start project

app/blueprints/security/routes.py

@@ -0,0 +1,71 @@
+from __future__ import annotations
+
+from flask import Response, jsonify, render_template, request
+
+from app.blueprints.security import bp
+from app.blueprints.security.queries import (
+    format_blocklist, get_ip_history, get_sensitive_path_summary, get_suspicious_events,
+)
+from app.extensions import db
+from app.models.blocklist_suggestion import BlocklistSuggestion
+from app.utils.dates import parse_date_range
+from app.utils.htmx import render_htmx_aware
+from app.utils.pagination import parse_pagination
+
+
+@bp.route("/security")
+def security():
+    from_date, to_date = parse_date_range(request)
+    severity = request.args.get("severity") or ""
+    rule_type = request.args.get("rule_type") or ""
+    return render_htmx_aware(
+        request, full_template="security/index.html", partial_template="security/_content.html",
+        from_date=from_date, to_date=to_date, severity=severity, rule_type=rule_type,
+    )
+
+
+@bp.get("/api/security/events")
+def api_security_events():
+    from_date, to_date = parse_date_range(request)
+    page, per_page = parse_pagination(request)
+    severity = request.args.get("severity") or None
+    rule_type = request.args.get("rule_type") or None
+    rows, total = get_suspicious_events(from_date, to_date, severity, rule_type, page, per_page)
+    return jsonify(
+        data={"rows": rows, "total": total},
+        meta={"from": from_date.isoformat(), "to": to_date.isoformat(), "page": page, "per_page": per_page},
+    )
+
+
+@bp.get("/api/security/sensitive-paths")
+def api_sensitive_paths():
+    from_date, to_date = parse_date_range(request)
+    return jsonify(data=get_sensitive_path_summary(from_date, to_date), meta={"from": from_date.isoformat(), "to": to_date.isoformat()})
+
+
+@bp.get("/api/security/ip/<ip>")
+def api_ip_history(ip: str):
+    history = get_ip_history(ip)
+    if history is None:
+        return render_template("security/_ip_not_found.html", ip=ip), 404
+    return render_template("security/_ip_history.html", ip_data=history)
+
+
+@bp.get("/api/security/export-blocklist")
+def api_export_blocklist():
+    fmt = request.args.get("format", "plain")
+    include_all = request.args.get("all", "false").lower() == "true"
+    query = BlocklistSuggestion.query
+    if not include_all:
+        query = query.filter_by(exported=False)
+    suggestions = query.order_by(BlocklistSuggestion.created_at).all()
+
+    body = format_blocklist(suggestions, fmt)
+    for s in suggestions:
+        s.exported = True
+    db.session.commit()
+
+    return Response(
+        body, mimetype="text/plain",
+        headers={"Content-Disposition": "attachment; filename=kavosh-blocklist.txt"},
+    )