openwrite 0.10.1__py3-none-any.whl

openwrite/utils/helpers.py

@@ -0,0 +1,216 @@
+import bleach
+import re
+import unicodedata
+import hashlib
+from flask import request, g
+import os
+import secrets
+import json
+import base64
+import requests
+import datetime
+from urllib.parse import urlparse
+from cryptography.hazmat.primitives import hashes, serialization
+from cryptography.hazmat.primitives.asymmetric import padding
+from cryptography.exceptions import InvalidSignature
+from bs4 import BeautifulSoup
+
+
+def sanitize_html(content):
+    allowed_tags = [
+        'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
+        'p', 'br', 'hr',
+        'strong', 'b', 'em', 'i', 'u',
+        'ul', 'ol', 'li',
+        'a', 'img', 'video',
+        'code', 'pre', 'del',
+        'blockquote',
+        'table', 'thead', 'tbody', 'tfoot', 'tr', 'th', 'td'
+    ]
+
+    allowed_attrs = {
+        'a': ['href', 'title', 'rel', 'target'],
+        'img': ['src', 'alt', 'title', 'width', 'height'],
+        'th': ['align'],
+        'td': ['align'],
+        'video': ['src', 'width', 'height', 'controls']
+    }
+
+    return bleach.clean(content, tags=allowed_tags, attributes=allowed_attrs)
+
+
+def gen_link(text):
+    text = unicodedata.normalize('NFKD', text).encode('ascii', 'ignore').decode('ascii')
+    text = re.sub(r'[^\w\s-]', '', text.lower())
+    text = re.sub(r'[\s_]+', '-', text.strip())
+    return text
+
+
+def get_ip():
+    ip = request.headers.get("X-Forwarded-For", request.remote_addr)
+    if ip and "," in ip:
+        ip = ip.split(",")[0].strip()
+    return ip
+
+
+def anonymize(ip: str, salt: str = None) -> str:
+    if salt is None:
+        salt = os.getenv("SECRET_KEY", "")
+    data = (salt + ip).encode("utf-8")
+    return hashlib.sha256(data).hexdigest()
+
+
+def safe_css(data):
+    banned_keywords = [
+        r"url\s*\(", r"@import", r"@keyframes", r"expression\s*\(", r"javascript\s*:", r"animation"
+    ]
+
+    for keyword in banned_keywords:
+        data = re.sub(keyword, "", data, flags=re.IGNORECASE)
+
+    return data
+
+def generate_nonce():
+    return secrets.token_urlsafe(16)
+
+
+def verify_http_signature(headers, body, blog):
+    try:
+        digest_header = headers.get("Digest")
+        if not digest_header or not digest_header.startswith("SHA-256="):
+            return False
+
+        digest_b64 = digest_header.split("=", 1)[1]
+        actual_digest = base64.b64encode(hashlib.sha256(body.encode("utf-8")).digest()).decode()
+        if digest_b64 != actual_digest:
+            return False
+
+        sig_header = headers.get("Signature")
+        if not sig_header:
+            return False
+
+        sig_parts = {}
+        for part in sig_header.split(","):
+            k, v = part.strip().split("=", 1)
+            sig_parts[k] = v.strip('"')
+
+        key_id = sig_parts.get("keyId")
+        algorithm = sig_parts.get("algorithm")
+        header_list = sig_parts.get("headers", "").split()
+        signature_b64 = sig_parts.get("signature")
+
+        if not key_id or not algorithm or not header_list or not signature_b64:
+            return False
+
+        string_lines = []
+        for h in header_list:
+            if h == "(request-target)":
+                method = "post"
+                path = f"/inbox/{blog}"
+                string_lines.append(f"(request-target): {method} {path}")
+            else:
+                value = headers.get(h, "")
+                string_lines.append(f"{h.lower()}: {value}")
+
+        string_to_verify = "\n".join(string_lines)
+
+        actor_url = key_id.split("#")[0]
+        res = requests.get(actor_url, headers={"Accept": "application/activity+json"})
