File

mod_rest/example/app.py @ 6281:9d88c3d9eea5

mod_http_oauth2: Enforce the registered grant types Thus a client can limit itself to certain grant types. Not sure if this prevents any attacks, but what was the point of including this in the registration if it was not going to be enforced? This became easier to do with client_id being available earlier.
author Kim Alvefur <zash@zash.se>
date Mon, 02 Jun 2025 20:55:20 +0200
parent 4248:f3fbfde9683d
line wrap: on
line source

from flask import Flask, Response, request, jsonify

app = Flask("echobot")


@app.route("/api", methods=["OPTIONS"])
def options():
    """
    Startup check. Return an appropriate Accept header to confirm the
    data type to use.
    """

    return Response(status=200, headers={"accept": "application/json"})


@app.route("/api", methods=["POST"])
def hello():
    """
    Example RESTful JSON format stanza handler.
    """

    print(request.data)
    if request.is_json:
        data = request.get_json()

        if "kind" not in data:
            return Response(status=400)

        if data["kind"] == "message" and "body" in data:
            # Reply to a message
            return jsonify({"body": "Yes this is flask app"})

        elif data["kind"] == "iq" and data["type"] == "get":
            if "disco" in data:
                # Return supported features
                return jsonify(
                    {
                        "disco": {
                            "identities": [
                                {
                                    "category": "component",
                                    "type": "generic",
                                    "name": "Flask app",
                                }
                            ],
                            "features": [
                                "http://jabber.org/protocol/disco#info",
                                "http://jabber.org/protocol/disco#items",
                                "jabber:iq:version",
                                "urn:xmpp:ping",
                            ],
                        }
                    }
                )

            elif "items" in data:
                # Disco items
                return jsonify(
                    {"items": [{"jid": "example.org", "name": "Example Dot Org"}]}
                )

            elif "version" in data:
                # Version info
                return jsonify({"version": {"name": "app.py", "version": "0"}})

            elif "ping" in data:
                # Respond to ping
                return Response(status=204)

    return Response(status=501)


if __name__ == "__main__":
    app.run()