web_sandbox_console 0.1.0 → 0.6.0

data/app/assets/stylesheets/web_sandbox_console/home.css

@@ -2,3 +2,50 @@
   Place all the styles related to the matching controller here.
   They will automatically be included in application.css.
 */
+
+
+.file_or_dir{
+  width: 450px;
+  height: 30px;
+}
+
+.h30{
+  height: 30px;
+}
+
+.view-file-button{
+  background: #272822;
+  height: 36px;
+  width: 132px;
+  font-size: 15px;
+  color: white;
+  cursor: pointer;
+}
+
+/* 执行代码页面样式 */
+.wrapper-console {
+  position: relative;
+  top: 8px;
+  width: 100%;
+  height: 300px;
+ }
+
+.left {
+  height: 100%;
+  /* 为了不占用绝对定位的宽度 这里计算下宽度*/
+  width: calc(100% - 200px);
+}
+
+.right {
+  position: absolute;
+  width: 180px;
+  top: 0;
+  bottom: 0;
+  right: 0;
+  padding-left: 15px;
+}
+
+/* 选中后code背景色*/
+.CodeMirror-selected {
+  background: #20aee3 !important;
+}

data/app/assets/stylesheets/web_sandbox_console/lucario.css

@@ -0,0 +1,45 @@
+/*
+  Name:       lucario
+  Author:     Raphael Amorim
+
+  Original Lucario color scheme (https://github.com/raphamorim/lucario)
+*/
+
+.cm-s-lucario.CodeMirror, .cm-s-lucario .CodeMirror-gutters {
+  background-color: #2b3e50 !important;
+  color: #f8f8f2 !important;
+  border: none;
+}
+.cm-s-lucario .CodeMirror-gutters { color: #2b3e50; }
+.cm-s-lucario .CodeMirror-cursor { border-left: solid thin #E6C845; }
+.cm-s-lucario .CodeMirror-linenumber { color: #f8f8f2; }
+.cm-s-lucario .CodeMirror-selected { background: #243443; }
+.cm-s-lucario .CodeMirror-line::selection, .cm-s-lucario .CodeMirror-line > span::selection, .cm-s-lucario .CodeMirror-line > span > span::selection { background: #243443; }
+.cm-s-lucario .CodeMirror-line::-moz-selection, .cm-s-lucario .CodeMirror-line > span::-moz-selection, .cm-s-lucario .CodeMirror-line > span > span::-moz-selection { background: #243443; }
+.cm-s-lucario span.cm-comment { color: #5c98cd; }
+.cm-s-lucario span.cm-string, .cm-s-lucario span.cm-string-2 { color: #E6DB74; }
+.cm-s-lucario span.cm-number { color: #ca94ff; }
+.cm-s-lucario span.cm-variable { color: #f8f8f2; }
+.cm-s-lucario span.cm-variable-2 { color: #f8f8f2; }
+.cm-s-lucario span.cm-def { color: #72C05D; }
+.cm-s-lucario span.cm-operator { color: #66D9EF; }
+.cm-s-lucario span.cm-keyword { color: #ff6541; }
+.cm-s-lucario span.cm-atom { color: #bd93f9; }
+.cm-s-lucario span.cm-meta { color: #f8f8f2; }
+.cm-s-lucario span.cm-tag { color: #ff6541; }
+.cm-s-lucario span.cm-attribute { color: #66D9EF; }
+.cm-s-lucario span.cm-qualifier { color: #72C05D; }
+.cm-s-lucario span.cm-property { color: #f8f8f2; }
+.cm-s-lucario span.cm-builtin { color: #72C05D; }
+.cm-s-lucario span.cm-variable-3, .cm-s-lucario span.cm-type { color: #ffb86c; }
+
+.cm-s-lucario .CodeMirror-activeline-background { background: #243443; }
+.cm-s-lucario .CodeMirror-matchingbracket { text-decoration: underline; color: white !important; }
+
+
+/* 特殊部分 补充 */
+.CodeMirror {border-top: 1px solid black; border-bottom: 1px solid black;}
+.cm-s-default span.cm-arrow { color: red; }
+
+
+

data/app/controllers/web_sandbox_console/application_controller.rb

@@ -1,6 +1,10 @@
 module WebSandboxConsole
   class ApplicationController < ActionController::Base
     protect_from_forgery with: :exception
+    
+    before_action :restrict_ip
+    http_basic_authenticate_with name: WebSandboxConsole.http_basic_auth[:name].to_s, password: WebSandboxConsole.http_basic_auth[:password].to_s if WebSandboxConsole.http_basic_auth.present?
+
 
