin")
 POSTGRES_PASSWORD = os.environ.get("POSTGRES_PASSWORD")
 POSTGRES_DB = os.environ.get("POSTGRES_DB", "appdb")
 DATABASE_URL = os.environ.get(
     "DATABASE_URL",
@@ -96,15 +99,26 @@ def startup():
     init_tables()
-def verify_api_key(authorization: Optional[str], required_scope: Optional[str] = None):
     if not authorization:
-        raise HTTPException(status_code=401, detail="Missing Authorization header")
     if not authorization.startswith("Bearer "):
         raise HTTPException(status_code=401, detail="Invalid Authorization format")
-    api_key = authorization.replace("Bearer ", "", 1).strip()
-    key_hash = hash_key(api_key)
     conn = get_conn()
     cur = conn.cursor()
@@ -154,14 +168,61 @@ def verify_api_key(authorization: Optional[str], required_scope: Optional[str] =
     return {"id": key_id, "name": name, "scopes": scopes}
-@app.get("/")
-def root():
-    return {
-        "service": "PostgreSQL General HF API",
-        "status": "ok",
-        "docs": "/docs",
-        "health": "/api/health",
-    }
 @app.get("/api/health")
@@ -170,8 +231,11 @@ def health():
 @app.get("/api/db-health")
-def db_health(authorization: Optional[str] = Header(default=None)):
-    verify_api_key(authorization, required_scope="read")
     conn = get_conn()
     cur = conn.cursor()
@@ -183,6 +247,15 @@ def db_health(authorization: Optional[str] = Header(default=None)):
     return {"status": "ok", "db": result[0]}
 class CreateApiKeyRequest(BaseModel):
     name: str
     scopes: List[str] = ["read", "write"]
@@ -305,6 +378,27 @@ def revoke_api_key(
     return {"id": row[0], "name": row[1], "status": "revoked"}
 class FileRecord(BaseModel):
     user_id: Optional[str] = None
     filename: str
@@ -314,8 +408,12 @@ class FileRecord(BaseModel):
 @app.post("/api/files")
-def create_file(record: FileRecord, authorization: Optional[str] = Header(default=None)):
-    verify_api_key(authorization, required_scope="write")
     conn = get_conn()
     cur = conn.cursor()
@@ -343,8 +441,11 @@ def create_file(record: FileRecord, authorization: Optional[str] = Header(defaul
 @app.get("/api/files")
-def list_files(authorization: Optional[str] = Header(default=None)):
-    verify_api_key(authorization, required_scope="read")
     conn = get_conn()
     cur = conn.cursor()
@@ -385,8 +486,12 @@ class ArticleRecord(BaseModel):
 @app.post("/api/rss/articles")
-def create_article(article: ArticleRecord, authorization: Optional[str] = Header(default=None)):
-    verify_api_key(authorization, required_scope="write")
     conn = get_conn()
     cur = conn.cursor()
@@ -413,8 +518,11 @@ def create_article(article: ArticleRecord, authorization: Optional[str] = Header
 @app.get("/api/rss/articles")
-def list_articles(authorization: Optional[str] = Header(default=None)):
-    verify_api_key(authorization, required_scope="read")
     conn = get_conn()
     cur = conn.cursor()

 import hashlib
 import os
 import secrets
+import subprocess
 from datetime import datetime
 from typing import List, Optional
 import psycopg2
+from fastapi import FastAPI, Header, HTTPException, Query
+from fastapi.responses import HTMLResponse
 from pydantic import BaseModel
 app = FastAPI(
     title="PostgreSQL General HF API",
     description="A lightweight PostgreSQL API service for Hugging Face Docker Spaces.",
+    version="1.1.0",
 )
 POSTGRES_USER = os.environ.get("POSTGRES_USER", "admin")
 POSTGRES_PASSWORD = os.environ.get("POSTGRES_PASSWORD")
 POSTGRES_DB = os.environ.get("POSTGRES_DB", "appdb")
+BACKUP_DIR = os.environ.get("BACKUP_DIR", "/data/backups")
 DATABASE_URL = os.environ.get(
     "DATABASE_URL",
     init_tables()
+def extract_api_key(authorization: Optional[str], api_key: Optional[str]) -> str:
