反向代理：在 Nginx 上使用 Bokeh 服务器的 Flask 应用程序
Reverse-proxying: Flask app with Bokeh server on Nginx
我用 Flask 创建了一个网站，该网站在 Digital Ocean VPN 上提供 Bokeh 应用程序。一切正常，直到我在 this tutorial.
之后使用 Let's Encrypt 保护服务器
在教程的第 3 步中更改了 Nginx 配置文件，这可能是我遇到的问题的症结所在：
当我访问网站时，Flask 内容完美呈现。但是，Bokeh 应用程序不是 运行。在 Inspection Console 中，我收到以下错误（请注意，我散列了我网站的 IP 地址）：
Mixed Content: The page at 'https://example.com/company_abc/' was loaded over HTTPS,
but requested an insecure script
'http://###.###.###.##:5006/company_abc/autoload.js?bokeh-autoload-element=f…aab19c633c95&bokeh-session-id=AvWhaYqOzsX0GZPOjTS5LX2M7Z6arzsBFBxCjb0Up2xP'.
This request has been blocked; the content must be served over HTTPS.
我知道我可能必须使用一种称为反向代理的方法，here 对此进行了描述。但是，我无法让它工作。
有人知道如何解决这个问题吗？描述了类似的问题 。
这是我修改后的服务器文件：
'/etc/nginx/sites-available/default':
upstream flask_siti {
server 127.0.0.1:8118 fail_timeout=0;
}
server {
listen 443 ssl;
server_name example.com www.example.com;
ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
ssl_ciphers '###';
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_stapling on;
ssl_stapling_verify on;
add_header Strict-Transport-Security max-age=15768000;
charset utf-8;
client_max_body_size 75M;
access_log /var/log/nginx/flask/access.log;
error_log /var/log/nginx/flask/error.log;
keepalive_timeout 5;
location / {
# checks for static file, if not found proxy to the app
try_files $uri @proxy_to_app;
}
location @proxy_to_app {
proxy_redirect off;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://flask_siti;
}
}
server {
listen 80;
server_name example.com www.example.com;
return 301 https://$host$request_uri;
}
'/etc/supervisor/conf.d/bokeh_serve.conf':
[program:bokeh_serve]
command=/opt/envs/virtual/bin/bokeh serve company_abc.py company_xyz.py --allow-websocket-origin=www.example.com --allow-websocket-origin=example.com --host=###.###.###.##:5006 --use-xheaders
directory=/opt/webapps/flask_telemetry
autostart=false
autorestart=true
startretries=3
user=nobody
'/etc/supervisor/conf.d/flask.conf'
[program:flask]
command=/opt/envs/virtual/bin/gunicorn -b :8118 website_app:app
directory=/opt/webapps/flask_telemetry
user=nobody
autostart=true
autorestart=true
redirect_stderr=true
这是我的 Flask 应用程序（请注意，我散列了与安全相关的信息）：
from flask import Flask
from flask_sqlalchemy import SQLAlchemy
from flask import render_template, request, redirect, url_for
from flask_security import Security, SQLAlchemyUserDatastore, UserMixin, RoleMixin, login_required, roles_accepted, current_user
from flask_security.decorators import anonymous_user_required
from flask_security.forms import LoginForm
from bokeh.embed import autoload_server
from bokeh.client import pull_session
from wtforms import StringField
from wtforms.validators import InputRequired
from werkzeug.contrib.fixers import ProxyFix
app = Flask(__name__)
app.config['SQLALCHEMY_DATABASE_URI'] = 'postgresql://###:###@localhost/telemetry'
app.config['SECRET_KEY'] = '###'
app.config['SECURITY_REGISTERABLE'] = True
app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False
app.config['SECURITY_USER_IDENTITY_ATTRIBUTES'] = 'username'
app.config['SECURITY_POST_LOGIN_VIEW'] = '/re_direct'
app.debug = True
db = SQLAlchemy(app)
# Define models
roles_users = db.Table('roles_users',
db.Column('user_id', db.Integer(), db.ForeignKey('user.id')),
db.Column('role_id', db.Integer(), db.ForeignKey('role.id')))
class Role(db.Model, RoleMixin):
id = db.Column(db.Integer(), primary_key=True)
name = db.Column(db.String(80), unique=True)
