- Move `sha256_hex` and cookie constants to module level; drop `token_is_hash` param in favour of regex auto-detection - Make `_respond()` accept `status`/`headers`; add `_redirect()` helper to eliminate boilerplate in auth routes - Simplify `_dispatch()` with a `PUBLIC_ROUTES` set and positive-logic early-return - Restrict CORS header to file API; auth responses no longer send `Access-Control-Allow-Origin: *` - Extract `clearPager()` in frontend and deduplicate `copyText` fallback path
65 lines
2.0 KiB
Python
Executable File
65 lines
2.0 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
"""Share — local file sharing server (HTTPS)."""
|
|
|
|
import json
|
|
import ssl
|
|
import sys
|
|
import threading
|
|
from pathlib import Path
|
|
|
|
from cert import ensure_cert, get_local_ip
|
|
from cleanup import cleanup_loop
|
|
from config import BASE_DIR, SECS_PER_DAY, client_cfg, load_config
|
|
from server import Handler, ShareServer, sha256_hex
|
|
|
|
|
|
def main():
|
|
if len(sys.argv) > 1 and sys.argv[1] == "hash":
|
|
token = sys.argv[2] if len(sys.argv) > 2 else input("Token: ")
|
|
print(sha256_hex(token))
|
|
return
|
|
|
|
conf = load_config()
|
|
|
|
port = int(conf["port"])
|
|
upload_dir = Path(conf["dir"]).expanduser().resolve()
|
|
max_age = int(conf["ttl"]) * SECS_PER_DAY
|
|
san_list = conf["san"].split() if conf["san"] else None
|
|
|
|
upload_dir.mkdir(parents=True, exist_ok=True)
|
|
|
|
threading.Thread(target=cleanup_loop, args=(upload_dir, max_age), daemon=True).start()
|
|
|
|
ip = get_local_ip()
|
|
cfg_tag = f"<script>const CFG={json.dumps(client_cfg(conf))}</script>".encode()
|
|
html = (BASE_DIR / "static" / "index.html").read_bytes()
|
|
html = html.replace(b"<!--CFG-->", cfg_tag)
|
|
|
|
if conf["cert"] and conf["key"]:
|
|
cert, key = Path(conf["cert"]), Path(conf["key"])
|
|
else:
|
|
cert_dir = BASE_DIR / ".certs"
|
|
cert, key = ensure_cert(cert_dir, extra_ips=san_list)
|
|
ctx = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
|
|
ctx.load_cert_chain(cert, key)
|
|
|
|
token = conf["token"]
|
|
if not token:
|
|
print("\n WARNING: no token set — anyone on the network has full access.")
|
|
print(" Set `token` in share.config (see SETUP.md) or pass --token.")
|
|
server = ShareServer(("0.0.0.0", port), Handler, upload_dir=upload_dir, html=html, ssl_ctx=ctx, token=token)
|
|
|
|
print("\n Share running")
|
|
print(f" Local: https://localhost:{port}")
|
|
print(f" Network: https://{ip}:{port}")
|
|
print(f" Files: {upload_dir}\n")
|
|
try:
|
|
server.serve_forever()
|
|
except KeyboardInterrupt:
|
|
print("\n Stopped.")
|
|
server.server_close()
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|