+    if api_key:
+        return api_key.strip()
     if not authorization:
+        raise HTTPException(status_code=401, detail="Missing API key. Use Authorization: Bearer YOUR_KEY or ?api_key=YOUR_KEY")
     if not authorization.startswith("Bearer "):
         raise HTTPException(status_code=401, detail="Invalid Authorization format")
+    return authorization.replace("Bearer ", "", 1).strip()
+def verify_api_key(
+    authorization: Optional[str],
+    api_key: Optional[str] = None,
+    required_scope: Optional[str] = None,
+):
+    raw_key = extract_api_key(authorization, api_key)
+    key_hash = hash_key(raw_key)
     conn = get_conn()
     cur = conn.cursor()
     return {"id": key_id, "name": name, "scopes": scopes}
+DASHBOARD_HTML = r"""
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>PostgreSQL General HF</title>
+  <style>
+    :root{--bg:#070b1a;--panel:#111827;--panel2:#0d1324;--line:#25314b;--text:#e5edf9;--muted:#94a3b8;--brand:#6d5dfc;--brand2:#35d399;--danger:#ff4d6d;--code:#050816}
+    *{box-sizing:border-box} body{margin:0;background:var(--bg);color:var(--text);font-family:Inter,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}
+    .top{height:58px;display:flex;align-items:center;justify-content:space-between;border-bottom:1px solid var(--line);padding:0 22px;background:#0b1020;position:sticky;top:0;z-index:2}
+    .brand{display:flex;align-items:center;gap:12px;font-weight:800;font-size:18px}.logo{width:34px;height:34px;border-radius:7px;background:var(--brand);display:grid;place-items:center;font-weight:900}.online{font-size:12px;color:var(--brand2);background:#06281f;border:1px solid #0a6b50;padding:5px 10px;border-radius:6px}.endpoint{font-family:ui-monospace,Menlo,Consolas,monospace;color:#a5b4fc;font-size:13px}.backup{border:0;background:var(--brand);color:white;padding:10px 16px;border-radius:7px;font-weight:700;cursor:pointer}
+    .wrap{display:grid;grid-template-columns:210px 1fr;min-height:calc(100vh - 58px)}.side{border-right:1px solid var(--line);background:#080d1d;padding:18px 14px}.nav{padding:12px;border-radius:8px;color:var(--muted);margin-bottom:8px;cursor:pointer}.nav.active,.nav:hover{background:#172039;color:#a5b4fc}.main{padding:28px;max-width:1280px}.h1{font-size:26px;font-weight:900;margin:0}.sub{color:var(--muted);margin-top:8px}.card{background:var(--panel);border:1px solid var(--line);border-radius:14px;padding:20px;margin-top:24px}.row{display:flex;gap:10px;flex-wrap:wrap;align-items:center}.grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(260px,1fr));gap:14px}.input,.select{background:#0a1020;border:1px solid #33415f;color:var(--text);border-radius:8px;padding:11px 12px;outline:none}.input{min-width:260px}.btn{background:var(--brand);color:white;border:0;border-radius:8px;padding:11px 14px;font-weight:700;cursor:pointer}.btn.secondary{background:#1d2942}.btn.danger{background:transparent;color:var(--danger);border:1px solid #5a1e2a}.small{font-size:12px;color:var(--muted)}.table{width:100%;border-collapse:collapse;margin-top:12px}.table th,.table td{border-bottom:1px solid var(--line);padding:12px;text-align:left}.table th{font-size:12px;letter-spacing:.08em;text-transform:uppercase;color:var(--muted)}.code{background:var(--code);border:1px solid #1c2740;border-radius:8px;padding:12px;font-family:ui-monospace,Menlo,Consolas,monospace;overflow:auto;color:#dbeafe}.pill{display:inline-block;border:1px solid #33415f;color:#cbd5e1;border-radius:999px;padding:3px 8px;font-size:12px;margin-right:4px}.hidden{display:none}.toast{position:fixed;right:20px;bottom:20px;background:#102033;border:1px solid #2b4267;padding:14px 16px;border-radius:10px;color:white;max-width:520px;z-index:5}.modal{position:fixed;inset:0;background:rgba(0,0,0,.65);display:none;align-items:center;justify-content:center;padding:20px;z-index:4}.modal.show{display:flex}.modal-card{background:#111827;border:1px solid var(--line);border-radius:16px;max-width:920px;width:100%;padding:22px}.linkbox{display:grid;grid-template-columns:1fr auto;gap:8px;align-items:center;margin-top:8px}
