# -*- coding: utf-8 -*- import string import flask_restful from flask import Flask, abort, jsonify from flask_jwt_extended import ( JWTManager ) from flask_sqlalchemy import SQLAlchemy from flask_marshmallow import Marshmallow from hashids import Hashids from webcreator.response import ResponseCode, response_result from webcreator.log import logger from .config import config # 初始化app app = Flask(__name__) # 初始化sqlalchemy app.config.from_object(config) db = SQLAlchemy(app) # 初始化marshmallow ma = Marshmallow(app) # 增加jwt校验 jwt = JWTManager(app) hash_ids = Hashids(salt='hvwptlmj027d5quf', min_length=8, alphabet=string.ascii_lowercase + string.digits) # hash函数 # 保留flask原生异常处理 handle_exception = app.handle_exception handle_user_exception = app.handle_user_exception # 过期令牌 @jwt.expired_token_loader def expired_token_callback(jwt_header, jwt_payload): logger.info(jwt_payload) return jsonify({ 'code': 4011, 'msg': 'token expired', 'data': jwt_header }) # 无效令牌 @jwt.invalid_token_loader def invalid_token_callback(error): # we have to keep the argument here, since it's passed in by the caller internally return jsonify({ 'code': 4012, 'msg': 'invalid token', 'data': error }) # 校验失败 @jwt.unauthorized_loader def unauthorized_callback(error): return jsonify({ 'code': 4013, 'msg': 'unauthorized', 'data': error }) def _custom_abort(http_status_code, **kwargs): """ 自定义abort 400响应数据格式 """ if http_status_code == 400: message = kwargs.get('message') if isinstance(message, dict): param, info = list(message.items())[0] data = '{}:{}!'.format(param, info) return abort(jsonify(response_result(ResponseCode.PARAMETER_ERROR, data=data))) else: return abort(jsonify(response_result(ResponseCode.PARAMETER_ERROR, data=message))) # return { 'code': http_status_code, 'msg': kwargs.get('message') } return abort(http_status_code) def _access_control(response): """ 解决跨域请求 """ # response.headers['Access-Control-Allow-Origin'] = '*' # response.headers['Access-Control-Allow-Methods'] = 'GET,HEAD,PUT,PATCH,POST,DELETE' # response.headers['Access-Control-Allow-Headers'] = 'Content-Type' # response.headers['Access-Control-Max-Age'] = 86400 response.headers['Access-Control-Allow-Origin'] = '*' response.headers['Access-Control-Allow-Methods'] = 'GET, HEAD, PUT, PATCH, POST, DELETE, OPTIONS' response.headers['Access-Control-Allow-Headers'] = 'Origin, No-Cache, X-Requested-With, If-Modified-Since, Pragma, Last-Modified, Cache-Control, Expires, Content-Type, X-E4M-With, Authorization' response.headers['Access-Control-Expose-Headers'] = 'Authorization' response.headers['Access-Control-Max-Age'] = 86400 response.headers['Access-Control-Request-Headers'] = 'Origin, X-Requested-With, Content-Type, Accept, Authorization' return response def create_app(config): """ 创建app """ # 添加配置 app.config.from_object(config) # 解决跨域 app.after_request(_access_control) # 自定义abort 400 响应数据格式 flask_restful.abort = _custom_abort # 数据库初始化 db.init_app(app) # 注册蓝图 from views import api_v1 app.register_blueprint(api_v1, url_prefix='/api/v1') # 使用flask原生异常处理程序 app.handle_exception = handle_exception app.handle_user_exception = handle_user_exception return app