Add assets

jvasile · jvasile · commit 6a5b36392b1b · 2020-01-28T06:34:08.000-05:00
diff --git a/requirements.txt b/requirements.txt
@@ -0,0 +1,8 @@
+#flask-restplus-csrf==0.12.1a
+flask==1.1.1
+aniso8601==8.0.0
+pytz==2019.3
+jsonschema==3.2.0
+flask-sqlalchemy==2.4.1
+flask-login==0.4.1
+pycryptodome==3.9.4
diff --git a/static/js/csrf.js b/static/js/csrf.js
@@ -0,0 +1,27 @@
+function getMeta(name) {
+    // <meta name="foo" content="bar">
+    // getMeta("foo") -=> "bar"
+    
+    const metas = document.getElementsByTagName("meta");
+
+    for (let i = 0; i < metas.length; i++) {
+	if (metas[i].getAttribute("name") === name) {
+	    return metas[i].getAttribute("content");
+	}
+    }
+
+  return "";
+}
+
+function addTokenToForms() {
+    const forms = document.getElementsByTagName("form");
+
+    for (let i = 0; i < forms.length; i++) {
+	var input = document.createElement("input");
+	input.type="hidden";
+	input.name="csrf";
+	input.value=getMeta("csrf");
+	forms[i].appendChild(input);
+    }
+}
+window.onload = addTokenToForms;
diff --git a/templates/home.html b/templates/home.html
@@ -0,0 +1,34 @@
+{% extends "layout.html" %}
+{% block content %}
+  <div class="jumbo">
+    <h2>Welcome to the Flask app</h2>
+	{% if message is defined %}
+	<font color="red">{{ message }}</font>
+	{% endif %}
+	{% if session.logged_in %}
+	<p>You are currently logged in as {{ session.username }}.</p>
+	{% endif %}
+	<p>Here are some links:
+	  <ul>
+	    <li><a href="/web">Home</a></li>
+	    {% if session.logged_in %}
+	    <li><a href="logout">Logout</a></li>
+	    {% endif %}
+	    </ul>
+	</p>
+	{% if not session.logged_in %}
+	<h3>Login Form</h3>
+	<form method="post" action="/web/login">
+	  <input type="text" name="username" />
+	  <input type="password" name="passphrase" />
+	  <input type="submit" />
+	</form>
+	{% endif %}
+	
+	<h3>Get secure info</h3>
+	<form method="post" action="/web/secure">
+	  <input type="submit" />
+	</form>
+  </div>
+{% endblock %}
+  
diff --git a/templates/layout.html b/templates/layout.html
@@ -0,0 +1,20 @@
+<!DOCTYPE html>
+<html>
+  <head>
+    <title>Toy Flask App</title>
+    <script type="text/javascript" src="/static/js/csrf.js"></script>
+  </head>
+  <body>
+   
+    <header>
+      <div class="container">
+        <h1 class="logo">Toy Flask App With CSRF</h1>
+      </div>
+    </header> 
+     
+    <div class="container">
+      {% block content %}
+      {% endblock %}
+    </div>
+  </body>
+</html>
