Browse the data

1import os
2import json
3import hashlib
4import secrets
5from pathlib import Path
6from fastapi import FastAPI, HTTPException, Header, Request
7from fastapi.responses import FileResponse, HTMLResponse
8from pydantic import BaseModel
9 
10app = FastAPI()
11 
12users = {}
13tokens = {}
14exhibits = {}
15exhibit_counter = 1
16 
17MUSEUM_BASE = "/var/museum"
18 
19class SignupRequest(BaseModel):
20    username: str
21    password: str
22 
23class LoginRequest(BaseModel):
24    username: str
25    password: str
26 
27class ExhibitCreate(BaseModel):
28    name: str
29    description: str = ""
30 
31def hash_password(password: str) -> str:
32    return hashlib.sha256(password.encode()).hexdigest()
33 
34def generate_token() -> str:
35    return secrets.token_hex(32)
36 
37def get_current_user(authorization: str = Header(None)):
38    if not authorization:
39        raise HTTPException(status_code=401, detail="Missing auth header")
40    scheme, _, token = authorization.partition(" ")
41    if scheme.lower() != "bearer" or not token:
42        raise HTTPException(status_code=401, detail="Invalid auth header")
43    user_id = tokens.get(token)
44    if user_id is None:
45        raise HTTPException(status_code=401, detail="Invalid token")
46    return user_id
47 
48@app.post("/signup")
49def signup(req: SignupRequest):
50    if req.username in users:
51        raise HTTPException(status_code=400, detail="User exists")
52    users[req.username] = hash_password(req.password)
53    return {"message": "User created", "username": req.username}
54 
55@app.post("/login")
56def login(req: LoginRequest):
57    stored = users.get(req.username)
58    if not stored or stored != hash_password(req.password):
59        raise HTTPException(status_code=401, detail="Invalid credentials")
60    token = generate_token()
61    tokens[token] = req.username
62    return {"token": token}
63 
64@app.post("/exhibit")
65def create_exhibit(req: ExhibitCreate, authorization: str = Header(None)):
66    user = get_current_user(authorization)
67    global exhibit_counter
68    eid = exhibit_counter
69    exhibit_counter += 1
70    exhibits[eid] = {"id": eid, "name": req.name, "description": req.description, "owner": user}
71    exhibit_dir = Path(f"{MUSEUM_BASE}/{eid}")
72    exhibit_dir.mkdir(parents=True, exist_ok=True)
73    return exhibits[eid]
74 
75@app.get("/exhibit/{eid}")
76def get_exhibit(eid: int, authorization: str = Header(None)):
77    user = get_current_user(authorization)
78    exhibit = exhibits.get(eid)
79    if not exhibit:
80        raise HTTPException(status_code=404, detail="Exhibit not found")
81    return exhibit
82 
83@app.get("/exhibit/{eid}/media/{file}")
84def get_media(eid: int, file: str, authorization: str = Header(None)):
85    user = get_current_user(authorization)
86    if eid not in exhibits:
87        raise HTTPException(status_code=404, detail="Exhibit not found")
88    file_path = Path(f"{MUSEUM_BASE}/{eid}/{file}")
89    if not file_path.exists() or not file_path.is_file():
90        raise HTTPException(status_code=404, detail="File not found")
91    return FileResponse(str(file_path))
92 
93@app.get("/exhibit/{eid}/virtual-tour")
94def virtual_tour(eid: int, authorization: str = Header(None)):
95    user = get_current_user(authorization)
96    if eid not in exhibits:
97        raise HTTPException(status_code=404, detail="Exhibit not found")
98    exhibit_dir = Path(f"{MUSEUM_BASE}/{eid}")
99    if not exhibit_dir.exists():
100        return HTMLResponse("<h1>Virtual Tour</h1><p>No files yet.</p>")
101    files = sorted([f.name for f in exhibit_dir.iterdir() if f.is_file()])
102    list_items = "".join(f"<li><a href='/exhibit/{eid}/media/{f}'>{f}</a></li>" for f in files)
103    html = f"<h1>Virtual Tour: {exhibits[eid]['name']}</h1><ul>{list_items}</ul>"
104    return HTMLResponse(html)

1fastapi
2uvicorn