readonly: add new readonly mode

Author: maxux

src/config.py.sample

@@ -85,9 +85,17 @@ config = {
     ##
     # 'userdata-root-path': '/opt/0-hub/public',
     # 'workdir-root-path': '/opt/0-hub/workdir',
- 
+
+    ## In order to host a hub which is a mirror of another
+    ## hub, since hub right now don't support multiple master,
+    ## you should enable this read-only mode to avoid modifying
+    ## your local database and be able to stay synced with your
+    ## main hub instance. For a normal or main hub instance,
+    ## keep this setting to False
+    'readonly': False,
+
     ## By default, the hub is made to be used publicly
-    ## and needs to be protected (with itsyou.online)
+    ## and needs to be protected (with threefold connect)
     ##
     ## If you are running a local test hub on your local
     ## network and you don't have any security issue, you

src/flist-uploader.py

@@ -272,6 +272,13 @@ def logout():
 def login_method():
     return internalRedirect("logins.html")
 
+@app.route('/readonly')
+def read_only_mode():
+    if not config['readonly']:
+        return redirect("/")
+
+    return globalTemplate("readonly.html", {})
+
 @app.route('/login-iyo')
 @hub.itsyouonline.force_login()
 def login_iyo():

src/hub/security.py

@@ -8,6 +8,9 @@ def apicall():
     def decorator(handler):
         @wraps(handler)
         def _wrapper(*args, **kwargs):
+            if config['readonly']:
+                return jsonify({"message": "readonly mode", "status": "error"}), 400
+
             if not config['authentication']:
                 session['accounts'] = ['Administrator']
                 session['username'] = 'Administrator'
@@ -48,6 +51,9 @@ def protected():
     def decorator(handler):
         @wraps(handler)
         def _wrapper(*args, **kwargs):
+            if config['readonly']:
+                return redirect("/readonly")
+
             if not config['authentication']:
                 session['accounts'] = ['Administrator']
                 session['username'] = 'Administrator'

src/templates/readonly.html

@@ -0,0 +1,13 @@
+{% extends "layout.html" %}
+{% block title %}Zero-OS Hub{% endblock %}
+
+{% block content %}
+<div class="jumbotron">
+    <div class="container">
+        <h1>Instance modification disabled</h1>
+        <p>This Hub instance doesn't allow modification, this is a <code>read-only hub instance</code>.</p>
+        <p>This is probably a mirror of a main instance, you should point to that one, or
+        this instance is a special serve-only instance.<p>
+    </div>
+</div>
+{% endblock %}