+        actor_data = res.json()
+        public_key_pem = actor_data["publicKey"]["publicKeyPem"]
+
+        public_key = serialization.load_pem_public_key(public_key_pem.encode())
+        signature = base64.b64decode(signature_b64)
+
+        public_key.verify(
+            signature,
+            string_to_verify.encode(),
+            padding.PKCS1v15(),
+            hashes.SHA256()
+        )
+
+        return True
+
+    except InvalidSignature:
+        return False
+    except Exception as e:
+        return False
+
+def send_activity(activity, private_key_pem, from_, to):
+
+    body = json.dumps(activity)
+    digest = "SHA-256=" + base64.b64encode(hashlib.sha256(body.encode()).digest()).decode()
+    date = datetime.datetime.utcnow().strftime("%a, %d %b %Y %H:%M:%S GMT")
+
+    to_actor = from_
+    inbox_url = to
+    parsed = urlparse(inbox_url)
+    host = parsed.hostname
+    path = parsed.path
+
+    private_key = serialization.load_pem_private_key(
+        private_key_pem.encode(), password=None
+    )
+
+    headers_to_sign = [
+        f"(request-target): post {path}",
+        f"host: {host}",
+        f"date: {date}",
+        f"digest: {digest}",
+        "content-type: application/activity+json"
+    ]
+    string_to_sign = "\n".join(headers_to_sign)
+
+    signature = private_key.sign(
+        string_to_sign.encode(),
+        padding.PKCS1v15(),
+        hashes.SHA256()
+    )
+    signature_b64 = base64.b64encode(signature).decode()
+
+    signature_header = (
+        f'keyId="{to_actor}#main-key",'
+        f'algorithm="rsa-sha256",'
+        f'headers="(request-target) host date digest content-type",'
+        f'signature="{signature_b64}"'
+    )
+
+    headers = {
+        "Host": host,
+        "Date": date,
+        "Digest": digest,
+        "Content-Type": "application/activity+json",
+        "Signature": signature_header
+    }
+    #print(f"""
+    #    URL:
+    #    {inbox_url}
+
+    #    Headers:
+    #    {headers}
+
+    #    Body:
+    #    {body}
+    #""")
+
+    response = requests.post(inbox_url, headers=headers, data=body)
+    #print(f"""
+    #    [+] Sent to {inbox_url}: {response.status_code}
+    #    Body:
+
+    #    {response.text}
+    #""")
+    if response.status_code >= 400:
+        print("[-] Response:", response.text)
+
+    return response.status_code
+
+def is_html(content):
+    soup = BeautifulSoup(content, "html.parser")
+    return bool(soup.find())
+
+def get_themes():
+    css_files = [f.replace(".css", "") for f in os.listdir(f"{g.mainpath}/static/style/themes/") if f.endswith(".css")]
+
+    return css_files
+

openwrite/utils/i18n.json

@@ -0,0 +1,229 @@
+{
+    "en": {
+        "instances": "Instances",
+        "hosting": "Hosting",
+        "register": "Register",
+        "login": "Login",
+        "header_text": "<span style=\"color: #f7e3db\">quiet</span> space for <span style=\"color: #8d7bb9\">loud</span> thoughts.",
+        "register_here": "Register Here",
+        "self_host": "Self Host",
+        "username": "Username",
+        "password": "Password",
+        "email": "Email",
+        "not_required": "not required by recommended for 2FA and recovery",
+        "register_on_this_instance": "register on this instance",
+        "home_text": "<strong>openwrite.io</strong> is a minimalist blogging platform built for writing freely, hosting independently, and publishing without noise.<br><br>No tracking scripts. No bloated frameworks. No ads. Just you, your thoughts, and the open web.<br><br>Each blog runs on its own terms — you can self-host in minutes, write in clean Markdown, and share your voice without intermediaries.<br><br>Designed for lightness and privacy, openwrite is also prepared for federation. In the future, instances will be able to follow each other, share content, and form a decentralized writing network.<br><br><em>No analytics. No distractions. Just words.</em <br><br><u class=\"centered\">Don't wait up - start blogging now!</u>",