     # 限制ip
     def restrict_ip

data/app/controllers/web_sandbox_console/authorization_controller.rb

@@ -0,0 +1,82 @@
+require_dependency "web_sandbox_console/application_controller"
+
+module WebSandboxConsole
+  class AuthorizationController < ApplicationController
+    before_action :restrict_fetch_token_times, only: :fetch_token
+
+    # 获取令牌
+    def fetch_token
+      @token = SecureRandom.uuid
+      save_cache_token(@token)
+      flash[:notice] = "令牌: #{@token}，此令牌先保存，后续使用。"
+      redirect_to auth_page_path
+    end
+
+    # 授权
+    def auth
+      if params[:secret_text].blank?
+        flash[:notice] = '密文为空'
+        return redirect_to root_path
+      end
+
+      if public_key.blank?
+        flash[:notice] = '公钥未配置'
+        return redirect_to root_path
+      end
+
+      result_hash = decrypt_secret_text(params[:secret_text])
+      token       = result_hash[:content]
+      if result_hash[:success] && fetch_cache_token(token)
+        flash[:notice] = "授权成功"
+        session[:pass_auth] = true
+      else
+        flash[:notice] = "授权失败：#{result_hash[:content]}"
+      end
+
+      redirect_to root_path
+    end
+
+    private
+      # 限制获取token次数 一天内不允许超过20次
+      def restrict_fetch_token_times
+        cache = Rails.cache
+        times = cache.fetch('fetch_token_times', expires_in: 1.day) {0}
+        
+        if times > 20
+          flash[:notice] = '一天内获取令牌不允许超过20次'
+          redirect_to root_path
+        end
+        cache.write('fetch_token_times', times + 1)
+      end
+
+      # 保存token 到缓存
+      def save_cache_token(key, value = nil)
+        Rails.cache.write(key.to_s, value.presence || key.to_s, expires_in: 5.minutes)
+      end
+
+      # 获取 缓存中 token
+      def fetch_cache_token(key)
+        Rails.cache.read(key.to_s)
+      end
+
+      # 公钥
+      def public_key
+        WebSandboxConsole.public_key
+      end
+
+      # 解密
+      def decrypt_secret_text(secret_text)
+        begin
+          base_text = Base64.decode64(secret_text)
+          p_key = OpenSSL::PKey::RSA.new public_key
+          text = p_key.public_decrypt(base_text)
+          {success: true, content: text}
+        rescue OpenSSL::PKey::RSAError
+          {success: false, content: "密钥匹配失败"}
+        rescue Exception => e
+          {success: false, content: "发生未知错误: #{e.inspect};#{e.backtrace[0..2].join('\r\n')}"}
+        end
+      end
+
+  end
+end

data/app/controllers/web_sandbox_console/home_controller.rb

@@ -2,14 +2,54 @@ require_dependency "web_sandbox_console/application_controller"
 
 module WebSandboxConsole
   class HomeController < ApplicationController
-    before_action :restrict_ip
-    http_basic_authenticate_with name: WebSandboxConsole.http_basic_auth[:name], password: WebSandboxConsole.http_basic_auth[:password] if WebSandboxConsole.http_basic_auth.present?
-
+    
     def index
     end
 
+    # 执行代码
     def eval_code
-      @results = Sandbox.new(params[:code]).evalotor
+      sandbox = Sandbox.new(params[:code], session[:pass_auth])
+
+      @results = if params[:commit] == '异步执行'
+        sandbox.asyn_evalotor
+      else
+        sandbox.evalotor
+      end
+    end
+
+    def view_file
+    end
+
+    # 查看文件
+    def do_view_file
+      @result_hash = ViewFile.new(params).view
+      @tip_hash    = WebSandboxConsole::ViewFile::PageTips
+    end
+
+    # 下载文件页面
+    def download_page
     end
+
+    # 下载文件
+    def download
+      if params[:file_name].blank?
+        flash[:notice] = "文件名不能为空"
+        return redirect_to download_page_path
+      end
+
+      file_full_path = "#{Rails.root}/log/#{params[:file_name]}"
+      unless File.exists?(file_full_path)
+        flash[:notice] = '文件不存在，请检查文件名；或在其它服务器请多次尝试'
+        return redirect_to download_page_path
+      end
+
+      # 打包
+      `tar czf #{file_full_path}.tar.gz #{file_full_path}`
+      # 如果是csv文件，需删除
+      File.delete(file_full_path) if file_full_path.split(".").last == 'csv'
+
+      send_file "#{file_full_path}.tar.gz"
+    end
+
   end
 end

