system.py

import os

from flask import Blueprint, current_app, jsonify, send_from_directory
import logging

logger = logging.getLogger('SchoolGradesServer.System')

bp = Blueprint('system', __name__)

ALLOWED_STATIC_EXT = {
    '.html', '.css', '.js', '.json', '.png', '.jpg', '.jpeg', '.gif',
    '.svg', '.ico', '.woff', '.woff2', '.webmanifest', '.ttf', '.xml', '.txt',
}


@bp.route('/')
def index():
    logger.debug('Accessing index page')
    response = send_from_directory('public', 'index.html')
    response.headers['Cache-Control'] = 'no-cache, no-store, must-revalidate'
    response.headers['Pragma'] = 'no-cache'
    response.headers['Expires'] = '0'
    return response


@bp.route('/<path:filename>')
def static_files(filename):
    ext = os.path.splitext(filename)[1].lower()
    if ext not in ALLOWED_STATIC_EXT:
        return jsonify({'error': 'Forbidden'}), 403

    if any(part.startswith('.') for part in filename.split('/')):
        return jsonify({'error': 'Forbidden'}), 403

    response = send_from_directory('public', filename)
    if ext in ('.js', '.css'):
        response.cache_control.max_age = 31536000
    elif ext in ('.woff', '.woff2', '.ttf', '.png', '.jpg', '.jpeg', '.gif', '.svg', '.ico', '.webmanifest'):
        response.cache_control.max_age = 86400
    return response


@bp.route('/health')
def health_check():
    redis_client = current_app.config.get('REDIS_CLIENT')
    redis_status = 'not_configured'

    if redis_client:
        try:
            redis_client.ping()
            redis_status = 'connected'
        except Exception as e:
            logger.error(f'Health check: Redis ping failed: {e}', exc_info=True)
            return jsonify({
                'status': 'error',
                'redis': 'disconnected',
                'detail': '伺服器內部錯誤',
            }), 503

    return jsonify({'status': 'ok', 'redis': redis_status}), 200


@bp.route('/api/turnstile-config')
def turnstile_config():
    site_key = current_app.config.get('TURNSTILE_SITE_KEY', '')
    return jsonify({'siteKey': site_key})