description = db.Column(db.String(255))
class User(db.Model, UserMixin):
id = db.Column(db.Integer, primary_key=True)
username = db.Column(db.String(255), unique=True)
password = db.Column(db.String(255))
active = db.Column(db.Boolean())
confirmed_at = db.Column(db.DateTime())
roles = db.relationship('Role', secondary=roles_users,
backref=db.backref('users', lazy='dynamic'))
class ExtendedLoginForm(LoginForm):
email = StringField('Username', [InputRequired()])
# Setup Flask-Security
user_datastore = SQLAlchemyUserDatastore(db, User, Role)
security = Security(app, user_datastore, login_form=ExtendedLoginForm)
# Views
@app.route('/')
@anonymous_user_required
def index():
return render_template('index.html')
@app.route('/re_direct/')
@login_required
def re_direct():
identifier = current_user.username
print(identifier)
return redirect(url_for(identifier))
@app.route('/index/')
@login_required
@roles_accepted('admin')
def admin():
return render_template('admin.html')
@app.route("/company_abc/")
@login_required
@roles_accepted('company_abc', 'admin')
def company_abc():
url='http://###.###.###.##:5006'
session=pull_session(url=url,app_path="/company_abc")
bokeh_script=autoload_server(None,app_path="/company_abc",session_id=session.id,url=url)
return render_template("company_abc.html", bokeh_script=bokeh_script)
app.wsgi_app = ProxyFix(app.wsgi_app)
if __name__ == '__main__':
app.run()
我在 forum.nginx.org 的 Francis Daly 和 Bokeh google group 的 Bryan Van de ven 的帮助下找到了解决方案。
本质上，Bokeh 应用程序在 Nginx 服务器后面没有正确配置。这是我为让它发挥作用所做的工作：
- 将 Bokeh 应用程序从 company_abc.py 重命名为 company_abc-app.py 以区分应用程序和 URI 中使用的用户名。
- 为了 运行 Bokeh 应用程序，我使用了选项 --use-xheaders
- 更改了 bokeh 服务调用中的一些 --allow-websocket-origins 和 --host 选项，并让它 运行 在 localhost:5006
- 在 Nginx 配置文件中，我为 Bokeh 应用程序声明了一个特定位置 (/company_abc-app/) 并将其放在位置 /
之前
- 在 Flask 应用程序中，我从 localhost:5006 提取 Bokeh 会话，但随后将 autoload_server 的 URL 更改为包含 https，即 https://example.com，这是我认为症结所在。
以下是可用的文件：
'/etc/nginx/sites-available/default':
upstream flask_siti {
server 127.0.0.1:8118 fail_timeout=0;
}
upstream bokeh_siti {
server 127.0.0.1:5006 fail_timeout=0;
}
server {
listen 443 ssl;
server_name example.com www.example.com;
ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
ssl_ciphers '###';
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_stapling on;
ssl_stapling_verify on;
add_header Strict-Transport-Security max-age=15768000;
charset utf-8;
client_max_body_size 75M;
access_log /var/log/nginx/flask/access.log;
error_log /var/log/nginx/flask/error.log;
keepalive_timeout 5;
location /company_abc-app/ {
proxy_pass http://bokeh_siti;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host:$server_port;
proxy_buffering off;
}
location / {
# checks for static file, if not found proxy to the app
try_files $uri @proxy_to_app;
}
location @proxy_to_app {
proxy_pass http://flask_siti;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host:$server_port;
proxy_buffering off;
}
}
server {
listen 80;
server_name example.com www.example.com;
return 301 https://$host$request_uri;
}
'/etc/supervisor/conf.d/bokeh_serve.conf':
[program:bokeh_serve]
command=/opt/envs/virtual/bin/bokeh serve company_abc-app.py --allow-websocket-origin=example.com --allow-websocket-origin=www.example.com --port=5006 --host=example.com:443 --host=www.example.com:443 --host=127.0.0.1:5006 --use-xheaders
directory=/opt/webapps/flask_telemetry
autostart=false
autorestart=true
startretries=3
user=nobody