data/app/views/layouts/web_sandbox_console/application.html.erb

@@ -1,14 +1,85 @@
 <!DOCTYPE html>
 <html>
-<head>
-  <title>Web sandbox console</title>
-  <%= stylesheet_link_tag    "web_sandbox_console/application", media: "all" %>
-  <%= javascript_include_tag "web_sandbox_console/application" %>
-  <%= csrf_meta_tags %>
-</head>
-<body>
-  <div class="container">
-    <%= yield %>
-  </div>
-</body>
+  <head>
+    <title>Web sandbox console</title>
+    <%= stylesheet_link_tag    "web_sandbox_console/application", media: "all" %>
+    <%= javascript_include_tag "web_sandbox_console/application" %>
+    <%= csrf_meta_tags %>
+  </head>
+  <body>
+    <div id="main-wrapper">
+      <header class="topbar">
+        <nav class="navbar top-navbar">
+          <div class="navbar-header">
+            <a class="navbar-brand" href="/web_sandbox_console">
+              <b>
+                <img src="/assets/web_sandbox_console/logo-icon.png" />
+              </b>
+              <span style="left-padding: 10px;" class="font-color">运维控制台</span>
+           </a>
+          </div>
+
+          <div class="navbar-collapse">
+          </div>
+        </nav>
+      </header>
+
+      <aside class="left-sidebar">
+        <div class="scroll-sidebar ps">
+          <nav class="sidebar-nav">
+            <ul id="sidebar-nav">
+              <li>
+                <%= link_to root_path, class: 'waves-effect waves-dark' do %>
+                  <i class="fa fa-bookmark-o"></i>
+                  <span class="hide-menu <%= action_name == 'index' ? 'menu-active' : '' %>">执行代码</span>
+                <% end %>
+              </li>
+
+              <li>
+                <%= link_to web_sandbox_console.view_file_path, class: 'waves-effect waves-dark' do %>
+                  <i class="fa fa-bookmark-o"></i>
+                  <span class="hide-menu <%= action_name == 'view_file' ? 'menu-active' : '' %>">查看文件</span>
+                <% end %>
+              </li>
+
+              <li>
+                <%= link_to web_sandbox_console.download_page_path, class: 'waves-effect waves-dark' do %>
+                  <i class="fa fa-bookmark-o"></i>
+                  <span class="hide-menu <%= action_name == 'download_page' ? 'menu-active' : '' %>">下载文件</span>
+                <% end %>
+              </li>
+
+              <li>
+                <%= link_to web_sandbox_console.auth_page_path, class: 'waves-effect waves-dark' do %>
+                  <i class="fa fa-bookmark-o"></i>
+                  <span class="hide-menu <%= action_name == 'auth_page' ? 'menu-active' : '' %>">升级授权</span>
+                <% end %>
+              </li>
+
+              <li>
+                <%= link_to "https://github.com/dongmy54/web_sandbox_console", target: "_blank", class: 'waves-effect waves-dark' do %>
+                  <i class="fa fa-bookmark-o"></i>
+                  <span class="hide-menu">说明文档</span>
+                <% end %>
+              </li>
+            </ul>
+          </nav>
+
+        </div>
+      </aside>
+
+      <div class="page-wrapper">
+        <div class="container-fluid">
+          <%= yield %>
+        </div>
+      </div>
+    </div>
+  </body>
 </html>
+
+<script type="text/javascript">
+  <% flash.each do |type, msg| %>
+    <% tip = type == 'notice' ? '提示' : '其它' %>
+    alert("<%= tip %>: <%= msg %>");
+  <% end %>
+</script>

data/app/views/web_sandbox_console/authorization/auth_page.html.erb

@@ -0,0 +1,33 @@
+<h3>升级授权</h3>
+
+<p>
+  <%= link_to '获取令牌', fetch_token_path %>
+  <span> PS: 注意获取令牌一天最多20次,有效期仅5分钟</span>
+</p>
+
+<div class="">
+  <%= form_tag web_sandbox_console.auth_path, method: :post do %>
+    <table>
+      <tr>
+        <td>加密密文</td>
+        <td>
+          <%= text_area_tag :secret_text, '', style: "width: 300px;height: 100px;" %>
+        </td>
+        <td><%= submit_tag '提交', data: { disable_with: "已发送，处理中..." }, class: 'view-file-button' %></td>
+    </table>
+  <% end %>
+</div>
+
+<h4>说明令牌使用说明：</h4>
+<div>
+  <pre class="no-border">
+    require 'openssl'
+    require 'base64'
+
+    private_key = "你的私钥"
+    p_key = OpenSSL::PKey::RSA.new private_key
+    secret_text = p_key.private_encrypt("你的令牌")
+    encode_text = Base64.encode64(secret_text)
+    puts encode_text
+  </pre>
+</div>