+        "or": "or",
+        "language": "Language",
+        "buy_coffee": "Buy me a coffee",
+        "user_exists": "User already exists. Choose different name.",
+        "error": "Unknown error occured. Try again later.",
+        "registered": "Register successful! You can login now.",
+        "invalid_credentials": "Invalid credentials!",
+        "logout": "Log out",
+        "your_blogs": "your blogs",
+        "title": "Title",
+        "edit": "Edit",
+        "new_post": "New post",
+        "delete_blog": "Delete blog",
+        "create_new_blog": "Create new blog",
+        "description": "Description",
+        "save": "Save",
+        "upload_image": "Upload image",
+        "date": "Date",
+        "actions": "Actions",
+        "choose_blog_title": "Choose blog title",
+        "choose_blog_url": "Choose blog URL",
+        "access_blog_how": "How would you like to access your blog",
+        "domain_name": "Domain name",
+        "path": "Path",
+        "create": "Create",
+        "index_blog": "Index your blog in search engines",
+        "content": "content",
+        "preview": "Preview",
+        "post": "Post",
+        "include_author": "Include author information(username) in post",
+        "new_post_on": "new post on blog",
+        "posts": "Posts",
+        "are_you_sure_blog": "Are you sure to delete blog",
+        "this_action_cannot_be_reverted": "This action cannot be reverted",
+        "are_you_sure_user": "Are you sure to delete user",
+        "edit": "Edit",
+        "are_you_sure_post": "Are you sure to delete post",
+        "delete": "Delete",
+        "editing_post": "editing post",
+        "views": "Views",
+        "settings": "Settings",
+        "mfa": "Multi-factor authentication",
+        "verify": "Verify",
+        "delete_account": "Delete account",
+        "instances_text": "Here you will find all known openwrite instances along with their properties",
+        "name": "Name",
+        "blogs_running": "Blogs running",
+        "users": "Users",
+        "media_upload": "Upload media?",
+        "password2": "Retype password",
+        "passwords_dont_match": "Passwords don't match!",
+        "include_in_feed": "Include post in \"Discover\" section",
+        "discover": "Discover",
+        "discover_text": "Here you can find most recent posts from this instance.",
+        "yes": "Yes",
+        "no": "No",
+        "change_password": "Change Password",
+        "migrate_posts": "Import posts",
+        "wrong_username": "Wrong username!",
+        "invalid_captcha": "Invalid captcha!",
+        "uploads_disabled": "Uploads disabled",
+        "invalid_filename": "Invalid filename",
+        "unsupported_filetype": "Unsupported file type",
+        "no_file": "No file",
+        "not_image": "Uploaded file is not a valid image",
+        "upload_failed": "Upload failed",
+        "current_password": "Current password",
+        "new_password": "New password",
+        "choose_vendor": "Choose blog vendor",
+        "select_posts": "Select posts to migrate",
+        "migrate_info": "Data is used only for migration and not saved in any place.",
+        "invalid_password": "Invalid password!",
+        "choose_format": "Choose data format",
+        "title_column": "Title column name",
+        "content_column": "Content column name",
