From a4dee262bef97845524c815fc6d02e7153527a1d Mon Sep 17 00:00:00 2001
From: Jonathan Baecker <jb@pixelcrusher.de>
Date: Wed, 29 Jan 2020 17:39:57 +0100
Subject: [PATCH] functional auth

---
 ffplayout/api/views.py          |  20 ++++++++++++++++----
 ffplayout/db.sqlite3            | Bin 131072 -> 131072 bytes
 ffplayout/ffplayout/settings.py |  30 +++++++++++++++++++++++++++++-
 ffplayout/ffplayout/urls.py     |   9 +++++++--
 requirements-base.txt           |   4 ++++
 requirements.txt                |   2 +-
 6 files changed, 57 insertions(+), 8 deletions(-)
 create mode 100644 requirements-base.txt

diff --git a/ffplayout/api/views.py b/ffplayout/api/views.py
index 1915fe3a..a229005a 100644
--- a/ffplayout/api/views.py
+++ b/ffplayout/api/views.py
@@ -1,4 +1,6 @@
-# from django.shortcuts import render
+import os
+
+from django.conf import settings
 from rest_framework.views import APIView
 from rest_framework.response import Response
 
@@ -6,11 +8,21 @@ from .utils import IniParser
 
 
 class Config(APIView):
+    """
+    read and write config from ffplayout engine
+    for reading, endpoint is: http://127.0.0.1:8000/api/config/?config
+    """
+
     def get(self, request, *args, **kwargs):
         if 'config' in request.GET.dict():
-            parser = IniParser()
-            parser.read('/etc/ffplayout/ffplayout.conf')
+            if os.path.isfile(settings.FFPLAYOUT_CONFIG):
+                parser = IniParser()
+                parser.read(settings.FFPLAYOUT_CONFIG)
 
-            return Response(parser.as_dict())
+                return Response(parser.as_dict())
+            else:
+                return Response({
+                    "success": False,
+                    "error": "ffpayout engine config file not found!"})
         else:
             return Response({"success": False})
diff --git a/ffplayout/db.sqlite3 b/ffplayout/db.sqlite3
index c061a8698bda6d73bee96a061d0ec9b8e0e66d44..f76bcf4a7abebaaa057ff1349381adebc1741834 100644
GIT binary patch
delta 286
zcmZo@;Am*zm>|ulI8nx#QE_9!l6Vd#-WCSFL%b~;8!LD<nyi^veOp)^3r!63DzXcb
za}6pA(#wm?s&cE6j516z6AP<M6AjG@C%?-3r(k5DYha{nXry3hVr61vWn!jhYGGh$
zZrNnb2sUK$gL;L{ukxfAIhgpjGw|Qx-@aL}U^Tz03bQXGAq$u`->JVNF9EW`P}j&3
z$qI85BTLKX3-h;Mn9pbu05tkA1OFrb!$70A^V`ZXJ2Dy>;Bpv~EVCo0k%6Hl(9ya^
V7C;YJnVMM{S?F1so0wZ#0swvHQjY)t

delta 142
zcmZo@;Am*zm>|t4H&Mo!QEp?xl6W>ozC#Rrhc-6u;NxhrW@PnkVRfARpk86~t2`-2
zHb(wC4E%RC3pQNh-+ZV3j=Y4SrLLiouAzy7k%5(|nU#@+o~4<Ep}A@Eh56er%x5$S
h0BU)}!2bxS<p#f;EVCo0kpV=Hkp+?-a}#q*O8|*zDir_#

diff --git a/ffplayout/ffplayout/settings.py b/ffplayout/ffplayout/settings.py
index 77eca613..31cc4ff2 100644
--- a/ffplayout/ffplayout/settings.py
+++ b/ffplayout/ffplayout/settings.py
@@ -11,6 +11,7 @@ https://docs.djangoproject.com/en/3.0/ref/settings/
 """
 
 import os
+from datetime import timedelta
 
 # Build paths inside the project like this: os.path.join(BASE_DIR, ...)
 BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
@@ -25,7 +26,7 @@ SECRET_KEY = '---a-very-important-secret-key:-generate-it-new---'
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True
 
-ALLOWED_HOSTS = []
+ALLOWED_HOSTS = ['*']
 
 
 # Application definition
@@ -38,12 +39,14 @@ INSTALLED_APPS = [
     'django.contrib.messages',
     'django.contrib.staticfiles',
     'rest_framework',
+    'corsheaders',
     'api'
 ]
 
 MIDDLEWARE = [
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
+    'corsheaders.middleware.CorsMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
@@ -101,10 +104,32 @@ AUTH_PASSWORD_VALIDATORS = [
     }
 ]
 
+# REST API
 REST_FRAMEWORK = {
     'DEFAULT_AUTHENTICATION_CLASSES': [
         'rest_framework_simplejwt.authentication.JWTAuthentication',
+        'rest_framework.authentication.SessionAuthentication',
     ],
+    'DEFAULT_PERMISSION_CLASSES': (
+        'rest_framework.permissions.IsAuthenticated',
+    ),
+    'DEFAULT_PAGINATION_CLASS': (
+        'rest_framework.pagination.LimitOffsetPagination',
+    ),
+    'PAGE_SIZE': 50
+}
+
+CORS_ORIGIN_WHITELIST = (
+    'http://127.0.0.1:3000',
+    'http://127.0.0.1:8000',
+    'http://localhost:3000',
+    'http://localhost:8000'
+)
+
+# simple JWT auth settings
+SIMPLE_JWT = {
+    'ACCESS_TOKEN_LIFETIME': timedelta(minutes=5),
+    'REFRESH_TOKEN_LIFETIME': timedelta(days=7),
 }
 
 
@@ -126,3 +151,6 @@ USE_TZ = True
 # https://docs.djangoproject.com/en/3.0/howto/static-files/
 
 STATIC_URL = '/static/'
+
+# path to ffplayout engine config
+FFPLAYOUT_CONFIG = '/etc/ffplayout/ffplayout.conf'
diff --git a/ffplayout/ffplayout/urls.py b/ffplayout/ffplayout/urls.py
index 77d92710..3703a3de 100644
--- a/ffplayout/ffplayout/urls.py
+++ b/ffplayout/ffplayout/urls.py
@@ -28,7 +28,12 @@ router = routers.DefaultRouter()
 
 urlpatterns = [
     path('admin/', admin.site.urls),
+    path('api/', include(router.urls)),
     path('api/config/', views.Config.as_view()),
-    path('api/token/', TokenObtainPairView.as_view(), name='token_obtain_pair'),
-    path('api/token/refresh/', TokenRefreshView.as_view(), name='token_refresh'),
+    path('api-auth/', include(
+         'rest_framework.urls', namespace='rest_framework')),
+    path('auth/token/', TokenObtainPairView.as_view(),
+         name='token_obtain_pair'),
+    path('auth/token/refresh/', TokenRefreshView.as_view(),
+         name='token_refresh')
 ]
diff --git a/requirements-base.txt b/requirements-base.txt
new file mode 100644
index 00000000..ba98833f
--- /dev/null
+++ b/requirements-base.txt
@@ -0,0 +1,4 @@
+Django<=3.1
+django-cors-headers
+djangorestframework
+djangorestframework-simplejwt
diff --git a/requirements.txt b/requirements.txt
index c4bc54e2..6c243890 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,5 @@
 asgiref==3.2.3
-Django==3.0
+Django==3.0.2
 djangorestframework==3.11.0
 djangorestframework-simplejwt==4.4.0
 PyJWT==1.7.1