data/app/views/web_sandbox_console/home/do_view_file.js.erb

@@ -0,0 +1,14 @@
+$(".output-content").empty();
+
+<% line_num_show = @result_hash[:total_line_num] ? "原始文件总行数：#{@result_hash[:total_line_num]}" : "" %>
+$(".output-content").append("<p>============ <%= Time.current %> 查找结果如下 <%= line_num_show %> ===============</p>");
+
+<% @tip_hash.each do |key,value| %>
+  <% if @result_hash[key.to_sym] %>
+    $(".output-content").append("<p>PS: <%= value %></p>");
+  <% end %>
+<% end %>
+
+<% @result_hash[:lines].each do |result| %>
+  $(".output-content").append('<pre><%= escape_javascript result %></pre>');
+<% end %>

data/app/views/web_sandbox_console/home/download_page.html.erb

@@ -0,0 +1,22 @@
+<h3>下载文件</h3>
+<div class="">
+  <%= form_tag web_sandbox_console.download_path, method: :get do %>
+    <table>
+      <tr>
+        <td>文件名</td>
+        <td>
+          <%= text_field_tag :file_name, '', style: "width: 400px;height: 35px;font-size: 15px;" %>
+        </td>
+        <td><%= submit_tag '提交', data: { disable_with: "已发送，处理中..." }, class: 'view-file-button' %></td>
+    </table>
+  <% end %>
+</div>
+
+<h4>说明：</h4>
+<div>
+  <pre class="no-border">
+    1. 只可下载log目录下文件
+    2. 下载时文件名需要带上后缀如：production.log
+    3. csv文件下载后会被删除，不能重复下载
+  </pre>
+</div>

data/app/views/web_sandbox_console/home/eval_code.js.erb

@@ -1,4 +1,4 @@
-$(".output-content").append('<p>============ 本次输出如下（仅代表最后行输出）===============</p>');
+$(".output-content").append("<p>============ <%= Time.current %> 本次输出如下 ===============</p>");
 <% @results.each do |result| %>
   $(".output-content").append('<p><%= escape_javascript result %></p>');
 <% end %>

data/app/views/web_sandbox_console/home/index.html.erb

@@ -1,15 +1,42 @@
-控制台 index
+<h3>执行代码</h3>
 
-<div class="console">
+<div class="wrapper-console">
   <%= form_tag(web_sandbox_console.eval_code_path, remote: true, class: 'form')  do %>
-    <%= text_area_tag :code, '', class: 'text_area_box'%>
-    <input type="reset" value="重置" class='reset-button'>
-    <%= submit_tag '提交', data: { disable_with: "已发送，处理中..." }, class: 'send-button' %>
+    <div class= "left">
+      <%= text_area_tag :code, '# 这里输入ruby代码...', class: 'text_area_box'%>
+    </div>
+    
+    <div class="right">
+      <div style="position: absolute;bottom: 0;">
+        <% if session[:pass_auth] %>
+          <p class="tip">授权成功</p>
+          <p class="tip">(当前修改将写入数据库)</p>
+        <% end %>
+        <%= submit_tag '提交', data: { disable_with: "已发送，处理中..." }, class: 'send-button margin-t-10' %>
+        <%= submit_tag '异步执行', data: { disable_with: "已发送，处理中..." }, class: 'send-button margin-t-10' %>
+      </div>
+    </div>
   <% end %>
-
 </div>
 
-<%= button_tag '清除输出', type: 'button', onclick: "$('.output-content').empty();", class: 'clear-button' %>
+<div style="margin-top: 50px;">
+    <%= button_tag '清除输出', type: 'button', onclick: "$('.output-content').empty();", class: 'clear-button' %>
+<div>
 
 <div class="output-content">
 </div>
+
+
+<script>
+  var editor = CodeMirror.fromTextArea(document.getElementById("code"), {
+    mode: "text/x-ruby",
+    matchBrackets: true,
+    indentUnit: 2,
+    indentWithTabs: true,
+    theme: 'lucario',
+    tabSize: 2,
+    lineNumbers: true,
+    lineWrapping: true, /* 自动换行 */
+    fixedGutter: false
+  });
+</script>