'/etc/supervisor/conf.d/flask.conf'
[program:flask]
command=/opt/envs/virtual/bin/gunicorn -b :8118 website_app:app
directory=/opt/webapps/flask_telemetry
user=nobody
autostart=true
autorestart=true
redirect_stderr=true
这是我的 Flask 应用程序（请注意，我散列了与安全相关的信息）：
from flask import Flask
from flask_sqlalchemy import SQLAlchemy
from flask import render_template, request, redirect, url_for
from flask_security import Security, SQLAlchemyUserDatastore, UserMixin, RoleMixin, login_required, roles_accepted, current_user
from flask_security.decorators import anonymous_user_required
from flask_security.forms import LoginForm
from bokeh.embed import autoload_server
from bokeh.client import pull_session
from wtforms import StringField
from wtforms.validators import InputRequired
from werkzeug.contrib.fixers import ProxyFix
app = Flask(__name__)
app.config['SQLALCHEMY_DATABASE_URI'] = 'postgresql://user:password@localhost/telemetry'
app.config['SECRET_KEY'] = '###'
app.config['SECURITY_REGISTERABLE'] = True
app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False
app.config['SECURITY_USER_IDENTITY_ATTRIBUTES'] = 'username'
app.config['SECURITY_POST_LOGIN_VIEW'] = '/re_direct'
app.debug = True
db = SQLAlchemy(app)
# Define models
roles_users = db.Table('roles_users',
db.Column('user_id', db.Integer(), db.ForeignKey('user.id')),
db.Column('role_id', db.Integer(), db.ForeignKey('role.id')))
class Role(db.Model, RoleMixin):
id = db.Column(db.Integer(), primary_key=True)
name = db.Column(db.String(80), unique=True)
description = db.Column(db.String(255))
class User(db.Model, UserMixin):
id = db.Column(db.Integer, primary_key=True)
username = db.Column(db.String(255), unique=True)
password = db.Column(db.String(255))
active = db.Column(db.Boolean())
confirmed_at = db.Column(db.DateTime())
roles = db.relationship('Role', secondary=roles_users,
backref=db.backref('users', lazy='dynamic'))
class ExtendedLoginForm(LoginForm):
email = StringField('Username', [InputRequired()])
# Setup Flask-Security
user_datastore = SQLAlchemyUserDatastore(db, User, Role)
security = Security(app, user_datastore, login_form=ExtendedLoginForm)
# # Create a user to test with
# @app.before_first_request
# def create_user():
# print('Create User')
# db.create_all()
# user_datastore.create_role(name='company_abc')
# user_datastore.create_role(name='admin')
# user_datastore.create_user(username='company_abc', password='###', roles=['company_abc'])
# user_datastore.create_user(username='admin', password='###', roles=['admin'])
# db.session.commit()
# print('User created')
# Views
@app.route('/')
@anonymous_user_required
def index():
return render_template('index.html')
@app.route('/re_direct/')
@login_required
def re_direct():
identifier = current_user.username
print(identifier)
return redirect(url_for(identifier))
@app.route('/index/')
@login_required
@roles_accepted('admin')
def admin():
return render_template('admin.html')
@app.route("/company_abc/")
@login_required
@roles_accepted('company_abc', 'admin')
def company_abc():
url='http://127.0.0.1:5006'
session=pull_session(url=url,app_path="/company_abc-app")
url_https='https://company_abc.net'
bokeh_script=autoload_server(None,app_path="/company_abc-app",session_id=session.id,url=url_https)
return render_template("company_abc.html", bokeh_script=bokeh_script)
app.wsgi_app = ProxyFix(app.wsgi_app)
if __name__ == '__main__':
app.run()
我用 Flask 创建了一个网站，该网站在 Digital Ocean VPN 上提供 Bokeh 应用程序。一切正常，直到我在 this tutorial.
