application.py

from flask import Flask, send_file, send_from_directory, Blueprint
from mongoengine import connect
import yaml
from uuid import uuid4
from Response import Response
from Services.EndpointProtectionService import authRequired, NON_PROTECTED_ENDPOINTS
import google_auth_oauthlib.flow
import os
from flask_restplus import Api
import sentry_sdk
from sentry_sdk.integrations.flask import FlaskIntegration
import boto3

STATIC_DIRECTORIES = ["js", "css", "img", "fonts"]
STATIC_DIRECTORY_ROOT = "./dist/"
STATIC_ASSETS_DIRECTORY_ROOT = "./dist/assets/"

# Download all secret files from S3 bucket
s3 = boto3.resource('s3')
myBucket = s3.Bucket('agriworks-secret-files')
for s3_object in myBucket.objects.all():
    fileName = s3_object.key
    myBucket.download_file(s3_object.key, fileName)

# Instantiate application 
application = Flask(__name__)
application.env = application.config["ENV"]

# Instantiate connection to database
if (application.env == "production"):
    creds = {}
    creds["DB_USER"] = os.getenv("DB_USER")
    creds["DB_PASSWORD"] = os.getenv("DB_PASSWORD")
    creds["AWS_ACCESS_KEY"] = os.getenv("AWS_ACCESS_KEY")
    creds["AWS_SECRET_KEY"] = os.getenv("AWS_SECRET_KEY")
    creds["MAIL_USER"] = os.getenv("MAIL_USER")
    creds["SENDGRID_API_KEY"] = os.getenv("SENDGRID_API_KEY")
else:
    creds = yaml.safe_load(open("creds.yaml", "r"))

dbHostUri = "mongodb+srv://" + creds["DB_USER"] + ":" + creds["DB_PASSWORD"] + \
    "@cluster0-ollas.mongodb.net/test?retryWrites=true&w=majority&ssl=true&ssl_cert_reqs=CERT_NONE"
db = connect(host=dbHostUri)

# Instantiate connection to AWS
awsSession = boto3.Session(
    aws_access_key_id=creds["AWS_ACCESS_KEY"],
    aws_secret_access_key=creds["AWS_SECRET_KEY"]
)


flow = google_auth_oauthlib.flow.Flow.from_client_secrets_file(
    'client_secrets.json',
    scopes=["https://www.googleapis.com/auth/userinfo.profile", 
            "https://www.googleapis.com/auth/userinfo.email",
            "openid"])


# Instantiate application 
application.flow = flow
application.secret_key = str(uuid4())


if (application.env == "production"):
    # Route handlers for FE
    @application.route("/assets/<string:requestedStaticDirectory>/<path:path>")
    def sendStaticComponent(requestedStaticDirectory, path):
        if requestedStaticDirectory not in STATIC_DIRECTORIES:
            return Response("Not a valid static asset directory", status=400)
        return send_from_directory(STATIC_ASSETS_DIRECTORY_ROOT + requestedStaticDirectory, path)

    @application.route("/")
    def index():
        return send_file(STATIC_DIRECTORY_ROOT + "index.html")

    @application.errorhandler(404)
    def rerouteToIndex(e):
        return send_file(STATIC_DIRECTORY_ROOT + "index.html")

# Link aws session to application object
application.awsSession = awsSession

# Setup mail 
application.config.update(dict(
    MAIL_USERNAME=creds["MAIL_USER"],
    SENDGRID_KEY=creds["SENDGRID_API_KEY"]
))

#Define root url of site 
if (application.env == "production"):
    application.rootUrl = "https://agri-works.org"
else:
    application.rootUrl = "http://localhost:8080"

apiBlueprint = Blueprint('api', __name__, url_prefix='/api')
api = Api(apiBlueprint, version='1.0', title='Agriworks API',
        description='All of the Controllers and their routes within Agriworks', doc = '/swagger/')

# Import application namespaces. Cannot import from default context due to mutual imports issue
def importControllers():
    with application.app_context():
        from Controllers.AdminController import admin_ns
        from Controllers.AuthenticationController import auth_ns
        from Controllers.UploadController import upload_ns
        from Controllers.DatasetController import dataset_ns
        from Controllers.VisualizeController import visualize_ns
        from Controllers.AgriWatchViewController import view_ns

        api.add_namespace(admin_ns)
        api.add_namespace(auth_ns)
        api.add_namespace(upload_ns)
        api.add_namespace(dataset_ns)
        api.add_namespace(visualize_ns)
        api.add_namespace(view_ns)

        application.register_blueprint(apiBlueprint)

importControllers()

#Default error handler
@application.errorhandler(500)
def handleServerError(e):
    return Response("Internal server error", status=500)

# Protect all endpoints by wrapping relevant view function with authentication required function.
viewFunctions = application.view_functions
for key in viewFunctions.keys():
    if (key not in NON_PROTECTED_ENDPOINTS):
        viewFunctions[key] = authRequired(viewFunctions[key])

if (application.env == "production"):
    sentry_sdk.init(
        dsn="https://a79f91323d954248a3ef209ca9240af7@o462392.ingest.sentry.io/5465735",
        integrations=[FlaskIntegration()],
        traces_sample_rate=1.0
    )

if __name__ == "__main__":
    application.run(port=4000, debug=True)