cookie.py

#!/usr/bin/env python3

import os
import pickle
import time

from jwt import encode
from tornado.web import RequestHandler, HTTPError, Application


secret = os.getenv("SECRET", "x")


class BaseHandler(RequestHandler):
    def compute_etag(self):
        pass

    def set_default_headers(self):
        self.set_header("Content-Type", "text/plain; charset=utf-8")


class TokenHandler(BaseHandler):
    def post(self):
        cookie = self.get_secure_cookie("_")
        if not cookie:
            raise HTTPError(401)
        payload = pickle.loads(cookie)
        payload.update({
            "exp": int(time.time()) + 86400,
        })
        self.write(encode(payload, secret))

    if __debug__:
        get = post


class MainHandler(BaseHandler):
    def get(self, path):
        host = self.request.headers.get("Host")
        if not host:
            return
        domain = ".".join(host.split(".")[-2:])
        self.set_secure_cookie("_", pickle.dumps({"i": 1}),
                               path="/token", secure=True, httponly=True, domain=domain)
        print(host, domain, file=self)
        print(path, file=self)


def make_app():
    return Application([
        (r"/token", TokenHandler),
        (r"(.*)", MainHandler),
    ], cookie_secret=secret)


if __name__ == "__main__":
    from tornado.options import parse_command_line
    from tornado.ioloop import IOLoop
    parse_command_line()
    app = make_app()
    app.listen(8888, xheaders=True)
    IOLoop.current().start()