iatoolkit 0.22.1__py3-none-any.whl → 0.50.2__py3-none-any.whl

iatoolkit/common/auth.py

@@ -1,200 +0,0 @@
-# Copyright (c) 2024 Fernando Libedinsky
-# Product: IAToolkit
-#
-# IAToolkit is open source software.
-
-from flask import redirect, url_for
-from iatoolkit.common.session_manager import SessionManager
-from datetime import datetime, timezone
-from injector import inject
-from iatoolkit.repositories.profile_repo import ProfileRepo
-from iatoolkit.services.jwt_service import JWTService
-import logging
-from flask import request
-from typing import Optional
-
-MAX_INACTIVITY_SECONDS = 60*30
-
-class IAuthentication:
-    @inject
-
-    def __init__(self,
-                 profile_repo: ProfileRepo,
-                 jwt_service: JWTService):
-        self.profile_repo = profile_repo
-        self.jwt_service = jwt_service
-
-    def verify(self, company_short_name: str, body_external_user_id: str = None) -> dict:
-        # authentication is in this orden: JWT, API Key, Sesión
-        local_user_id = None
-        company_id = None
-        auth_method = None
-        external_user_id = None  # for JWT or API Key
-        
-        # 1. try auth via JWT
-        jwt_company_id, jwt_external_user_id, jwt_error_info = self._authenticate_via_chat_jwt(company_short_name)
-
-        if jwt_company_id is not None and jwt_external_user_id is not None:
-            auth_method = "JWT"
-            company_id = jwt_company_id
-            external_user_id = jwt_external_user_id
-            local_user_id = 0
-        elif jwt_error_info is not None:
-            # explicit error in JWT (inválido, expirado, etc.)
-            logging.warning(f"Fallo de autenticación JWT: {jwt_error_info}")
-            return {"error_message": "Fallo de autenticación JWT"} 
-        else:
-            # 2. JWT not apply, try by API Key
-            api_key_company_id, api_key_error_info = self._authenticate_via_api_key(company_short_name)
-
-            if api_key_company_id is not None:
-                auth_method = "API Key"
-                company_id = api_key_company_id
-                external_user_id = body_external_user_id  # API Key usa external_user_id del body
-                local_user_id = 0
-            elif api_key_error_info is not None:
-                # explicit error in API Key (inválida, incorrecta, error interno)
-                logging.warning(f"Fallo de autenticación API Key: {api_key_error_info}")
-                return {"error_message": api_key_error_info}
-            else:
-                # 3. no JWT and API Key auth, try by Session
-                self.check_if_user_is_logged_in(company_short_name)  # raise exception or redirect if not logged in
-
-                # In case not logged in check_if_user_is_logged_in redirects to login page
-                auth_method = "Session"
-                local_user_id = SessionManager.get('user_id')
-                company_id = SessionManager.get('company_id')
-                external_user_id = ""
-
-                if not company_id or not local_user_id:
-                    logging.error(
-                        f"Sesión válida para {company_short_name} pero falta company_id o user_id en SessionManager.")
-                    return {"error_message": "Fallo interno en la autenticación o no autenticado"}
-
-        # last verification of authentication
-        if company_id is None or auth_method is None or local_user_id is None:
-            # this condition should never happen,
-            logging.error(
-                f"Fallo inesperado en la lógica de autenticación para {company_short_name}. Ningún método tuvo éxito o devolvió error.")
-            return {"error_message": "Fallo interno en la autenticación o no autenticado"}
-
-        return {
-            'success': True,
-            "auth_method": auth_method,
-            "company_id": company_id,
-            "auth_method": auth_method,
-            "local_user_id": local_user_id,
-            "external_user_id": external_user_id
-        }
-
-    def _authenticate_via_api_key(self, company_short_name_from_url: str):
-        """
-        try to authenticate using an API Key from the header 'Authorization'.
-        Retorna (company_id, None) en éxito.
-        Retorna (None, error_message) en fallo.
-        """
-        api_key_header = request.headers.get('Authorization')
