iatoolkit 0.8.1__py3-none-any.whl → 0.63.4__py3-none-any.whl

iatoolkit/views/external_login_view.py

@@ -3,38 +3,71 @@
 #
 # IAToolkit is open source software.
 
-from flask.views import MethodView
-from injector import inject
-from iatoolkit.common.auth import IAuthentication
-from iatoolkit.services.query_service import QueryService
-from flask import jsonify
+import os
 import logging
+from flask import request, jsonify, url_for
+from iatoolkit.views.base_login_view import BaseLoginView
 
-class ExternalLoginView(MethodView):
 
-    @inject
-    def __init__(self,
-                 iauthentication: IAuthentication,
-                 query_service: QueryService
-                 ):
-        self.iauthentication = iauthentication
-        self.query_service = query_service
+class ExternalLoginView(BaseLoginView):
+    """
+    Handles login for external users via API.
+    Authenticates and then delegates the path decision (fast/slow) to the base class.
+    """
+    def post(self, company_short_name: str):
+        # Authenticate the API call.
+        auth_result = self.auth_service.verify()
+        if not auth_result.get("success"):
+            return jsonify(auth_result), auth_result.get("status_code")
 
-    def get(self, company_short_name: str, external_user_id: str):
-        # 1. get access credentials
-        iaut = self.iauthentication.verify(company_short_name, external_user_id)
-        if not iaut.get("success"):
-            return jsonify(iaut), 401
+        company = self.profile_service.get_company_by_short_name(company_short_name)
+        if not company:
+            return jsonify({"error": "Empresa no encontrada"}), 404
 
-        try:
-            # initialize the context
-            self.query_service.llm_init_context(
-                company_short_name=company_short_name,
-                external_user_id=external_user_id
-            )
+        user_identifier = auth_result.get('user_identifier')
+
+        # 2. Create the external user session.
+        self.profile_service.create_external_user_profile_context(company, user_identifier)
+
+        # 3. create a redeem_token for create session at the end of the process
+        redeem_token = self.jwt_service.generate_chat_jwt(
+            company_short_name=company_short_name,
+            user_identifier=user_identifier,
+            expires_delta_seconds=300
+        )
 
-            return {'status': 'OK'}, 200
+        if not redeem_token:
+            return jsonify({"error": "Error al generar el redeem_token para login externo."}), 403
+
+        # 4. define URL to call when slow path is finished
+        target_url = url_for('finalize_with_token',
+                             company_short_name=company_short_name,
+                             token=redeem_token,
+                             _external=True)
+
+        # 5. Delegate the path decision to the centralized logic.
+        try:
+            return self._handle_login_path(company, user_identifier, target_url, redeem_token)
         except Exception as e:
-            logging.exception(
-                f"Error inesperado al inicializar el contexto durante el login para company {company_short_name}: {e}")
-            return jsonify({"error_message": str(e)}), 500
+            logging.exception(f"Error processing external login path for {company_short_name}/{user_identifier}: {e}")
+            return jsonify({"error": f"Internal server error while starting chat. {str(e)}"}), 500
+
+
+class RedeemTokenApiView(BaseLoginView):
+    # this endpoint is only used ONLY by chat_main.js to redeem a chat token
+    def post(self, company_short_name: str):
+        data = request.get_json()
+        if not data or 'token' not in data:
+            return jsonify({"error": "Falta token de validación"}), 400
+
+        # get the token and validate with auth service
+        token = data.get('token')
+        redeem_result = self.auth_service.redeem_token_for_session(
+            company_short_name=company_short_name,
+            token=token
+        )
+
+        if not redeem_result['success']:
+            return {"error": redeem_result['error']}, 401
+
+        return {"status": "ok"}, 200

iatoolkit/views/{file_store_view.py → file_store_api_view.py}

@@ -6,23 +6,30 @@
 from flask.views import MethodView
 from flask import request, jsonify
 from iatoolkit.services.load_documents_service import LoadDocumentsService
+from iatoolkit.services.auth_service import AuthService
 from iatoolkit.repositories.profile_repo import ProfileRepo
 from injector import inject
 import base64
 