+        "date_column": "Date column name",
+        "content_format": "Content format",
+        "step": "Step",
+        "upload_file": "Upload file",
+        "send": "Send",
+        "import_info": "In here you can import posts from another platform. Files can be exported from Wordpress(XML) or in general CSV format. <a class=\"link\" href=\"https://main.openwrite.io/posts-migration\">Here</a> you can find information about how to prepare data to import.",
+        "import_success1": "Import successful! Go to",
+        "import_success2": "blog dashboard",
+        "import_success3": "to see your posts.",
+        "import_failed": "Error occured! Check your data format.",
+        "select_blog_to_import": "Select blog to import data to",
+        "remove_admin": "Remove admin",
+        "add_admin": "Make admin",
+        "are_you_sure_make_admin": "Are you sure to add admin rights to",
+        "are_you_sure_remove_admin": "Are you sure to remove admin rights from",
+        "add_user": "Add user",
+        "select_theme": "Select theme",
+        "default": "Default",
+        "see_themes": "See themes",
+        "custom_css": "Custom CSS",
+        "css_unsafe_info": "Unsafe values like url(), @keyframes, @import, expression, javascript and animation will be removed.",
+        "your_blog": "your blog",
+        "statistics": "Statistics",
+        "contact": "Contact"
+    },
+    "pl": {
+        "instances": "Instancje",
+        "hosting": "Hosting",
+        "register": "Rejestracja",
+        "login": "Zaloguj się",
+        "header_text": "<span style=\"color: #f7e3db\">cicha</span> przestrzeń na <span style=\"color: #8d7bb9\">głośne</span> myśli.",
+        "register_here": "Zarejestruj się tutaj",
+        "self_host": "Samodzielny hosting",
+        "username": "Nazwa użytkownika",
+        "password": "Hasło",
+        "email": "E-mail",
+        "not_required": "nie wymagany, ale zalecany do 2FA i odzyskiwania konta",
+        "register_on_this_instance": "zarejestruj się na tej instancji",
+        "home_text": "<strong>openwrite.io</strong> to minimalistyczna platforma blogowa stworzona z myślą o wolności pisania, niezależnym hostowaniu i publikowaniu bez zbędnego hałasu.<br><br>Bez skryptów śledzących. Bez przeładowanych frameworków. Bez reklam. Tylko Ty, Twoje myśli i otwarty internet.<br><br>Każdy blog działa na własnych zasadach — możesz samodzielnie go uruchomić w kilka minut, pisać w czystym Markdownie i dzielić się swoim głosem bez pośredników.<br><br>Stworzony z myślą o lekkości i prywatności, openwrite jest również gotowy na federację. W przyszłości instancje będą mogły obserwować się nawzajem, udostępniać treści i tworzyć zdecentralizowaną sieć pisarską.<br><br><em>Bez analityki. Bez rozpraszaczy. Tylko słowa.</em><br><br><u class=\"centered\">Nie czekaj — zacznij pisać już teraz!</u>",
+        "or": "lub",
+        "language": "Język",
+        "buy_coffee": "Kup mi kawkę",
+        "user_exists": "Użytkownik o takiej nazwie istnieje. Wybierz inną.",
+        "error": "Wystąpił nieznany błąd. Spróbuj ponownie później.",
+        "registered": "Zarejestrowano pomyslnie! Możesz się zalogować.",
+        "invalid_credentials": "Login lub hasło nieprawidłowe!",
+        "logout": "Wyloguj",
+        "your_blogs": "twoje blogi",
+          "title": "Tytuł",
+          "edit": "Edytuj",
+          "new_post": "Nowy wpis",
+          "delete_blog": "Usuń bloga",
+          "create_new_blog": "Utwórz nowego bloga",
+          "description": "Opis",
+          "save": "Zapisz",
+          "upload_image": "Prześlij obraz",
+          "date": "Data",
+          "actions": "Akcje",
+          "choose_blog_title": "Wybierz tytuł bloga",