-        api_key_value = None
-
-        # extract the key
-        if api_key_header and api_key_header.startswith('Bearer '):
-            api_key_value = api_key_header.split('Bearer ')[1]
-        else:
-            # there is no key in the headers expected
-            return None, None
-
-        # validate the api-key using ProfileRepo
-        try:
-            api_key_entry = self.profile_repo.get_active_api_key_entry(api_key_value)
-            if not api_key_entry:
-                logging.warning(f"Intento de acceso con API Key inválida o inactiva: {api_key_value[:5]}...")
-                return None, "API Key inválida o inactiva"
-
-            # check that the key belongs to the company
-            # api_key_entry.company already loaded by joinedload
-            if not api_key_entry.company or api_key_entry.company.short_name != company_short_name_from_url:
-                return None, f"API Key no es válida para la compañía {company_short_name_from_url}"
-
-            # successfull auth by API Key
-            company_id = api_key_entry.company_id
-
-            return company_id, None
-
-        except Exception as e:
-            logging.exception(f"Error interno durante validación de API Key: {e}")
-            return None, "Error interno del servidor al validar API Key"
-
-    def _authenticate_via_chat_jwt(self, company_short_name_from_url: str) -> tuple[
-        Optional[int], Optional[str], Optional[str]]:
-        """
-        authenticate using an JWT chat session in the del header 'X-Chat-Token'.
-        Return (company_id, external_user_id, None) on exit
-        Returns (None, None, error_message) on fail.
-        """
-        chat_jwt = request.headers.get('X-Chat-Token')
-        if not chat_jwt:
-            return None, None, None
-
-        # open the jwt token and retrieve the payload
-        jwt_payload = self.jwt_service.validate_chat_jwt(chat_jwt, company_short_name_from_url)
-        if not jwt_payload:
-            # validation fails (token expired, incorrect signature, company , etc.)
-            # validate_chat_jwt logs the specific failure
-            return None, None, "Token de chat expirado, debes reingresar al chat"
-
-        # JWT is validated: extract the company_id and external_user_id
-        company_id = jwt_payload.get('company_id')
-        external_user_id = jwt_payload.get('external_user_id')
-
-        # Sanity check aditional, should never happen
-        if not isinstance(company_id, int) or not external_user_id:
-            logging.error(
-                f"LLMQuery: JWT payload incompleto tras validación exitosa. CompanyID: {company_id}, UserID: {external_user_id}")
-            return None, None, "Token de chat con formato interno incorrecto"
-
-        return company_id, external_user_id, None
-
-    def check_if_user_is_logged_in(self, company_short_name: str):
-        if not SessionManager.get('user'):
-            if company_short_name:
-                return redirect(url_for('login', company_short_name=company_short_name))
-            else:
-                return redirect(url_for('home'))
-
-        if company_short_name != SessionManager.get('company_short_name'):
-            return redirect(url_for('login', company_short_name=company_short_name))
-
-        # check session timeout
-        if not self.check_session_timeout():
-            SessionManager.clear()
-            return redirect(url_for('login', company_short_name=company_short_name))
-
-        # update last_activity
-        SessionManager.set('last_activity', datetime.now(timezone.utc).timestamp())
-
-    def check_session_timeout(self):
-        # get last activity from session manager
-        last_activity = SessionManager.get('last_activity')
-        if not last_activity:
-            return False
-
-        # Tiempo actual en timestamp
-        current_time = datetime.now(timezone.utc).timestamp()
-
-        # get inactivity duration
-        inactivity_duration = current_time - last_activity
-
-        # verify if inactivity duration is greater than MAX_INACTIVITY_SECONDS
-        if inactivity_duration > MAX_INACTIVITY_SECONDS:
-            # close session
-            return False
-
-        # update last activity timestamp
-        SessionManager.set('last_activity', current_time)
-
-        return True  # session is active
-
-
-
-
-