+  </style>
+</head>
+<body>
+  <div class="top"><div class="brand"><div class="logo">PG</div><span>PostgreSQL General</span><span class="online">● SYSTEM ONLINE</span></div><div class="row"><span class="endpoint" id="endpoint"></span><button class="backup" onclick="runBackup()">One-Click Backup</button></div></div>
+  <div class="wrap"><aside class="side"><div class="nav active" onclick="show('dashboard')">Dashboard</div><div class="nav" onclick="show('keys')">API Keys</div><div class="nav" onclick="show('reference')">API Reference</div><div class="nav" onclick="show('settings')">Settings</div><div class="nav" onclick="location.href='/docs'">FastAPI Docs</div></aside>
+  <main class="main">
+    <section id="dashboard"><h1 class="h1">Dashboard</h1><p class="sub">Manage PostgreSQL API access without remembering curl commands.</p><div class="grid"><div class="card"><b>Status</b><div class="code" id="health">Loading...</div></div><div class="card"><b>Quick Start</b><p class="small">1. Save admin credentials in Settings. 2. Generate an API Key. 3. Copy ready-to-use API links.</p><button class="btn" onclick="show('settings')">Configure Admin</button> <button class="btn secondary" onclick="show('keys')">Generate Key</button></div></div></section>
+    <section id="keys" class="hidden"><h1 class="h1">API Integration</h1><p class="sub">Generate API Keys and ready-to-use links for external projects.</p><div class="card"><h3>Generate API Key</h3><div class="row"><input id="keyName" class="input" placeholder="Key name, e.g. rss_project"><label><input type="checkbox" id="scopeRead" checked> read</label><label><input type="checkbox" id="scopeWrite" checked> write</label><button class="btn" onclick="createKey()">Generate Key</button><button class="btn secondary" onclick="loadKeys()">Refresh</button></div><p class="small">Full API Key is shown only once. Existing keys only show prefixes.</p><table class="table"><thead><tr><th>ID</th><th>Name</th><th>Prefix</th><th>Scopes</th><th>Active</th><th>Last used</th><th>Action</th></tr></thead><tbody id="keyRows"></tbody></table></div></section>
+    <section id="reference" class="hidden"><h1 class="h1">API Reference</h1><p class="sub">Use a key as <code>?api_key=YOUR_KEY</code> for convenient links, or as <code>Authorization: Bearer YOUR_KEY</code>.</p><div class="card"><h3>Base URL</h3><div class="code" id="baseUrl"></div><h3>Common API Links</h3><div class="code" id="exampleLinks"></div></div></section>
+    <section id="settings" class="hidden"><h1 class="h1">Settings</h1><p class="sub">Credentials are stored only in this browser's localStorage for calling admin endpoints.</p><div class="card"><div class="grid"><input id="adminUser" class="input" placeholder="Admin user, default admin"><input id="adminPass" class="input" type="password" placeholder="POSTGRES_PASSWORD"></div><br><button class="btn" onclick="saveSettings()">Save Settings</button><button class="btn secondary" onclick="clearSettings()">Clear</button></div></section>
+  </main></div>
+  <div class="modal" id="modal"><div class="modal-card"><h2>API Key Generated</h2><p class="small">Copy and save this key now. It will not be shown again.</p><div class="code" id="newKey"></div><h3>Ready-to-use API links</h3><div id="newLinks"></div><br><button class="btn" onclick="copyText(document.getElementById('newKey').innerText)">Copy Key</button> <button class="btn secondary" onclick="closeModal()">Close</button></div></div>