之后使用 Let's Encrypt 保护服务器在教程的第 3 步中更改了 Nginx 配置文件，这可能是我遇到的问题的症结所在：
当我访问网站时，Flask 内容完美呈现。但是，Bokeh 应用程序不是 运行。在 Inspection Console 中，我收到以下错误（请注意，我散列了我网站的 IP 地址）：
Mixed Content: The page at 'https://example.com/company_abc/' was loaded over HTTPS,
but requested an insecure script
'http://###.###.###.##:5006/company_abc/autoload.js?bokeh-autoload-element=f…aab19c633c95&bokeh-session-id=AvWhaYqOzsX0GZPOjTS5LX2M7Z6arzsBFBxCjb0Up2xP'.
This request has been blocked; the content must be served over HTTPS.
我知道我可能必须使用一种称为反向代理的方法，here 对此进行了描述。但是，我无法让它工作。
有人知道如何解决这个问题吗？描述了类似的问题
这是我修改后的服务器文件：
'/etc/nginx/sites-available/default':
upstream flask_siti {
server 127.0.0.1:8118 fail_timeout=0;
}
server {
listen 443 ssl;
server_name example.com www.example.com;
ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
ssl_ciphers '###';
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_stapling on;
ssl_stapling_verify on;
add_header Strict-Transport-Security max-age=15768000;
charset utf-8;
client_max_body_size 75M;
access_log /var/log/nginx/flask/access.log;
error_log /var/log/nginx/flask/error.log;
keepalive_timeout 5;
location / {
# checks for static file, if not found proxy to the app
try_files $uri @proxy_to_app;
}
location @proxy_to_app {
proxy_redirect off;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://flask_siti;
}
}
server {
listen 80;
server_name example.com www.example.com;
return 301 https://$host$request_uri;
}
'/etc/supervisor/conf.d/bokeh_serve.conf':
[program:bokeh_serve]
command=/opt/envs/virtual/bin/bokeh serve company_abc.py company_xyz.py --allow-websocket-origin=www.example.com --allow-websocket-origin=example.com --host=###.###.###.##:5006 --use-xheaders
directory=/opt/webapps/flask_telemetry
autostart=false
autorestart=true
startretries=3
user=nobody
'/etc/supervisor/conf.d/flask.conf'
[program:flask]
command=/opt/envs/virtual/bin/gunicorn -b :8118 website_app:app
directory=/opt/webapps/flask_telemetry
user=nobody
autostart=true
autorestart=true
redirect_stderr=true
这是我的 Flask 应用程序（请注意，我散列了与安全相关的信息）：
from flask import Flask
from flask_sqlalchemy import SQLAlchemy
from flask import render_template, request, redirect, url_for
from flask_security import Security, SQLAlchemyUserDatastore, UserMixin, RoleMixin, login_required, roles_accepted, current_user
from flask_security.decorators import anonymous_user_required
from flask_security.forms import LoginForm
from bokeh.embed import autoload_server
from bokeh.client import pull_session
from wtforms import StringField
from wtforms.validators import InputRequired
from werkzeug.contrib.fixers import ProxyFix
app = Flask(__name__)
app.config['SQLALCHEMY_DATABASE_URI'] = 'postgresql://###:###@localhost/telemetry'
app.config['SECRET_KEY'] = '###'
app.config['SECURITY_REGISTERABLE'] = True
app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False
app.config['SECURITY_USER_IDENTITY_ATTRIBUTES'] = 'username'
app.config['SECURITY_POST_LOGIN_VIEW'] = '/re_direct'
app.debug = True
db = SQLAlchemy(app)
# Define models
roles_users = db.Table('roles_users',
db.Column('user_id', db.Integer(), db.ForeignKey('user.id')),
db.Column('role_id', db.Integer(), db.ForeignKey('role.id')))
class Role(db.Model, RoleMixin):
id = db.Column(db.Integer(), primary_key=True)
name = db.Column(db.String(80), unique=True)
description = db.Column(db.String(255))
class User(db.Model, UserMixin):
