From 26c3f0a6ec88e8737bbd3dc956c02b117ecc0b90 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Am=C4=93lija=20I?= <amelija_i@inbox.lv>
Date: Fri, 14 Feb 2025 20:02:10 +0200
Subject: [PATCH] CORS replacement

---
 __pycache__/server.cpython-313.pyc | Bin 0 -> 2834 bytes
 server.py                          |  29 +++++++++++++++++++++++------
 2 files changed, 23 insertions(+), 6 deletions(-)
 create mode 100644 __pycache__/server.cpython-313.pyc

diff --git a/__pycache__/server.cpython-313.pyc b/__pycache__/server.cpython-313.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..cdecac76da9ca94f074b75dd70eb8d25141b34d0
GIT binary patch
literal 2834
zcmb6bTWlN0aqq=DzC}^COj))WMRv^Al4U(1)o~(NvK%RTSSKP*MU*|0C;A-fj@={W
zh_C}XPGANp8WpWkeYAj+_9OjjP(VO~HZIz_KtAt67Z$b-8lyr1|EW<woc5=)M^Tbh
z8%2iT-0sZmJa%Vhcf;@ZAb>Bg{3`R63!%T$Ney7`z=p&ibQ8%)X2#GcgPBnlv!fj5
zqLjvt@uLD3oG~}%8WpkVjQKGMO9`<B^=zt%q6E`|67C+*Mge<d0echD^uFqRCvHKq
zYfH|b5MZ5uYaU1hWKp0Rf{CCkIiot+-Gp!`;h8?XQ%`j)dt|TdJI>1fepU`NZFz*l
z3AY>^IFFE0j}WYlJz;H~9Fptha6d$w;WK=!;UN`@aYQ(iRm|6jh}G{ER5MS+OQxY~
zbBi&Cc*hMrW1P-vs-CCQtf8cnX(O-d3lk)0swu4IlR3pSFB>>b+~boIBa_Ma^h+dE
zFjbt?^t_6dR9-W5lXxAHx&W%o)aKSXZt{RR_;2(A`VJh>aX6rJjLyt%NySk&BePBD
zk`!mcTVdBWvK6A3hzUjM#RV0cV2tqj#hgmqGupf==au;!;nPZ9DSBSa1I472$2_3c
zyQl}p0G(o<MN#k~j>71y8zCb!!+s0s3+N^!$G8_EFYq&{kDFs+%)~G07P9RfgnLb0
zBtkVlsxTTYk>`d65`*(<R=cD`J3Bf%65pO0N;un{RC2il>=Ag}o?9gDlNnW4U(exF
z<e3E}tAV>}($Up^GHaxita++^OQZp`n_)nY9-<Pm0zDsGy~Qo5Ke+P2)vrvto7Y1P
z;2PnSY&OPXDo*_LbTzD|li;RlvOxQ86z`#|z~csS6A&SdkQo8=sDwzvSZVyeH*h!5
z^ZwOJpr_*PvG|@1V4|XU+$>y}*Ybp)nv`dVI5{=*(&U5;#>IIxf6+*rDJoY35eCjt
zFM$I$(QJ*5rl~`_KxUkb?nh{rmWBhh8q}d)<7m28*)=wNW$rnO`KNFNhwFL@SESrH
zYDEWk`t}4X(~uauL6&L>sWWkA*6Bx7X5cc^WpHN{vRn3aFg0n}+s(G_wCCHc8KLd&
zqqA}L=%#>D2U<aM72<47V~wAV?y~CJw)+2eFpgxu;}_Vd!Zb~}U9fF4y5p4OfE@f<
zmg=abXV5H7RR=_*Ktbx<_Q}ic*~S_-&ebCQT2?~ctjQjNUaxb5T<hj{j+sNxbB7QV
zbNvK90450YjpF{nR7y3?w$p~5$40hoFq<_lw@qR#qv=II&Glo^&0H@wKT&qPn*POo
zR0Z_Bwi#$i$D-%krZ(H<Q`VhTl{9p*qGwwYx(dbyE>P#JpIIx`udNlkWPM`4YkeHG
zes6sQliSvB?eA+pf{yuQG5am+Hi-QWgx}PbK#UfsX(}1D&`H()7}S1jU$fr?<-f63
zqV{$B8mL~e%ho5>?I=uc+i!z{k6^k&Ne@4TW!k?$Q_P2H(;=>E#ba8mM7&sygK!x&
zPeQ}zr-o0@3=buz24(q`$>|{?0X<1?8mHe7Ps+$<Rp+W89!-bNm`@ry^zh-=Q)-Uh
zAcQmXIK~qmt7eW!wOgm!-Wb(sd{KaEQ}b2(QniQT4sdBN{LNnQw}jTjz>PPqy|Emr
zh%NVnd*59w^Q*o6W&S<iJ3ebqr!94@_MNFsyKJd@weQ?x(_pylU1#?Qk+pEsPhR-p
z3-`iD?C_CWS1RG|vb5?A-)%fv@gBV&Zdx9(4i8!Thb!STpK?}s%<_$`)ivI$i+)xY
zt<<%Yg?|Jaeme1C&%NdocJqnH7nFxq2c9nvz4!7vFI$mb+t;@mZd?v8^;^E?HL3od
zbikGlEUR~=*0tc?Ww-V0D^}zAO7PYHjU^aflFN&hwC~Y<Z^H)Sga`z^EdC;V>)g-x
zTHtCh_OwNRk@o#(U4#|?Hopn`_lIELkc9py4tnA9r*JpmJCbKu;O^8P9Y)-p0S3l@
zMgm|WC6n`trYDm#MX{sZ`DtZnA@s$ORxcDXguiIObA!(rI3L?XggN>Q!Ss4?@@X@V
za*Oly4T5PCCa&t+1Jiqiu!c#E=*qmBOu}WC%VFBSi3>6d9w>w>V2${k)yb6egduGD
z0*+Aw^o}C}HVW`Sp~*owT+nfdvi4KtT#VAmc_UrOs;BTE&>(Y=`97d^j$xR;p_q+g
zpQA&cql14%?gz;Gmj8jvTRwZ;C~;pj9JWyC3zu|5gJSbmT+Jo!L9l7Ls}ej^@~sLX
ztNySp94WD@{@{||_8%;HzT{b^cU?lPa3gXpQtn?~xV2~<JW+~ROy@t@W+t-1A+~Fs
nj@C~i-d8SGxX3Cm-Wa(yvedf#>W4F>k<a+fbq?`OP6+=6zx1(C

