Development

docker/routlin-dash/app/action_apply_port_forwarding.py

@@ -1,12 +1,14 @@
+import copy
+
 from flask import Blueprint, request, redirect, flash
 from auth import require_level
-from config_utils import load_core, save_core, verify_core_hash, queued_msg
+from config_utils import load_core, save_core_with_snapshot, verify_core_hash
 import sanitize
 import validation as validate
 
 bp = Blueprint('action_apply_port_forwarding', __name__)
 
-VIEW   = '/view/view_port_forwarding'
+VIEW = '/view/view_port_forwarding'
 
 _VALID_PROTOS_STR = ', '.join(sorted(validate.VALID_PROTOCOLS))
 
@@ -26,7 +28,6 @@ def _hash_ok():
 
 
 def _parse_entry():
-    """Parse and validate form fields. Returns (entry_dict, None) or (None, already_flashed)."""
     description   = sanitize.text(request.form.get('description', ''))
     protocol      = sanitize.filtervalue(request.form.get('protocol', ''), validate.VALID_PROTOCOLS)
     dest_port_raw = request.form.get('dest_port', '').strip()
@@ -78,7 +79,6 @@ def add_port_forward():
     entry, err = _parse_entry()
     if err:
         return redirect(VIEW)
-
     if not _hash_ok():
         return redirect(VIEW)
 
@@ -89,9 +89,14 @@ def add_port_forward():
         for msg in errors:
             flash(msg, 'error')
         return redirect(VIEW)
-    save_core(core)
 
-    flash(queued_msg('core apply'), 'success')
+    key = f'{entry["protocol"]}:{entry["dest_port"]}'
+    flash(save_core_with_snapshot(
+        core,
+        path='port_forwarding', key=key, operation='add',
+        before=None, after=entry,
+        description=f'Added port forward: {key} → {entry["nat_ip"]}:{entry["nat_port"]}',
+    ), 'success')
     return redirect(VIEW)
 
 
@@ -102,7 +107,6 @@ def toggle_port_forward():
     if idx is None:
         flash('Invalid request.', 'error')
         return redirect(VIEW)
-
     if not _hash_ok():
         return redirect(VIEW)
 
@@ -112,15 +116,22 @@ def toggle_port_forward():
         flash('Entry not found.', 'error')
         return redirect(VIEW)
 
-    items[idx]['enabled'] = not items[idx].get('enabled', True)
+    old_enabled        = items[idx].get('enabled', True)
+    items[idx]['enabled'] = not old_enabled
     errors = validate.validate_config(core)
     if errors:
         for msg in errors:
             flash(msg, 'error')
         return redirect(VIEW)
-    save_core(core)
 
-    flash(queued_msg('core apply'), 'success')
+    key    = f'{items[idx]["protocol"]}:{items[idx]["dest_port"]}'
+    action = 'Enabled' if not old_enabled else 'Disabled'
+    flash(save_core_with_snapshot(
+        core,
+        path='port_forwarding', key=key, operation='toggle',
+        before={'enabled': old_enabled}, after={'enabled': not old_enabled},
+        description=f'{action} port forward: {key}',
+    ), 'success')
     return redirect(VIEW)
 
 
@@ -135,7 +146,6 @@ def edit_port_forward():
     entry, err = _parse_entry()
     if err:
         return redirect(VIEW)
-
     if not _hash_ok():
         return redirect(VIEW)
 
@@ -145,16 +155,22 @@ def edit_port_forward():
         flash('Entry not found.', 'error')
         return redirect(VIEW)
 
-    items[idx] = entry
+    before        = copy.deepcopy(items[idx])
+    items[idx]    = entry
     items[idx]['enabled'] = request.form.get('enabled') == 'on'
     errors = validate.validate_config(core)
     if errors:
         for msg in errors:
             flash(msg, 'error')
         return redirect(VIEW)
-    save_core(core)
 
-    flash(queued_msg('core apply'), 'success')
+    key = f'{entry["protocol"]}:{entry["dest_port"]}'
+    flash(save_core_with_snapshot(
+        core,
+        path='port_forwarding', key=key, operation='edit',
+        before=before, after=copy.deepcopy(items[idx]),
+        description=f'Edited port forward: {key} → {entry["nat_ip"]}:{entry["nat_port"]}',
+    ), 'success')
     return redirect(VIEW)
 
 
@@ -165,7 +181,6 @@ def delete_port_forward():
     if idx is None:
         flash('Invalid request.', 'error')
         return redirect(VIEW)
-
     if not _hash_ok():
         return redirect(VIEW)
 
@@ -181,7 +196,12 @@ def delete_port_forward():
         for msg in errors:
             flash(msg, 'error')
         return redirect(VIEW)
-    save_core(core)
 
-    flash(queued_msg('core apply'), 'success')
+    key = f'{removed["protocol"]}:{removed["dest_port"]}'
+    flash(save_core_with_snapshot(
+        core,
+        path='port_forwarding', key=key, operation='delete',
+        before=removed, after=None,
+        description=f'Deleted port forward: {key}',
+    ), 'success')
     return redirect(VIEW)