166 lines
4.8 KiB
Python
166 lines
4.8 KiB
Python
from flask import Blueprint, request, redirect, flash
|
|
from auth import require_level
|
|
from config_utils import load_core, save_core, verify_core_hash, apply_msg
|
|
import sanitize
|
|
import validate
|
|
|
|
bp = Blueprint('action_apply_inter_vlan', __name__)
|
|
|
|
VIEW = '/view/view_inter_vlan'
|
|
|
|
_VALID_PROTOS_STR = ', '.join(sorted(validate.VALID_PROTOCOLS))
|
|
|
|
|
|
def _row_index():
|
|
try:
|
|
return int(request.form.get('row_index', ''))
|
|
except (ValueError, TypeError):
|
|
return None
|
|
|
|
|
|
def _hash_ok():
|
|
if not verify_core_hash(request.form.get('config_hash', '')):
|
|
flash('Configuration was modified by another session. Please refresh and try again.', 'error')
|
|
return False
|
|
return True
|
|
|
|
|
|
def _parse_entry():
|
|
"""Parse and validate form fields. Returns (entry_dict, None) or (None, already_flashed)."""
|
|
description = sanitize.text(request.form.get('description', ''))
|
|
protocol = request.form.get('protocol', '').strip()
|
|
src_raw = request.form.get('src_ip_or_subnet', '').strip()
|
|
dst_raw = request.form.get('dst_ip_or_subnet', '').strip()
|
|
dst_port_raw = request.form.get('dst_port', '').strip()
|
|
|
|
if protocol not in validate.VALID_PROTOCOLS:
|
|
flash(f'The configuration has not been saved because "{protocol}" is not a valid protocol. '
|
|
f'Accepted values: {_VALID_PROTOS_STR}.', 'error')
|
|
return None, True
|
|
|
|
if not src_raw:
|
|
flash('The configuration has not been saved because a source IP or subnet is required.', 'error')
|
|
return None, True
|
|
src = validate.ip_or_cidr(src_raw)
|
|
if not src:
|
|
flash(f'The configuration has not been saved because "{src_raw}" is not a valid IP address or subnet.', 'error')
|
|
return None, True
|
|
|
|
if not dst_raw:
|
|
flash('The configuration has not been saved because a destination IP or subnet is required.', 'error')
|
|
return None, True
|
|
dst = validate.ip_or_cidr(dst_raw)
|
|
if not dst:
|
|
flash(f'The configuration has not been saved because "{dst_raw}" is not a valid IP address or subnet.', 'error')
|
|
return None, True
|
|
|
|
dst_port = ''
|
|
if dst_port_raw:
|
|
dst_port = validate.port(dst_port_raw)
|
|
if not dst_port:
|
|
flash(f'The configuration has not been saved because "{dst_port_raw}" is not a valid port number (1-65535).', 'error')
|
|
return None, True
|
|
|
|
return {
|
|
'description': description,
|
|
'protocol': protocol,
|
|
'src_ip_or_subnet': src,
|
|
'dst_ip_or_subnet': dst,
|
|
'dst_port': dst_port,
|
|
'enabled': True,
|
|
}, None
|
|
|
|
|
|
@bp.route('/action/add_inter_vlan', methods=['POST'])
|
|
@require_level('administrator')
|
|
def add_inter_vlan():
|
|
entry, err = _parse_entry()
|
|
if err:
|
|
return redirect(VIEW)
|
|
|
|
if not _hash_ok():
|
|
return redirect(VIEW)
|
|
|
|
core = load_core()
|
|
core.setdefault('inter_vlan_exceptions', []).append(entry)
|
|
save_core(core)
|
|
|
|
flash(apply_msg(), 'success')
|
|
return redirect(VIEW)
|
|
|
|
|
|
@bp.route('/action/toggle_inter_vlan', methods=['POST'])
|
|
@require_level('administrator')
|
|
def toggle_inter_vlan():
|
|
idx = _row_index()
|
|
if idx is None:
|
|
flash('Invalid request.', 'error')
|
|
return redirect(VIEW)
|
|
|
|
if not _hash_ok():
|
|
return redirect(VIEW)
|
|
|
|
core = load_core()
|
|
items = core.get('inter_vlan_exceptions', [])
|
|
if idx < 0 or idx >= len(items):
|
|
flash('Entry not found.', 'error')
|
|
return redirect(VIEW)
|
|
|
|
items[idx]['enabled'] = not items[idx].get('enabled', True)
|
|
save_core(core)
|
|
|
|
flash(apply_msg(), 'success')
|
|
return redirect(VIEW)
|
|
|
|
|
|
@bp.route('/action/edit_inter_vlan', methods=['POST'])
|
|
@require_level('administrator')
|
|
def edit_inter_vlan():
|
|
idx = _row_index()
|
|
if idx is None:
|
|
flash('Invalid request.', 'error')
|
|
return redirect(VIEW)
|
|
|
|
entry, err = _parse_entry()
|
|
if err:
|
|
return redirect(VIEW)
|
|
|
|
if not _hash_ok():
|
|
return redirect(VIEW)
|
|
|
|
core = load_core()
|
|
items = core.get('inter_vlan_exceptions', [])
|
|
if idx < 0 or idx >= len(items):
|
|
flash('Entry not found.', 'error')
|
|
return redirect(VIEW)
|
|
|
|
items[idx] = entry
|
|
items[idx]['enabled'] = request.form.get('enabled') == 'on'
|
|
save_core(core)
|
|
|
|
flash(apply_msg(), 'success')
|
|
return redirect(VIEW)
|
|
|
|
|
|
@bp.route('/action/delete_inter_vlan', methods=['POST'])
|
|
@require_level('administrator')
|
|
def delete_inter_vlan():
|
|
idx = _row_index()
|
|
if idx is None:
|
|
flash('Invalid request.', 'error')
|
|
return redirect(VIEW)
|
|
|
|
if not _hash_ok():
|
|
return redirect(VIEW)
|
|
|
|
core = load_core()
|
|
items = core.get('inter_vlan_exceptions', [])
|
|
if idx < 0 or idx >= len(items):
|
|
flash('Entry not found.', 'error')
|
|
return redirect(VIEW)
|
|
|
|
items.pop(idx)
|
|
save_core(core)
|
|
|
|
flash(apply_msg(), 'success')
|
|
return redirect(VIEW)
|