 
-class FileStoreView(MethodView):
+class FileStoreApiView(MethodView):
     @inject
     def __init__(self,
+                 auth_service: AuthService,
                  doc_service: LoadDocumentsService,
                  profile_repo: ProfileRepo,):
+        self.auth_service = auth_service
         self.doc_service = doc_service
         self.profile_repo = profile_repo
 
     def post(self):
         try:
-            req_data = request.get_json()
+            # 1. Authenticate the API request.
+            auth_result = self.auth_service.verify()
+            if not auth_result.get("success"):
+                return jsonify(auth_result), auth_result.get("status_code")
 
+            req_data = request.get_json()
             required_fields = ['company', 'filename', 'content']
             for field in required_fields:
                 if field not in req_data:

iatoolkit/views/forgot_password_view.py

@@ -4,33 +4,43 @@
 # IAToolkit is open source software.
 
 from flask.views import MethodView
-from flask import render_template, request, url_for
+from flask import render_template, request, url_for, redirect, session
 from injector import inject
 from iatoolkit.services.profile_service import ProfileService
+from iatoolkit.services.branding_service import BrandingService
 from itsdangerous import URLSafeTimedSerializer
 import os
 
 class ForgotPasswordView(MethodView):
     @inject
-    def __init__(self, profile_service: ProfileService):
+    def __init__(self, profile_service: ProfileService,
+                 branding_service: BrandingService):
         self.profile_service = profile_service
+        self.branding_service = branding_service # 3. Guardar la instancia
         self.serializer = URLSafeTimedSerializer(os.getenv("PASS_RESET_KEY"))
 
     def get(self, company_short_name: str):
         # get company info
         company = self.profile_service.get_company_by_short_name(company_short_name)
         if not company:
-            return render_template('error.html', message="Empresa no encontrada"), 404
+            return render_template('error.html',
+                        company_short_name=company_short_name,
+                        message="Empresa no encontrada"), 404
 
+        branding_data = self.branding_service.get_company_branding(company)
         return render_template('forgot_password.html',
                                company=company,
-                               company_short_name=company_short_name
+                               company_short_name=company_short_name,
+                               branding=branding_data
                                )
 
     def post(self, company_short_name: str):
         company = self.profile_service.get_company_by_short_name(company_short_name)
         if not company:
-            return render_template('error.html', message="Empresa no encontrada"), 404
+            return render_template('error.html',
+                            company_short_name=company_short_name,
+                            message="Empresa no encontrada"), 404
+        branding_data = self.branding_service.get_company_branding(company)
 
         try:
             email = request.form.get('email')
@@ -47,18 +57,18 @@ class ForgotPasswordView(MethodView):
                     'forgot_password.html',
                     company=company,
                     company_short_name=company_short_name,
-                    form_data={"email": email },
+                    branding=branding_data,
+                    form_data={"email": email},
                     alert_message=response["error"]), 400
 
+            # Guardamos el mensaje y el icono en la sesión manualmente
+            session['alert_message'] = "Si tu correo está registrado, recibirás un enlace para restablecer tu contraseña."
+            session['alert_icon'] = "success"
+            return redirect(url_for('home', company_short_name=company_short_name))
 
-            return render_template('login.html',
-                                   company=company,
-                                   company_short_name=company_short_name,
-                                   alert_icon='success',
-                                   alert_message="Hemos enviado un enlace a tu correo para restablecer la contraseña.")
         except Exception as e:
             return render_template("error.html",
-                                   company=company,
                                    company_short_name=company_short_name,
-                                   message="Ha ocurrido un error inesperado."), 500
+                                   branding=branding_data,
+                                   message=f"Ha ocurrido un error inesperado: {str(e)}"), 500
 

