carlostellocba/admin-edu-space
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(bff): agregar endpoint /settings/demo-mode y proxy /api/v1 en Express Node.js y Flask API

Browse Source
This commit is contained in:
carlostellocba
2026-09-23 16:42:11 -03:00
parent dd4a4c042a
commit 6907134c5e
6 changed files with 173 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/app/routes/api/admin.py
+71
View File
@@ -1941,6 +1941,77 @@ def update_auth_providers():
}), 200
@api_admin_bp.route('/settings/demo-mode', methods=['GET', 'POST'])
@jwt_required
def toggle_demo_mode_api():
"""Habilita o deshabilita el Acceso Rápido Demo y las cuentas default (Bedelía, Docente, Alumno) vía API REST"""
from app.models.setting import SystemSetting
from app.models.user import User
from app.models.audit_log import AuditLog
from sqlalchemy import func
acting_user = getattr(g, 'jwt_user', None)
if not (acting_user and (acting_user.is_admin() or getattr(acting_user, 'role', '').upper() == 'ADMIN')):
return jsonify({'error': 'Forbidden', 'message': 'Solo administradores pueden modificar el modo demo.'}), 403
demo_emails = ['bedelia@edu-space.com', 'docente@edu-space.com', 'alumno@edu-space.com']
if request.method == 'GET':
demo_access_enabled = SystemSetting.get_value('demo_access_enabled', 'true') in ['true', 'True', '1', True]
demo_users = User.query.filter(func.lower(User.email).in_(demo_emails)).all()
demo_accounts_active = any(u.is_active for u in demo_users)
return jsonify({
'status': 'success',
'demo_access_enabled': demo_access_enabled,
'demo_accounts_active': demo_accounts_active
}), 200
data = request.get_json(silent=True) or request.form.to_dict() or {}
if 'enabled' in data:
target_state = data['enabled'] in [True, 'true', '1', 'on']
else:
current_state = SystemSetting.get_value('demo_access_enabled', 'true') in ['true', 'True', '1', True]
target_state = not current_state
SystemSetting.set_value(
'demo_access_enabled',
'true' if target_state else 'false',
'Acceso Rápido Demo en pantalla de Login',
category='security'
)
demo_users = User.query.filter(func.lower(User.email).in_(demo_emails)).all()
for u in demo_users:
u.is_active = target_state
db.session.commit()
action_name = 'ENABLE_DEMO_ACCOUNTS' if target_state else 'DISABLE_DEMO_ACCOUNTS'
msg_detail = (
'Acceso Rápido Demo habilitado y cuentas Bedelía, Docente y Alumno activadas'
if target_state else
'Acceso Rápido Demo deshabilitado y cuentas default (Bedelía, Docente, Alumno) desactivadas'
)
try:
audit = AuditLog(
user_id=acting_user.id,
user_email=acting_user.email,
action=action_name,
module='settings',
details=msg_detail
)
db.session.add(audit)
db.session.commit()
except Exception:
pass
return jsonify({
'status': 'success',
'message': msg_detail,
'demo_access_enabled': target_state,
'demo_accounts_active': target_state
}), 200
@api_admin_bp.route('/settings/google-oauth', methods=['POST'])
@jwt_required
def update_google_oauth_settings():
backend/app/routes/api/auth.py
+3 -1
View File
@@ -37,6 +37,7 @@ def get_auth_providers():
google_val = SystemSetting.get_value('auth_google_enabled', 'false').lower() in ('true', '1')
moodle_val = SystemSetting.get_value('auth_moodle_enabled', 'false').lower() in ('true', '1')
google_client_id = SystemSetting.get_value('google_client_id', '')
demo_access_enabled = SystemSetting.get_value('demo_access_enabled', 'true').lower() in ('true', '1')
return jsonify({
'status': 'success',
@@ -45,7 +46,8 @@ def get_auth_providers():
'google': google_val,
'moodle': moodle_val
},
'google_client_id': google_client_id
'google_client_id': google_client_id,
'demo_access_enabled': demo_access_enabled
}), 200
frontend/src/app.js
+25
View File
@@ -229,6 +229,31 @@ const buildingsRoutes = require('./routes/buildings');
const adminRoutes = require('./routes/admin');
const mySubjectsRoutes = require('./routes/my_subjects');
// Proxy transparente hacia la API REST de Flask para llamadas AJAX frontend
app.use('/api/v1', async (req, res) => {
try {
const token = req.cookies.auth_token;
const targetUrl = `${process.env.FLASK_API_URL || 'http://localhost:5000/api/v1'}${req.url}`;
const headers = { ...req.headers };
delete headers.host;
if (token && !headers.authorization) {
headers.authorization = `Bearer ${token}`;
}
const resp = await axios({
method: req.method,
url: targetUrl,
data: req.body,
params: req.query,
headers,
validateStatus: () => true
});
