from __future__ import annotations import hashlib,json,os,secrets,sqlite3,time from datetime import datetime,timezone from pathlib import Path from fastapi import FastAPI,Request,HTTPException,Depends from fastapi.responses import HTMLResponse,JSONResponse,FileResponse from pydantic import BaseModel DATA=Path(os.getenv('STREAMFORGE_LICENSE_DATA','./license_server/data')).resolve();DATA.mkdir(parents=True,exist_ok=True);DB=DATA/'licences.db';UPDATES=DATA/'updates';UPDATES.mkdir(exist_ok=True) ADMIN_USER=os.getenv('STREAMFORGE_LICENSE_ADMIN','admin');ADMIN_PASS=os.getenv('STREAMFORGE_LICENSE_PASSWORD','change-me-now') app=FastAPI(title='StreamForge Licence Server',docs_url=None,redoc_url=None,openapi_url=None) def conn(): c=sqlite3.connect(DB);c.row_factory=sqlite3.Row;return c def init(): with conn() as c:c.executescript('''CREATE TABLE IF NOT EXISTS licences(id INTEGER PRIMARY KEY AUTOINCREMENT,identifier TEXT UNIQUE NOT NULL,identifier_type TEXT NOT NULL CHECK(identifier_type IN ('ip','domain')),plan TEXT NOT NULL CHECK(plan IN ('basic','premium','legend')),status TEXT DEFAULT 'active',customer TEXT DEFAULT '',notes TEXT DEFAULT '',created_at TEXT DEFAULT CURRENT_TIMESTAMP,updated_at TEXT DEFAULT CURRENT_TIMESTAMP,last_seen_at TEXT,last_install_id TEXT DEFAULT '');CREATE TABLE IF NOT EXISTS sessions(token_hash TEXT PRIMARY KEY,expires REAL NOT NULL);''') init() def auth(req:Request): raw=req.cookies.get('sfls'); if not raw:raise HTTPException(401) h=hashlib.sha256(raw.encode()).hexdigest() with conn() as c:r=c.execute('SELECT expires FROM sessions WHERE token_hash=?',(h,)).fetchone() if not r or r['expires']StreamForge Licence Server

StreamForge Licence Server

''') with conn() as c:rows=[dict(x) for x in c.execute('SELECT * FROM licences ORDER BY id DESC')] data=json.dumps(rows).replace('StreamForge Licence Server

StreamForge Licence Server

● Online

Register IP / Domain

Identifier	Type	Plan	Status	Customer	Last seen

''') @app.post('/login') async def login(req:Request): d=await req.json(); if not secrets.compare_digest(str(d.get('username','')),ADMIN_USER) or not secrets.compare_digest(str(d.get('password','')),ADMIN_PASS):raise HTTPException(401) raw=secrets.token_urlsafe(32);h=hashlib.sha256(raw.encode()).hexdigest() with conn() as c:c.execute('INSERT INTO sessions(token_hash,expires) VALUES(?,?)',(h,time.time()+86400));c.commit() r=JSONResponse({'ok':True});r.set_cookie('sfls',raw,httponly=True,samesite='strict',max_age=86400);return r @app.post('/logout') def logout():r=JSONResponse({'ok':True});r.delete_cookie('sfls');return r class LicIn(BaseModel):identifier:str;identifier_type:str;plan:str;customer:str='';notes:str='' @app.post('/admin/licences') def add_lic(x:LicIn,req:Request,_=Depends(auth)): ident=normalize_domain(x.identifier) if x.identifier_type=='domain' else x.identifier.strip() if x.identifier_type not in ('ip','domain') or x.plan not in ('basic','premium','legend'):raise HTTPException(400,'Invalid licence fields') try: with conn() as c:cur=c.execute('INSERT INTO licences(identifier,identifier_type,plan,customer,notes) VALUES(?,?,?,?,?)',(ident,x.identifier_type,x.plan,x.customer,x.notes));c.commit();return {'id':cur.lastrowid} except Exception as e:raise HTTPException(400,str(e)) @app.patch('/admin/licences/{lid}') async def edit(lid:int,req:Request,_=Depends(auth)): d=await req.json();allowed={'plan','status','customer','notes'};sets=[];args=[] for k,v in d.items(): if k in allowed:sets.append(k+'=?');args.append(v) if sets: args.append(lid) with conn() as c:c.execute('UPDATE licences SET '+','.join(sets)+',updated_at=CURRENT_TIMESTAMP WHERE id=?',args);c.commit() return {'ok':True} @app.delete('/admin/licences/{lid}') def delete(lid:int,req:Request,_=Depends(auth)): with conn() as c:c.execute('DELETE FROM licences WHERE id=?',(lid,));c.commit() return {'ok':True}