iatoolkit/templates/login.html

@@ -1,43 +0,0 @@
-{% extends "base.html" %}
-
-{% block title %}Inicio de Sesión{% endblock %}
-
-{% block content %}
-<div class="container d-flex justify-content-center align-items-center vh-100">
-    <div class="col-11 col-md-6 col-lg-4 border rounded p-3 shadow-sm">
-        <h4 class="text-muted fw-semibold text-start mb-3">Iniciar Sesión - {{ company.name }}
-</h4>
-        <form action="{{ url_for('login', company_short_name=company_short_name) }}"
-                method="post">
-            <div class="mb-3">
-                <label for="email" class="form-label text-muted">Correo Electrónico</label>
-                <input type="email" id="email" name="email"
-                       class="form-control" required
-                       value="{{ form_data.email if form_data else '' }}">
-            </div>
-            <div class="mb-3">
-                <label for="password" class="form-label">Contraseña</label>
-                <input type="password" id="password" name="password"
-                       class="form-control" required
-                       value="{{ form_data.password if form_data else '' }}">
-            </div>
-            <button type="submit" class="btn btn-primary w-100">Iniciar Sesión</button>
-
-            <p class="text-muted text-start mt-3" style="text-align: justify;">
-                Ingresa tus credenciales para acceder a tu cuenta. Si olvidaste tu contraseña,
-                puedes recuperarla fácilmente a través del siguiente enlace.
-            </p>
-            <div class="text-center mt-3">
-                <a href="{{ url_for('signup', company_short_name=company_short_name) }}">
-                    ¿No tienes cuenta? Regístrate
-                </a>
-            </div>
-            <div class="text-center mt-3">
-                <a href="{{ url_for('forgot_password', company_short_name=company_short_name) }}">
-                    ¿Olvidaste tu contraseña?
-                </a>
-            </div>
-        </form>
-    </div>
-</div>
-{% endblock %}

iatoolkit/views/download_file_view.py

@@ -1,58 +0,0 @@
-# Copyright (c) 2024 Fernando Libedinsky
-# Product: IAToolkit
-#
-# IAToolkit is open source software.
-
-import logging
-import os
-
-from flask import current_app, jsonify, send_from_directory
-from flask.views import MethodView
-from injector import inject
-
-from iatoolkit.common.auth import IAuthentication
-from iatoolkit.services.excel_service import ExcelService
-from iatoolkit.services.profile_service import ProfileService
-
-
-class DownloadFileView(MethodView):
-    @inject
-    def __init__(self, iauthentication: IAuthentication, profile_service: ProfileService, excel_service: ExcelService):
-        self.iauthentication = iauthentication
-        self.profile_service = profile_service
-        self.excel_service = excel_service
-
-    def get(self, company_short_name: str, external_user_id: str, filename: str):
-        if not external_user_id:
-            return jsonify({"error": "Falta external_user_id"}), 400
-
-        iauth = self.iauthentication.verify(
-            company_short_name,
-            body_external_user_id=external_user_id
-        )
-        if not iauth.get("success"):
-            return jsonify(iauth), 401
-
-        company = self.profile_service.get_company_by_short_name(company_short_name)
-        if not company:
-            return jsonify({"error": "Empresa no encontrada"}), 404
-
-        file_validation = self.excel_service.validate_file_access(filename)
-        if file_validation:
-            return file_validation
-
-        temp_dir = os.path.join(current_app.root_path, 'static', 'temp')
-
-        try:
-            response = send_from_directory(
-                temp_dir,
-                filename,
-                as_attachment=True,
-                mimetype='application/octet-stream'
-            )
-            logging.info(f"Archivo descargado via API: {filename}")
-            return response
-        except Exception as e:
-            logging.error(f"Error descargando archivo {filename}: {str(e)}")
-            return jsonify({"error": "Error descargando archivo"}), 500
-

iatoolkit/views/history_view.py

@@ -1,57 +0,0 @@
-# Copyright (c) 2024 Fernando Libedinsky
-# Product: IAToolkit
-#
-# IAToolkit is open source software.
-
-from flask import request, jsonify, render_template
-from flask.views import MethodView
-from iatoolkit.services.history_service import HistoryService
-from iatoolkit.common.auth import IAuthentication
-from injector import inject
-import logging
-
-
-class HistoryView(MethodView):
-    @inject
-    def __init__(self,
-                 iauthentication: IAuthentication,
-                 history_service: HistoryService ):
-        self.iauthentication = iauthentication
-        self.history_service = history_service
-
-    def post(self, company_short_name):
-        try:
-            data = request.get_json()
-        except Exception:
-            return jsonify({"error_message": "Cuerpo de la solicitud JSON inválido o faltante"}), 400
-
-        if not data:
-            return jsonify({"error_message": "Cuerpo de la solicitud JSON inválido o faltante"}), 400
-
-        # get access credentials
-        iaut = self.iauthentication.verify(company_short_name, data.get("external_user_id"))
-        if not iaut.get("success"):
-            return jsonify(iaut), 401
-
-        external_user_id = data.get("external_user_id")
-        local_user_id = iaut.get("local_user_id", 0)
-
-        try:
-            response = self.history_service.get_history(
-                company_short_name=company_short_name,
-                external_user_id=external_user_id,
-                local_user_id=local_user_id
-            )
-
-            if "error" in response:
-                return {'error_message': response["error"]}, 402
-
-            return response, 200
-        except Exception as e:
-            logging.exception(
-                f"Error inesperado al obtener el historial de consultas para company {company_short_name}: {e}")
-            if local_user_id:
-                return render_template("error.html",
-                                       message="Ha ocurrido un error inesperado."), 500
-            else:
-                return jsonify({"error_message": str(e)}), 500