+  <div id="toast" class="toast hidden"></div>
+<script>
+const base = location.origin;
+document.getElementById('endpoint').textContent = location.host;
+document.getElementById('baseUrl').textContent = base;
+function el(id){return document.getElementById(id)}
+function toast(msg){const t=el('toast');t.textContent=msg;t.classList.remove('hidden');setTimeout(()=>t.classList.add('hidden'),3500)}
+function show(id){document.querySelectorAll('main section').forEach(s=>s.classList.add('hidden'));el(id).classList.remove('hidden');document.querySelectorAll('.nav').forEach(n=>n.classList.remove('active'));[...document.querySelectorAll('.nav')].find(n=>n.textContent.toLowerCase().includes(id.split('-')[0]))?.classList.add('active'); if(id==='keys') loadKeys();}
+function adminHeaders(){return {'X-Admin-User': localStorage.getItem('pg_admin_user')||'admin','X-Admin-Password': localStorage.getItem('pg_admin_pass')||'', 'Content-Type':'application/json'}}
+function saveSettings(){localStorage.setItem('pg_admin_user', el('adminUser').value||'admin');localStorage.setItem('pg_admin_pass', el('adminPass').value||'');toast('Settings saved in this browser.');}
+function clearSettings(){localStorage.removeItem('pg_admin_user');localStorage.removeItem('pg_admin_pass');el('adminUser').value='admin';el('adminPass').value='';toast('Settings cleared.');}
+async function req(url, opts={}){const r=await fetch(url,opts);const text=await r.text();let data;try{data=JSON.parse(text)}catch{data=text}if(!r.ok)throw new Error(typeof data==='string'?data:(data.detail||JSON.stringify(data)));return data}
+async function loadHealth(){try{el('health').textContent=JSON.stringify(await req('/api/health'),null,2)}catch(e){el('health').textContent=e.message}}
+async function loadKeys(){try{const rows=await req('/admin/api-keys',{headers:adminHeaders()});el('keyRows').innerHTML=rows.map(k=>`<tr><td>${k.id}</td><td>${k.name}</td><td><code>${k.key_prefix}</code></td><td>${(k.scopes||[]).map(s=>`<span class="pill">${s}</span>`).join('')}</td><td>${k.is_active?'Yes':'No'}</td><td>${k.last_used_at||'Never'}</td><td>${k.is_active?`<button class="btn danger" onclick="revokeKey(${k.id})">Revoke</button>`:''}</td></tr>`).join('')||'<tr><td colspan="7" class="small">No keys yet.</td></tr>'}catch(e){toast(e.message)}}
+function linksFor(key){return [`${base}/api/db-health?api_key=${encodeURIComponent(key)}`,`${base}/api/files?api_key=${encodeURIComponent(key)}`,`${base}/api/rss/articles?api_key=${encodeURIComponent(key)}`]}
+function renderLinks(key){return linksFor(key).map(u=>`<div class="linkbox"><div class="code">${u}</div><button class="btn secondary" onclick="copyText('${u}')">Copy</button></div>`).join('')}
+async function createKey(){const name=el('keyName').value.trim();if(!name){toast('Please enter a key name.');return}const scopes=[];if(el('scopeRead').checked)scopes.push('read');if(el('scopeWrite').checked)scopes.push('write');try{const data=await req('/admin/api-keys',{method:'POST',headers:adminHeaders(),body:JSON.stringify({name,scopes})});el('newKey').textContent=data.api_key;el('newLinks').innerHTML=renderLinks(data.api_key);el('modal').classList.add('show');loadKeys();renderExample(data.api_key)}catch(e){toast(e.message)}}
+async function revokeKey(id){if(!confirm('Revoke this API Key?'))return;try{await req('/admin/api-keys/revoke',{method:'POST',headers:adminHeaders(),body:JSON.stringify({id})});toast('API Key revoked.');loadKeys()}catch(e){toast(e.message)}}
+async function runBackup(){try{const data=await req('/admin/backups/run',{method:'POST',headers:adminHeaders()});toast('Backup created: '+data.latest_file)}catch(e){toast(e.message)}}