iatoolkit/views/history_api_view.py

@@ -0,0 +1,52 @@
+# Copyright (c) 2024 Fernando Libedinsky
+# Product: IAToolkit
+#
+# IAToolkit is open source software.
+
+from flask import request, jsonify
+from flask.views import MethodView
+from iatoolkit.services.history_service import HistoryService
+from iatoolkit.services.auth_service import AuthService
+from injector import inject
+import logging
+
+
+class HistoryApiView(MethodView):
+    """
+    Handles requests from the web UI to fetch a user's query history.
+    Authentication is based on the active Flask session.
+    """
+
+    @inject
+    def __init__(self,
+                 auth_service: AuthService,
+                 history_service: HistoryService):
+        self.auth_service = auth_service
+        self.history_service = history_service
+
+    def post(self, company_short_name: str):
+        # 1. Get the authenticated user's
+        auth_result = self.auth_service.verify()
+        if not auth_result.get("success"):
+            return jsonify(auth_result), auth_result.get("status_code")
+
+        user_identifier = auth_result.get('user_identifier')
+
+        try:
+            # 2. Call the history service with the unified identifier.
+            # The service's signature should now only expect user_identifier.
+            response = self.history_service.get_history(
+                company_short_name=company_short_name,
+                user_identifier=user_identifier
+            )
+
+            if "error" in response:
+                # Handle errors reported by the service itself.
+                return jsonify({'error_message': response["error"]}), 400
+
+            return jsonify(response), 200
+
+        except Exception as e:
+            logging.exception(
+                f"Unexpected error fetching history for {company_short_name}/{user_identifier}: {e}")
+            return jsonify({"error_message": "Ha ocurrido un error inesperado en el servidor."}), 500

iatoolkit/views/home_view.py

@@ -1,34 +1,67 @@
-# Copyright (c) 2024 Fernando Libedinsky
-# Product: IAToolkit
-#
-# IAToolkit is open source software.
-
+# iatoolkit/views/home_view.py
+import logging
+import os
+from flask import render_template, abort, session, render_template_string
 from flask.views import MethodView
-from flask import render_template, request
 from injector import inject
 from iatoolkit.services.profile_service import ProfileService
-import os
-
+from iatoolkit.services.branding_service import BrandingService
+import logging
 
 class HomeView(MethodView):
+    """
+    Handles the rendering of the company-specific home page with a login widget.
+    If the custom template is not found or fails, it renders an error page.
+    """
+
     @inject
     def __init__(self,
-                 profile_service: ProfileService):
+                 profile_service: ProfileService,
+                 branding_service: BrandingService):
         self.profile_service = profile_service
+        self.branding_service = branding_service
+
+    def get(self, company_short_name: str):
+        company = self.profile_service.get_company_by_short_name(company_short_name)
+
+        if not company:
+            return render_template('error.html', message="Empresa no encontrada"), 404
+
+        branding_data = self.branding_service.get_company_branding(company)
+        alert_message = session.pop('alert_message', None)
+        alert_icon = session.pop('alert_icon', 'error')
+
+
+        # 1. Construimos la ruta al archivo de plantilla específico de la empresa.
+        company_template_path = os.path.join(os.getcwd(), f'companies/{company_short_name}/templates/home.html')
+
+        # 2. Verificamos si el archivo de plantilla personalizado no existe.
+        if not os.path.exists(company_template_path):
+            return render_template(
+                "error.html",
+                company_short_name=company_short_name,
+                branding=branding_data,
+                message=f"La plantilla de la página de inicio para la empresa '{company_short_name}' no está configurada."
+            ), 500
+
+        # 3. Si el archivo existe, intentamos leerlo y renderizarlo.
+        try:
+            with open(company_template_path, 'r') as f:
+                template_string = f.read()
 
-    def get(self):
-        user_agent = request.user_agent
-        is_mobile = user_agent.platform in ["android", "iphone", "ipad"] or "mobile" in user_agent.string.lower()
-        alert_message = request.args.get('alert_message', None)
-        companies = self.profile_service.get_companies()
-
-        # Esta API_KEY para el login
-        api_key_for_login = os.getenv("IATOOLKIT_API_KEY", "tu_api_key_por_defecto_o_error")
-
-        return render_template('home.html',
-                               companies=companies,
-                               is_mobile=is_mobile,
-                               alert_message=alert_message,
-                               alert_icon='success' if alert_message else None,
-                               api_key=api_key_for_login
-                               )
+            # Usamos render_template_string, que entiende el contexto de Flask.
+            return render_template_string(
+                template_string,
+                company=company,
+                company_short_name=company_short_name,
+                branding=branding_data,
+                alert_message=alert_message,
+                alert_icon=alert_icon
+            )
+        except Exception as e:
+            return render_template(
+                "error.html",
+                company_short_name=company_short_name,
+                branding=branding_data,
+                message=f"Ocurrió un error al procesar la plantilla personalizada de la página de inicio: {str(e)}"
+            ), 500