id = db.Column(db.Integer, primary_key=True)
username = db.Column(db.String(255), unique=True)
password = db.Column(db.String(255))
active = db.Column(db.Boolean())
confirmed_at = db.Column(db.DateTime())
roles = db.relationship('Role', secondary=roles_users,
backref=db.backref('users', lazy='dynamic'))
class ExtendedLoginForm(LoginForm):
email = StringField('Username', [InputRequired()])
# Setup Flask-Security
user_datastore = SQLAlchemyUserDatastore(db, User, Role)
security = Security(app, user_datastore, login_form=ExtendedLoginForm)
# Views
@app.route('/')
@anonymous_user_required
def index():
return render_template('index.html')
@app.route('/re_direct/')
@login_required
def re_direct():
identifier = current_user.username
print(identifier)
return redirect(url_for(identifier))
@app.route('/index/')
@login_required
@roles_accepted('admin')
def admin():
return render_template('admin.html')
@app.route("/company_abc/")
@login_required
@roles_accepted('company_abc', 'admin')
def company_abc():
url='http://###.###.###.##:5006'
session=pull_session(url=url,app_path="/company_abc")
bokeh_script=autoload_server(None,app_path="/company_abc",session_id=session.id,url=url)
return render_template("company_abc.html", bokeh_script=bokeh_script)
app.wsgi_app = ProxyFix(app.wsgi_app)
if __name__ == '__main__':
app.run()
我在 forum.nginx.org 的 Francis Daly 和 Bokeh google group 的 Bryan Van de ven 的帮助下找到了解决方案。
本质上，Bokeh 应用程序在 Nginx 服务器后面没有正确配置。这是我为让它发挥作用所做的工作：
- 将 Bokeh 应用程序从 company_abc.py 重命名为 company_abc-app.py 以区分应用程序和 URI 中使用的用户名。
- 为了 运行 Bokeh 应用程序，我使用了选项 --use-xheaders
- 更改了 bokeh 服务调用中的一些 --allow-websocket-origins 和 --host 选项，并让它 运行 在 localhost:5006
- 在 Nginx 配置文件中，我为 Bokeh 应用程序声明了一个特定位置 (/company_abc-app/) 并将其放在位置 / 之前
- 在 Flask 应用程序中，我从 localhost:5006 提取 Bokeh 会话，但随后将 autoload_server 的 URL 更改为包含 https，即 https://example.com，这是我认为症结所在。
以下是可用的文件：
'/etc/nginx/sites-available/default':
upstream flask_siti {
server 127.0.0.1:8118 fail_timeout=0;
}
upstream bokeh_siti {
server 127.0.0.1:5006 fail_timeout=0;
}
server {
listen 443 ssl;
server_name example.com www.example.com;
ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
ssl_ciphers '###';
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_stapling on;
ssl_stapling_verify on;
add_header Strict-Transport-Security max-age=15768000;
charset utf-8;
client_max_body_size 75M;
access_log /var/log/nginx/flask/access.log;
error_log /var/log/nginx/flask/error.log;
keepalive_timeout 5;
location /company_abc-app/ {
proxy_pass http://bokeh_siti;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host:$server_port;
proxy_buffering off;
}
location / {
# checks for static file, if not found proxy to the app
try_files $uri @proxy_to_app;
}
location @proxy_to_app {
proxy_pass http://flask_siti;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host:$server_port;
proxy_buffering off;
}
}
server {
listen 80;
server_name example.com www.example.com;
return 301 https://$host$request_uri;
}
'/etc/supervisor/conf.d/bokeh_serve.conf':
[program:bokeh_serve]
command=/opt/envs/virtual/bin/bokeh serve company_abc-app.py --allow-websocket-origin=example.com --allow-websocket-origin=www.example.com --port=5006 --host=example.com:443 --host=www.example.com:443 --host=127.0.0.1:5006 --use-xheaders
directory=/opt/webapps/flask_telemetry
autostart=false
autorestart=true
startretries=3
user=nobody