+          "choose_blog_url": "Wybierz adres URL bloga",
+          "access_blog_how": "Jaki chcesz link do bloga",
+          "domain_name": "Nazwa domeny",
+          "path": "Ścieżka",
+          "create": "Utwórz",
+          "index_blog": "Indeksuj bloga w wyszukiwarkach",
+          "content": "Treść",
+          "preview": "Podgląd",
+          "post": "Opublikuj",
+          "include_author": "Dołącz informacje o autorze (nazwa użytkownika) we wpisie",
+          "new_post_on": "nowy wpis na blogu",
+          "posts": "Wpisy",
+          "are_you_sure_blog": "Czy na pewno chcesz usunąć bloga",
+          "this_action_cannot_be_reverted": "Tej operacji nie można cofnąć",
+          "are_you_sure_post": "Czy na pewno chcesz usunąć wpis",
+        "are_you_sure_user": "Czy na pewno chcesz usunąć użytkownika",
+        "delete": "Usuń",
+        "editing_post": "edycja wpisu",
+        "views": "Wyświetlenia",
+        "settings": "Ustawienia",
+        "mfa": "Weryfikacja dwuetapowa",
+        "verify": "Zweryfikuj",
+        "delete_account": "Usuń konto",
+        "instances_text": "Tutaj znajdziesz wszystkie znane nam instancje openwrite.io wraz z ich właściwościami",
+        "name": "Nazwa",
+        "blogs_running": "Uruchomione blogi",
+        "users": "Użytkownicy",
+        "media_upload": "Przesyłanie mediów?",
+        "password2": "Powtórz hasło",
+        "password_dont_match": "Hasła się nie zgadzają!",
+        "include_in_feed": "Wyświetlać wpis w sekcji \"Odkrywaj\"",
+        "discover": "Odkrywaj",
+        "discover_text": "Tutaj znajdziesz wszystkie najnowsze posty z tej instancji openwrite.",
+        "yes": "Tak",
+        "no": "Nie",
+        "change_password": "Zmień hasło",
+        "migrate_posts": "Importuj posty",
+        "wrong_username": "Nieprawidłowa nazwa!",
+        "invalid_captcha": "Captcha nieprawidłowa!",
+        "uploads_disabled": "Przesyłanie plików wyłączone",
+        "invalid_filename": "Nieprawidłowa nazwa pliku",
+        "unsupported_filetype": "Nieprawidłowy typ pliku",
+        "no_file": "Brak pliku",
+        "not_image": "Przesyłany plik nie jest obrazem",
+        "upload_failed": "Niepowodzenie w przesyłaniu",
+        "current_password": "Aktualne hasło",
+        "new_password": "Nowe hasło",
+        "choose_vendor": "Wybierz dostawcę obecnego bloga",
+        "select_posts": "Wybierz wpisy do migracji",
+        "migrate_info": "Dane są używane wyłącznie do migracji wpisów i nie są zapisywane.",
+        "invalid_password": "Nieprawidłowe hasło!",
+        "choose_format": "Wybierz format danych",
+        "title_column": "Nazwa kolumny z tytułem",
+        "content_column": "Nazwa kolumny z treścią",
+        "date_column": "Nazwa kolumny z datą",
+        "content_format": "Format treści wpisu",
+        "step": "Krok",
+        "upload_file": "Wybierz plik",
+        "send": "Wyślij",
+        "import_info": "W tym miejscu możesz zaimportować wpisy z innej platformy. Przyjmowane są pliki z Wordpress(XML) oraz CSV. <a class=\"link\" href=\"https://main.openwrite.io/posts-migration\">Tutaj</a> dowiesz się jak przygotować dane do importu.",
+        "import_success1": "Import wpisów zakończony sukcesem! Przejdź do",
+        "import_success2": "dashboardu bloga",
+        "import_success3": "żeby zobaczyć swoje posty.",
+        "import_failed": "Wystąpił błąd! Sprawdź przesyłane dane.",
+        "select_blog_to_import": "Wybierz blog, do którego trafią wpisy",
+        "remove_admin": "Zabierz prawa administratora",
+        "add_admin": "Mianuj administratorem",
+        "are_you_sure_make_admin": "Czy na pewno chcesz nadać prawa administratora dla",