iatoolkit/views/index_view.py

@@ -0,0 +1,14 @@
+# iatoolkit/views/index_view.py
+
+from flask import render_template, session
+from flask.views import MethodView
+
+
+class IndexView(MethodView):
+    """
+    Handles the rendering of the generic landing page, which no longer depends
+    on a specific company.
+    """
+
+    def get(self):
+        return render_template('index.html')

iatoolkit/views/init_context_api_view.py

@@ -0,0 +1,68 @@
+from flask.views import MethodView
+from injector import inject
+from iatoolkit.services.query_service import QueryService
+from iatoolkit.services.profile_service import ProfileService
+from iatoolkit.services.auth_service import AuthService
+from flask import jsonify, request
+import logging
+
+
+class InitContextApiView(MethodView):
+    """
+    API endpoint to force a full context rebuild for a user.
+    Handles both web users (via session) and API users (via API Key).
+    """
+
+    @inject
+    def __init__(self,
+                 auth_service: AuthService,
+                 query_service: QueryService,
+                 profile_service: ProfileService):
+        self.auth_service = auth_service
+        self.query_service = query_service
+        self.profile_service = profile_service
+
+    def post(self, company_short_name: str):
+        """
+        Cleans and rebuilds the context. The user is identified either by
+        an active web session or by the external_user_id in the JSON payload
+        for API calls.
+        """
+        # 1. Authenticate the request. This handles both session and API Key.
+        auth_result = self.auth_service.verify()
+        if not auth_result.get("success"):
+            return jsonify(auth_result), auth_result.get("status_code")
+
+        user_identifier = auth_result.get('user_identifier')
+
+        try:
+            # 2. Execute the forced rebuild sequence using the unified identifier.
+            self.query_service.session_context.clear_all_context(company_short_name, user_identifier)
+            logging.info(f"Context for {company_short_name}/{user_identifier} has been cleared.")
+
+            # LLM context is clean, now we can load it again
+            self.query_service.prepare_context(
+                company_short_name=company_short_name,
+                user_identifier=user_identifier
+            )
+
+            self.query_service.finalize_context_rebuild(
+                company_short_name=company_short_name,
+                user_identifier=user_identifier
+            )
+
+            # 3. Respond with JSON, as this is an API endpoint.
+            return jsonify({'status': 'OK', 'message': 'El contexto se ha recargado con éxito.'}), 200
+
+        except Exception as e:
+            logging.exception(f"Error durante la recarga de contexto {user_identifier}: {e}")
+            return jsonify({"error_message": str(e)}), 500
+
+    def options(self, company_short_name):
+        """
+        Maneja las solicitudes preflight de CORS.
+        Su única función es existir y devolver una respuesta exitosa para que
+        el middleware Flask-CORS pueda interceptarla y añadir las cabeceras
+        'Access-Control-Allow-*'.
+        """
+        return {}, 200