return res.status(resp.status).json(resp.data);
} catch (err) {
console.error('API v1 proxy error:', err.message);
return res.status(500).json({ error: 'ProxyError', message: 'Error de comunicación con el backend API: ' + err.message });
}
});
app.use('/', indexRoutes);
app.use('/auth', authRoutes);
app.use('/dashboard', dashboardRoutes);
frontend/src/routes/admin.js
+56 -2
View File
@@ -1307,22 +1307,76 @@ const handleGlobalSettings = async (req, res) => {
google_oauth: { allowed_domains: 'unicaba.edu.ar', callback_url: '/auth/google/callback' },
moodle: { server_url: 'http://10.0.0.207/moodle', auto_sync_enabled: true, sync_interval_minutes: 15 }
};
let demo_access_enabled = true;
let demo_accounts_active = true;
try {
const resp = await req.apiClient.get('/admin/settings/all');
if (resp.data && resp.data.data) {
if (resp.data && resp.data.settings) {
settings = resp.data.settings;
} else if (resp.data && resp.data.data) {
settings = resp.data.data;
}
} catch (e) {
console.warn('Global settings fetch notice:', e.message);
}
try {
const demoResp = await req.apiClient.get('/settings/demo-mode');
if (demoResp.data) {
if (demoResp.data.demo_access_enabled !== undefined) {
demo_access_enabled = Boolean(demoResp.data.demo_access_enabled);
}
if (demoResp.data.demo_accounts_active !== undefined) {
demo_accounts_active = Boolean(demoResp.data.demo_accounts_active);
}
}
} catch (e) {
console.warn('Demo mode status fetch notice:', e.message);
}
res.render('admin/settings/global_config', {
title: 'Configuración Global del Sistema - Admin Edu-Space',
settings
settings,
demo_access_enabled,
demo_accounts_active
});
};
router.get(['/settings', '/global-config', '/config'], handleGlobalSettings);
// Endpoint específico para alternar modo demo y cuentas default
router.post(['/settings/demo-mode', '/demo-mode'], async (req, res) => {
try {
const resp = await req.apiClient.post('/settings/demo-mode', req.body);
return res.status(resp.status || 200).json(resp.data);
} catch (err) {
console.error('Error in POST /admin/settings/demo-mode:', err.response?.data || err.message);
return res.status(err.response?.status || 500).json(err.response?.data || {
status: 'error',
message: 'Error al comunicarse con el servicio de configuración: ' + (err.response?.data?.message || err.message)
});
}
});
// Proxy para cualquier subruta de configuración (smtp, google-oauth, moodle, etc.)
router.all('/settings/*', async (req, res) => {
try {
const subPath = req.params[0];
const resp = await req.apiClient({
method: req.method,
url: `/settings/${subPath}`,
data: req.body,
params: req.query
});
return res.status(resp.status).json(resp.data);
} catch (err) {
console.error(`Error in /admin/settings/${req.params[0]}:`, err.response?.data || err.message);
return res.status(err.response?.status || 500).json(err.response?.data || {
status: 'error',
message: err.response?.data?.message || err.message
});
}
});
module.exports = router;
frontend/src/routes/auth.js
+10 -3
View File
@@ -11,11 +11,17 @@ const isSecureCookie = (req) => {
router.get('/login', async (req, res) => {
let providers = { local: true, google: false, moodle: false };
let google_client_id = '';
let demo_access_enabled = true;
try {
const resp = await apiClient.get('/auth/providers');
if (resp.data && resp.data.providers) {
providers = resp.data.providers;
if (resp.data) {
if (resp.data.providers) {
providers = resp.data.providers;
}
google_client_id = resp.data.google_client_id || '';
if (resp.data.demo_access_enabled !== undefined) {
demo_access_enabled = Boolean(resp.data.demo_access_enabled);
}
}
} catch (e) {
// Fallback default
@@ -24,7 +30,8 @@ router.get('/login', async (req, res) => {
res.render('auth/login', {
error: req.query.error || null,
providers,
google_client_id
google_client_id,
demo_access_enabled
});
});
frontend/views/admin/settings/global_config.html
+8 -1
View File
@@ -624,7 +624,14 @@ async function toggleDemoMode() {
},
body: JSON.stringify({ enabled: targetEnable })
});
const data = await res.json();
const contentType = res.headers.get('content-type') || '';
let data = {};
if (contentType.includes('application/json')) {
data = await res.json();
} else {
const rawText = await res.text();
throw new Error(res.ok ? 'Respuesta no válida' : `Error del servidor (${res.status})`);
}
if (res.ok) {
showAlert(data.message, targetEnable ? 'info' : 'success');
if (targetEnable) {