mirror of
https://github.com/zvx-echo6/recon.git
synced 2026-05-20 06:34:40 +02:00
Matt
a4288c0cd8
New files: - lib/auth.py: Authentik forward-auth helpers (get_user_id, @require_auth) - lib/contacts.py: ContactsDB with CRUD, soft delete, restore, purge, find_nearby - lib/contacts_api.py: Flask Blueprint with 9 API endpoints at /api/contacts - templates/knowledge/deleted_contacts.html: Dashboard recovery page Modified: - lib/api.py: Register contacts_bp, add KNOWLEDGE_SUBNAV entry, /deleted-contacts route - config/profiles: has_contacts feature flag (true for home, false for pi profiles) Separate SQLite DB at data/contacts.db. Per-user isolation via X-Authentik-Username. Home/Work labels enforced unique per user. Haversine proximity queries (75m default). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
114 lines
3.4 KiB
Python
114 lines
3.4 KiB
Python
"""
|
|
RECON Contacts API — Flask Blueprint.
|
|
|
|
Per-user phone book with soft delete, restore, purge, and proximity queries.
|
|
All endpoints require Authentik forward-auth (X-Authentik-Username header).
|
|
"""
|
|
from flask import Blueprint, request, jsonify
|
|
|
|
from .auth import require_auth
|
|
from .contacts import ContactsDB
|
|
|
|
contacts_bp = Blueprint('contacts', __name__)
|
|
|
|
_db = None
|
|
|
|
def _get_db():
|
|
global _db
|
|
if _db is None:
|
|
_db = ContactsDB()
|
|
return _db
|
|
|
|
|
|
@contacts_bp.route('/api/contacts', methods=['GET'])
|
|
@require_auth
|
|
def list_contacts():
|
|
db = _get_db()
|
|
category = request.args.get('category')
|
|
search = request.args.get('search')
|
|
return jsonify(db.list_all(request.user_id, category=category, search=search))
|
|
|
|
|
|
@contacts_bp.route('/api/contacts', methods=['POST'])
|
|
@require_auth
|
|
def create_contact():
|
|
db = _get_db()
|
|
data = request.get_json(force=True)
|
|
contact, err = db.create(request.user_id, **data)
|
|
if err == 'conflict':
|
|
return jsonify({'error': 'You already have a Home/Work contact'}), 409
|
|
return jsonify(contact), 201
|
|
|
|
|
|
@contacts_bp.route('/api/contacts/nearby', methods=['GET'])
|
|
@require_auth
|
|
def nearby_contacts():
|
|
db = _get_db()
|
|
lat = request.args.get('lat', type=float)
|
|
lon = request.args.get('lon', type=float)
|
|
radius_m = request.args.get('radius_m', 75, type=float)
|
|
if lat is None or lon is None:
|
|
return jsonify({'error': 'lat and lon required'}), 400
|
|
return jsonify(db.find_nearby(request.user_id, lat, lon, radius_m))
|
|
|
|
|
|
@contacts_bp.route('/api/contacts/deleted', methods=['GET'])
|
|
@require_auth
|
|
def list_deleted():
|
|
db = _get_db()
|
|
return jsonify(db.list_deleted(request.user_id))
|
|
|
|
|
|
@contacts_bp.route('/api/contacts/<int:contact_id>', methods=['GET'])
|
|
@require_auth
|
|
def get_contact(contact_id):
|
|
db = _get_db()
|
|
contact = db.get(request.user_id, contact_id)
|
|
if not contact:
|
|
return jsonify({'error': 'Not found'}), 404
|
|
return jsonify(contact)
|
|
|
|
|
|
@contacts_bp.route('/api/contacts/<int:contact_id>', methods=['PATCH'])
|
|
@require_auth
|
|
def update_contact(contact_id):
|
|
db = _get_db()
|
|
data = request.get_json(force=True)
|
|
contact = db.update(request.user_id, contact_id, **data)
|
|
if not contact:
|
|
return jsonify({'error': 'Not found'}), 404
|
|
return jsonify(contact)
|
|
|
|
|
|
@contacts_bp.route('/api/contacts/<int:contact_id>', methods=['DELETE'])
|
|
@require_auth
|
|
def delete_contact(contact_id):
|
|
db = _get_db()
|
|
contact = db.soft_delete(request.user_id, contact_id)
|
|
if not contact:
|
|
return jsonify({'error': 'Not found'}), 404
|
|
return jsonify(contact)
|
|
|
|
|
|
@contacts_bp.route('/api/contacts/<int:contact_id>/restore', methods=['POST'])
|
|
@require_auth
|
|
def restore_contact(contact_id):
|
|
db = _get_db()
|
|
contact, err = db.restore(request.user_id, contact_id)
|
|
if err == 'not_found':
|
|
return jsonify({'error': 'Not found'}), 404
|
|
if err == 'conflict':
|
|
return jsonify({'error': 'You already have a Home/Work contact'}), 409
|
|
return jsonify(contact)
|
|
|
|
|
|
@contacts_bp.route('/api/contacts/<int:contact_id>/purge', methods=['DELETE'])
|
|
@require_auth
|
|
def purge_contact(contact_id):
|
|
db = _get_db()
|
|
ok, err = db.purge(request.user_id, contact_id)
|
|
if err == 'not_found':
|
|
return jsonify({'error': 'Not found'}), 404
|
|
if err == 'not_deleted':
|
|
return jsonify({'error': 'Contact must be deleted before purging'}), 400
|
|
return jsonify({'ok': True})
|