iatoolkit/views/llmquery_api_view.py

@@ -0,0 +1,45 @@
+from flask.views import MethodView
+from flask import request, jsonify
+from injector import inject
+from iatoolkit.services.query_service import QueryService
+from iatoolkit.services.auth_service import AuthService
+from iatoolkit.services.profile_service import ProfileService
+import logging
+
+class LLMQueryApiView(MethodView):
+    """
+    API-only endpoint for submitting queries. Authenticates via API Key.
+    """
+
+    @inject
+    def __init__(self, auth_service: AuthService, query_service: QueryService, profile_service: ProfileService):
+        self.auth_service = auth_service
+        self.query_service = query_service
+        self.profile_service = profile_service
+
+    def post(self, company_short_name: str):
+        # 1. Authenticate the API request.
+        auth_result = self.auth_service.verify()
+        if not auth_result.get("success"):
+            return jsonify(auth_result), auth_result.get("status_code")
+
+        # 2. Get the user identifier from the payload.
+        user_identifier = auth_result.get('user_identifier')
+
+        data = request.get_json()
+        if not data:
+            return jsonify({"error": "Invalid JSON body"}), 400
+
+        # 4. Call the unified query service method.
+        result = self.query_service.llm_query(
+            company_short_name=company_short_name,
+            user_identifier=user_identifier,
+            question=data.get('question', ''),
+            prompt_name=data.get('prompt_name'),
+            client_data=data.get('client_data', {}),
+            files=data.get('files', [])
+        )
+        if 'error' in result:
+            return jsonify(result), 400
+
+        return jsonify(result), 200

iatoolkit/views/login_simulation_view.py

@@ -0,0 +1,81 @@
+# Copyright (c) 2024 Fernando Libedinsky
+# Product: IAToolkit
+#
+# IAToolkit is open source software.
+
+import requests
+import json
+import os
+from flask.views import MethodView
+from flask import render_template, request, Response
+from injector import inject
+from iatoolkit.services.profile_service import ProfileService
+
+
+class LoginSimulationView(MethodView):
+    @inject
+    def __init__(self,
+                 profile_service: ProfileService):
+        self.profile_service = profile_service
+
+    def get(self, company_short_name: str = None):
+        """Muestra el formulario para iniciar la simulación."""
+        return render_template('login_simulation.html',
+                               company_short_name=company_short_name
+                               )
+
+    def post(self, company_short_name: str):
+        """
+        Recibe el POST del formulario y actúa como un proxy servidor-a-servidor.
+        Llama al endpoint 'external_login' y devuelve su respuesta (HTML y headers).
+        """
+        api_key = os.getenv("IATOOLKIT_API_KEY")
+        # Obtenemos la URL base de la petición actual para construir la URL interna
+        base_url = request.host_url.rstrip('/')
+
+        # 1. Obtener el user_identifier del formulario
+        user_identifier = request.form.get('external_user_id')
+
+        if not user_identifier:
+            return Response("Error: El campo 'external_user_id' es requerido.", status=400)
+
+        # 2. Preparar la llamada a la API real de external_login
+        target_url = f"{base_url}/{company_short_name}/external_login"
+        headers = {
+            'Content-Type': 'application/json',
+            'Authorization': f'Bearer {api_key}'
+        }
+        # El payload debe ser un diccionario que se convertirá a JSON
+        payload = {'user_identifier': user_identifier}
+
+        try:
+            # 3. Llamada POST segura desde este servidor al endpoint de IAToolkit
+            internal_response = requests.post(
+                target_url,
+                headers=headers,
+                data=json.dumps(payload),
+                timeout=120,
+                stream=True  # Usamos stream para manejar la respuesta eficientemente
+            )
+            internal_response.raise_for_status()
+
+            # 4. Creamos una nueva Response de Flask para el navegador del usuario.
+            user_response = Response(
+                internal_response.iter_content(chunk_size=1024),
+                status=internal_response.status_code
+            )
+
+            # 5. Copiamos TODAS las cabeceras de la respuesta interna a la respuesta final.
+            # Esto es CRUCIAL para que las cookies ('Set-Cookie') lleguen al navegador.
+            for key, value in internal_response.headers.items():
+                # Excluimos cabeceras que no debemos pasar (controladas por el servidor WSGI)
+                if key.lower() not in ['content-encoding', 'content-length', 'transfer-encoding', 'connection']:
+                    user_response.headers[key] = value
+
+            return user_response
+
+        except requests.exceptions.HTTPError as e:
+            error_text = f"Error en la llamada interna a la API: {e.response.status_code}. Respuesta: {e.response.text}"
+            return Response(error_text, status=e.response.status_code, mimetype='text/plain')
+        except requests.exceptions.RequestException as e:
+            return Response(f'Error de conexión con el servicio de IA: {str(e)}', status=502, mimetype='text/plain')