Access Restricted

import os import sys import urllib.parse # 1. Base directory setup BASE_DIR = os.path.dirname(os.path.abspath(__file__)) if BASE_DIR not in sys.path: sys.path.insert(0, BASE_DIR) # 2. Redirect PyMuPDF messages to /dev/null os.environ["PYMUPDF_MESSAGE"] = "path:/dev/null" # 3. Security Access Code Config ACCESS_CODE = "31337" AUTH_COOKIE_NAME = "km_auth_31337" # 4. Post-fork lazy application loader _app_instance = None def get_app(): global _app_instance if _app_instance is None: from a2wsgi import ASGIMiddleware from server.main import app _app_instance = ASGIMiddleware(app) return _app_instance def application(environ, start_response): path_info = environ.get("PATH_INFO", "/") query_str = environ.get("QUERY_STRING", "") params = urllib.parse.parse_qs(query_str) provided_code = params.get("code", [""])[0] cookies = environ.get("HTTP_COOKIE", "") has_valid_cookie = f"{AUTH_COOKIE_NAME}=1" in cookies referer = environ.get("HTTP_REFERER", "") has_valid_referer = "dev.enivid.eu" in referer or "enivid" in referer is_static = path_info.startswith("/static/") is_authorized = ( (provided_code == ACCESS_CODE) or has_valid_cookie or has_valid_referer or is_static ) should_set_cookie = (provided_code == ACCESS_CODE) if not is_authorized: if path_info.startswith("/api/"): # Return JSON for API calls status = "403 Forbidden" headers = [("Content-Type", "application/json; charset=utf-8")] start_response(status, headers) return [b'{"detail": "Authentication required. Please refresh with ?code=31337"}'] # Return HTML Passcode Unlock Screen for browser visits status = "403 Forbidden" headers = [("Content-Type", "text/html; charset=utf-8")] start_response(status, headers) html = """ Access Restricted — KM-1 Estimator

Please enter the security passkey to access this environment.

""" return [html.encode("utf-8")] # 6. User is Authorized -> Dispatch to FastAPI app_middleware = get_app() def wrapped_start_response(status, response_headers, exc_info=None): if should_set_cookie: cookie_header = f"{AUTH_COOKIE_NAME}=1; Path=/; Max-Age=2592000; SameSite=Lax" response_headers.append(("Set-Cookie", cookie_header)) return start_response(status, response_headers, exc_info) response = app_middleware(environ, wrapped_start_response) body = [] try: for chunk in response: if chunk: body.append(chunk) finally: if hasattr(response, "close"): response.close() return body