+function copyText(txt){navigator.clipboard.writeText(txt);toast('Copied.')}function closeModal(){el('modal').classList.remove('show')}
+function renderExample(key='YOUR_API_KEY'){el('exampleLinks').textContent=linksFor(key).join('\n')+'\n\nHeader style:\ncurl "'+base+'/api/db-health" -H "Authorization: Bearer '+key+'"'}
+el('adminUser').value=localStorage.getItem('pg_admin_user')||'admin';el('adminPass').value=localStorage.getItem('pg_admin_pass')||'';renderExample();loadHealth();
+</script>
+</body></html>
+"""
+@app.get("/", response_class=HTMLResponse)
+def dashboard():
+    return HTMLResponse(DASHBOARD_HTML)
 @app.get("/api/health")
 @app.get("/api/db-health")
+def db_health(
+    authorization: Optional[str] = Header(default=None),
+    api_key: Optional[str] = Query(default=None),
+):
+    verify_api_key(authorization, api_key, required_scope="read")
     conn = get_conn()
     cur = conn.cursor()
     return {"status": "ok", "db": result[0]}
+@app.get("/api/db")
+def api_db_gateway(
+    authorization: Optional[str] = Header(default=None),
+    api_key: Optional[str] = Query(default=None),
+):
+    verify_api_key(authorization, api_key, required_scope="read")
+    return {"status": "ok", "message": "PostgreSQL API gateway is online", "docs": "/docs"}
 class CreateApiKeyRequest(BaseModel):
     name: str
     scopes: List[str] = ["read", "write"]
     return {"id": row[0], "name": row[1], "status": "revoked"}
+@app.post("/admin/backups/run")
+def run_backup(
+    x_admin_user: Optional[str] = Header(default=None),
+    x_admin_password: Optional[str] = Header(default=None),
+):
+    verify_admin(x_admin_user, x_admin_password)
+    os.makedirs(BACKUP_DIR, exist_ok=True)
+    timestamp = datetime.utcnow().strftime("%Y%m%d_%H%M%S")
+    backup_file = os.path.join(BACKUP_DIR, f"backup_{POSTGRES_DB}_{timestamp}.sql")
+    latest_file = os.path.join(BACKUP_DIR, "latest.sql")
+    env = os.environ.copy()
+    env["PGPASSWORD"] = POSTGRES_PASSWORD or ""
+    cmd = ["pg_dump", "-h", "127.0.0.1", "-p", "5432", "-U", POSTGRES_USER, "-d", POSTGRES_DB]
+    with open(backup_file, "w", encoding="utf-8") as f:
+        result = subprocess.run(cmd, stdout=f, stderr=subprocess.PIPE, text=True, env=env)
+    if result.returncode != 0:
+        raise HTTPException(status_code=500, detail=result.stderr)
+    subprocess.run(["cp", backup_file, latest_file], check=False)
+    return {"status": "ok", "backup_file": backup_file, "latest_file": latest_file}
 class FileRecord(BaseModel):
     user_id: Optional[str] = None
     filename: str
 @app.post("/api/files")
+def create_file(
+    record: FileRecord,
+    authorization: Optional[str] = Header(default=None),
+    api_key: Optional[str] = Query(default=None),
+):
+    verify_api_key(authorization, api_key, required_scope="write")
     conn = get_conn()
     cur = conn.cursor()
 @app.get("/api/files")
+def list_files(
+    authorization: Optional[str] = Header(default=None),
+    api_key: Optional[str] = Query(default=None),
+):
+    verify_api_key(authorization, api_key, required_scope="read")
     conn = get_conn()
     cur = conn.cursor()
 @app.post("/api/rss/articles")
+def create_article(
+    article: ArticleRecord,
+    authorization: Optional[str] = Header(default=None),
+    api_key: Optional[str] = Query(default=None),
+):
+    verify_api_key(authorization, api_key, required_scope="write")
     conn = get_conn()
     cur = conn.cursor()
 @app.get("/api/rss/articles")
+def list_articles(
+    authorization: Optional[str] = Header(default=None),
+    api_key: Optional[str] = Query(default=None),
+):
+    verify_api_key(authorization, api_key, required_scope="read")
     conn = get_conn()
     cur = conn.cursor()