literal 0
HcmV?d00001

diff --git a/server.py b/server.py
index 1879385..652c740 100644
--- a/server.py
+++ b/server.py
@@ -1,5 +1,4 @@
 from flask import Flask, request, jsonify
-from flask_cors import CORS
 from pymongo import MongoClient
 from dotenv import load_dotenv
 import os
@@ -7,7 +6,8 @@ import os
 load_dotenv()
 
 app = Flask(__name__)
-CORS(app)
+
+EXPECTED_PASSWORD = "secret_password"
 
 uri = os.getenv("MONGO_URI")
 
@@ -19,19 +19,36 @@ def validate_event(event):
     required_keys = ["@version", "type", "TimeStamp", "data", "@timestamp"]
     return all(key in event for key in required_keys)
 
-@app.route('/submit', methods=['POST'])
+@app.route('/submit', methods=['POST', 'OPTIONS'])
 def submit_event():
+    if request.method == 'OPTIONS':
+        resp = jsonify()
+        resp.headers['Access-Control-Allow-Origin'] = '*'
+        resp.headers['Access-Control-Allow-Methods'] = 'POST, OPTIONS'
+        resp.headers['Access-Control-Allow-Headers'] = 'Content-Type, X-Password'
+        return resp
     try:
+
+        password = request.headers.get('X-Password')
+        if password != EXPECTED_PASSWORD:
+            return jsonify({"error": "Неверный пароль"}), 403
+        
         event = request.get_json()
 
         if not event or not validate_event(event):
-            return jsonify({"error": "Неверный формат"}), 400
+            resp = jsonify({"error": "Неверный формат"})
+            resp.headers['Access-Control-Allow-Origin'] = '*'
+            return resp, 400
 
         collection.insert_one(event)
 
-        return jsonify({"message": "Действие успешно сохранено"}), 200
+        resp = jsonify({"message": "Действие успешно сохранено"})
+        resp.headers['Access-Control-Allow-Origin'] = '*'
+        return resp, 200
     except Exception as e:
-        return jsonify({"error": str(e)}), 500
+        resp = jsonify({"error": str(e)})
+        resp.headers['Access-Control-Allow-Origin'] = '*'
+        return resp, 500
     
 if __name__ == '__main__':
     app.run(debug=True, host='0.0.0.0', port=5000)
\ No newline at end of file