+        "are_you_sure_remove_admin": "Czy na pewno zabrać uprawnienia administratora ",
+        "add_user": "Dodaj użytkownika",
+        "select_theme": "Wybierz motyw",
+        "default": "Domyślny",
+        "see_themes": "Zobacz motywy",
+        "custom_css": "Własny CSS",
+        "css_unsafe_info": "Niebezpieczne wartości jak url(), @keyframes, @import, expression, javascript i animation zostaną usunięte.",
+        "your_blog": "twój blog",
+        "statistics": "Statystyki",
+        "contact": "Contact"
+    }
+}

openwrite/utils/models.py

@@ -0,0 +1,87 @@
+from sqlalchemy import Column, Integer, String, Date, Text, DateTime, Index
+from sqlalchemy.sql import func
+from openwrite.db.base import Base
+
+class Settings(Base):
+    __tablename__ = "settings"
+
+    id = Column(Integer, primary_key=True)
+    name = Column(String(100), nullable=False)
+    value = Column(Text, nullable=False)
+
+class Home(Base):
+    __tablename__ = "home"
+
+    id = Column(Integer, primary_key=True)
+    language = Column(String(10))
+    name = Column(String(100), nullable=False)
+    type = Column(String(30), nullable=False)
+    url = Column(String(200))
+    content = Column(Text)
+
+class User(Base):
+    __tablename__ = "users"
+    
+    id = Column(Integer, primary_key=True)
+    username = Column(String(50), unique=True, nullable=False)
+    password_hash = Column(String(255), nullable=False)
+    email = Column(String(120), nullable=True)
+    verified = Column(Integer, nullable=False)
+    admin = Column(Integer, nullable=False)
+
+class Blog(Base):
+    __tablename__ = "blogs"
+
+    id = Column(Integer, primary_key=True)
+    owner = Column(Integer, nullable=False)
+    name = Column(String(64), nullable=False)
+    title = Column(String(64), nullable=False)
+    index = Column(String(10), nullable=False)
+    access = Column(String(10), nullable=False)
+    description_raw = Column(Text, nullable=False)
+    description_html = Column(Text, nullable=False)
+    css = Column(Text)
+    pub_key = Column(Text, nullable=False)
+    priv_key = Column(Text, nullable=False)
+    followers = Column(Text)
+    created = Column(DateTime, nullable=False)
+    updated = Column(DateTime)
+    theme = Column(String(50), nullable=False)
+
+class Post(Base):
+    __tablename__ = "posts"
+
+    id = Column(Integer, primary_key=True)
+    blog = Column(Integer, nullable=False)
+    title = Column(String(128), nullable=False)
+    link = Column(String(64), nullable=False)
+    date = Column(DateTime, default=func.current_date())
+    content_raw = Column(Text, nullable=False)
+    content_html = Column(Text, nullable=False)
+    author = Column(String(10), nullable=False)
+    feed = Column(String(10), nullable=False)
+    updated = Column(DateTime)
+
+class View(Base):
+    __tablename__ = "views"
+
+    id = Column(Integer, primary_key=True)
+    hash = Column(String(64), nullable=False)
+    blog = Column(Integer, nullable=False)
+    post = Column(Integer, nullable=False)
+    date = Column(DateTime)
+    agent = Column(String(300))
+
+    __table_args__ = (
+        Index("ix_views_blog_post", "blog", "post"),
+    )
+
+class Like(Base):
+    __tablename__ = "likes"
+
+    id = Column(Integer, primary_key=True)
+    hash = Column(String(64), nullable=False)
+    blog = Column(Integer, nullable=False)
+    post = Column(Integer, nullable=False)
+    date = Column(DateTime)
+

openwrite/utils/translations.py

@@ -0,0 +1,6 @@
+import json
+import importlib.resources
+
+def load_translations():
+    data = importlib.resources.files(__package__).joinpath("i18n.json").read_text(encoding="utf-8")
+    return json.loads(data)