'/etc/supervisor/conf.d/flask.conf'
[program:flask]
command=/opt/envs/virtual/bin/gunicorn -b :8118 website_app:app
directory=/opt/webapps/flask_telemetry
user=nobody
autostart=true
autorestart=true
redirect_stderr=true
这是我的 Flask 应用程序（请注意，我散列了与安全相关的信息）：
from flask import Flask
from flask_sqlalchemy import SQLAlchemy
from flask import render_template, request, redirect, url_for
from flask_security import Security, SQLAlchemyUserDatastore, UserMixin, RoleMixin, login_required, roles_accepted, current_user
from flask_security.decorators import anonymous_user_required
from flask_security.forms import LoginForm
from bokeh.embed import autoload_server
from bokeh.client import pull_session
from wtforms import StringField
from wtforms.validators import InputRequired
from werkzeug.contrib.fixers import ProxyFix
app = Flask(__name__)
app.config['SQLALCHEMY_DATABASE_URI'] = 'postgresql://user:password@localhost/telemetry'
app.config['SECRET_KEY'] = '###'
app.config['SECURITY_REGISTERABLE'] = True
app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False
app.config['SECURITY_USER_IDENTITY_ATTRIBUTES'] = 'username'
app.config['SECURITY_POST_LOGIN_VIEW'] = '/re_direct'
app.debug = True
db = SQLAlchemy(app)
# Define models
roles_users = db.Table('roles_users',
db.Column('user_id', db.Integer(), db.ForeignKey('user.id')),
db.Column('role_id', db.Integer(), db.ForeignKey('role.id')))
class Role(db.Model, RoleMixin):
id = db.Column(db.Integer(), primary_key=True)
name = db.Column(db.String(80), unique=True)
description = db.Column(db.String(255))
class User(db.Model, UserMixin):
id = db.Column(db.Integer, primary_key=True)
username = db.Column(db.String(255), unique=True)
password = db.Column(db.String(255))
active = db.Column(db.Boolean())
confirmed_at = db.Column(db.DateTime())
roles = db.relationship('Role', secondary=roles_users,
backref=db.backref('users', lazy='dynamic'))
class ExtendedLoginForm(LoginForm):
email = StringField('Username', [InputRequired()])
# Setup Flask-Security
user_datastore = SQLAlchemyUserDatastore(db, User, Role)
security = Security(app, user_datastore, login_form=ExtendedLoginForm)
# # Create a user to test with
# @app.before_first_request
# def create_user():
# print('Create User')
# db.create_all()
# user_datastore.create_role(name='company_abc')
# user_datastore.create_role(name='admin')
# user_datastore.create_user(username='company_abc', password='###', roles=['company_abc'])
# user_datastore.create_user(username='admin', password='###', roles=['admin'])
# db.session.commit()
# print('User created')
# Views
@app.route('/')
@anonymous_user_required
def index():
return render_template('index.html')
@app.route('/re_direct/')
@login_required
def re_direct():
identifier = current_user.username
print(identifier)
return redirect(url_for(identifier))
@app.route('/index/')
@login_required
@roles_accepted('admin')
def admin():
return render_template('admin.html')
@app.route("/company_abc/")
@login_required
@roles_accepted('company_abc', 'admin')
def company_abc():
url='http://127.0.0.1:5006'
session=pull_session(url=url,app_path="/company_abc-app")
url_https='https://company_abc.net'
bokeh_script=autoload_server(None,app_path="/company_abc-app",session_id=session.id,url=url_https)
return render_template("company_abc.html", bokeh_script=bokeh_script)
app.wsgi_app = ProxyFix(app.wsgi_app)
if __name__ == '__main__':
app.run()