iatoolkit/views/init_context_view.py

@@ -1,35 +0,0 @@
-from flask.views import MethodView
-from injector import inject
-from iatoolkit.common.auth import IAuthentication
-from iatoolkit.services.query_service import QueryService
-from flask import jsonify
-import logging
-
-class InitContextView(MethodView):
-
-    @inject
-    def __init__(self,
-                 iauthentication: IAuthentication,
-                 query_service: QueryService
-                 ):
-        self.iauthentication = iauthentication
-        self.query_service = query_service
-
-    def get(self, company_short_name: str, external_user_id: str):
-        # 1. get access credentials
-        iaut = self.iauthentication.verify(company_short_name, external_user_id)
-        if not iaut.get("success"):
-            return jsonify(iaut), 401
-
-        try:
-            # initialize the context
-            self.query_service.llm_init_context(
-                company_short_name=company_short_name,
-                external_user_id=external_user_id
-            )
-
-            return {'status': 'OK'}, 200
-        except Exception as e:
-            logging.exception(
-                f"Error inesperado al inicializar el contexto durante el login para company {company_short_name}: {e}")
-            return jsonify({"error_message": str(e)}), 500

iatoolkit/views/llmquery_view.py

@@ -1,65 +0,0 @@
-# Copyright (c) 2024 Fernando Libedinsky
-# Product: IAToolkit
-#
-# IAToolkit is open source software.
-
-from flask import request, jsonify, render_template
-from flask.views import MethodView
-from iatoolkit.services.query_service import QueryService
-from iatoolkit.common.auth import IAuthentication
-from injector import inject
-import logging
-
-
-class LLMQueryView(MethodView):
-    @inject
-    def __init__(self,
-                 iauthentication: IAuthentication,
-                 query_service: QueryService,
-                 ):
-        self.iauthentication = iauthentication
-        self.query_service = query_service
-
-    def post(self, company_short_name):
-        data = request.get_json()
-        if not data:
-            return jsonify({"error_message": "Cuerpo de la solicitud JSON inválido o faltante"}), 400
-
-        # get access credentials
-        iaut = self.iauthentication.verify(company_short_name, data.get("external_user_id"))
-        if not iaut.get("success"):
-            return jsonify(iaut), 401
-
-        company_id = iaut.get("company_id")
-        external_user_id = iaut.get("external_user_id")
-        local_user_id = iaut.get("local_user_id")
-
-        # now check the form
-        question = data.get("question")
-        files = data.get("files", [])
-        client_data = data.get("client_data", {})
-        prompt_name = data.get("prompt_name")
-        if not question and not prompt_name:
-            return jsonify({"error_message": "Falta la consulta o el prompt_name"}), 400
-
-        try:
-            response = self.query_service.llm_query(
-                company_short_name=company_short_name,
-                external_user_id=external_user_id,
-                local_user_id=local_user_id,
-                question=question,
-                prompt_name=prompt_name,
-                client_data=client_data,
-                files=files)
-            if "error" in response:
-                return {'error_message': response.get("error_message", '')}, 401
-
-            return response, 200
-        except Exception as e:
-            logging.exception(
-                f"Error inesperado al procesar llm_query para company {company_short_name}: {e}")
-            if local_user_id:
-                return render_template("error.html",
-                                       message="Ha ocurrido un error inesperado."), 500
-            else:
-                return jsonify({"error_message": str(e)}), 500