Flask适用于简单的接口请求
安装
pip install Flask
pip install Flask-RESTful
仅简单请求url，然后出发处理程序，返回处理结果
app.py代码如下
from flask import Flask,jsonify
from flask_restful import Api,Resource,request,reqparse
from sqlalchemy import create_engine
from local_settings import SQLALCHEM
import logging,datetime
logger=logging.getLogger('my_app')
app=Flask(__name__)
api=Api(app)
class ProceListAPI(Resource):
def __init__(self):
self.engine=create_engine(alchemy_conf,pool_size=5,max_overflow=0,pool_recycle=7*60) # 初始化全局的数据库连接池
self.reqparse=reqparse.RequestParser()
self.reqparse.add_argument('subid',action='append',dest='cart_code',type=int,required=True,help='subid is needed!',location='form')
self.reqparse.add_argument('description',type=str,default="",location='json') # 配置 哪些入参是什么格式，在什么位置，dest表示别名
supper(PriceListAPI,self).__init__()
def get(self): #flask的api类中的所有get请求经过 get方法 ，post请求 经过post方法
logger.warning('request form:{},num:{}'.format(request.args,type(request.args.get('subid'))))
cart_code = request.args.get('subid')
if not cart_code:
return {'error':'subid is Rquired!'}
cart_code=cart_code.split(',')
with self.engine.connect() as conn:
result = conn.execute('select distinct cart_code,price from price_store where collect_time>=curdate();')
datas=result.fetchall()
dup_dict={}
for d in datas:
if d[0] in cart_code:
dup_dict[d[0]]=(d[0],d[1])
return dup_dict
def post(self):
args=self.reqparse.parse_args()
cart_code=args['cart_code']
if not cart_code:
return {'error':'subid is Required!'}
return {'cart_code':cart_code}
api.add_resource(PriceListAPI,'./price/',endpoint='stores') #定义class类 对应的url
if __name__ == '__main__':
app.run(debug=True,port=5091,houst='0.0.0.0')
通过 python app.py就可以运行
给API class添加装饰器 ，在每次请求处理前先进行验证 ，如常用的验证 Headers中的Authorization字段
将app_key和app_secret融合 加密到组成 Authorization的值，来判断用户是否为合法用户
首先需要定义一个装饰器函数
from functools import wraps
def my_authenticate(func):
@wraps(func)
def wrapper(*args,**kwargs):
authen = request.headers.get('Authorization')
if not authen:
return {"code":403,"message":"Authenticated Error","data":{"isEnabled":0}},403
logger.warning('authen:%s'%(authen))
encode_authen=authen.encode('utf-8')
decode_authen = base64.b64decode(encode_authen)
app_key,app_sign,timestamp = decode_authen.decode('utf-8').split(';')
now = time.time()
if now-float(timestamp)>2*60:
return {"code":403,"message":"Authenticated expired","data":{"isEnabled":0}},403
if app_key != APP_KEY:
return {"code":403,"message":"Authenticate app_key error","data":{"isEnabled":0}},403
md5_obj = hashlib.md5()
content = app_key+APP_SECRET+timestamp
md5_obj.update(content.encode('utf-8'))
my_sign=md5_obj.hexdigest()
if app_sign==my_sign:
logger.info("authen ok!")
return func(*args,**kwargs)
return {"code":403,"message":"Authenticated Error","data":{"isEnabled":0}},403
return wrapper
然后在class ProceListAPI(Resource)的开头加上 decorators=[my_authenticate]
如：
class ProceListAPI(Resource):
decorators=[my_authenticate]
def __init__(self):
self.reqparse=reqparse.RequestParser()
....
这样就相当于给类ProceListAPI的每个方法都加上了装饰器 my_authenticate
posted on
