一站式网上办事大厅与航天技术的融合：以收发文系统为例

from flask import Flask, request, jsonify

import jwt

import datetime

from flask_sqlalchemy import SQLAlchemy

app = Flask(__name__)

app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///documents.db'

db = SQLAlchemy(app)

# 定义用户模型

class User(db.Model):

id = db.Column(db.Integer, primary_key=True)

username = db.Column(db.String(80), unique=True, nullable=False)

password = db.Column(db.String(120), nullable=False)

# 定义文档模型

class Document(db.Model):

id = db.Column(db.Integer, primary_key=True)

title = db.Column(db.String(100), nullable=False)

content = db.Column(db.Text, nullable=False)

author_id = db.Column(db.Integer, db.ForeignKey('user.id'))

status = db.Column(db.String(20), default='pending') # pending, approved, rejected

# 生成JWT token

def generate_token(user_id):

payload = {

'user_id': user_id,

'exp': datetime.datetime.utcnow() + datetime.timedelta(hours=1)

}

return jwt.encode(payload, 'secret_key', algorithm='HS256')

# 验证JWT token

def verify_token(token):

try:

payload = jwt.decode(token, 'secret_key', algorithms=['HS256'])

return payload['user_id']

except:

return None

@app.route('/login', methods=['POST'])

def login():

data = request.get_json()

user = User.query.filter_by(username=data['username']).first()

if user and user.password == data['password']:

token = generate_token(user.id)

return jsonify({'token': token})

else:

return jsonify({'error': 'Invalid credentials'}), 401

@app.route('/upload', methods=['POST'])

def upload_document():

token = request.headers.get('Authorization')

user_id = verify_token(token)

if not user_id:

return jsonify({'error': 'Unauthorized'}), 401

data = request.get_json()

doc = Document(title=data['title'], content=data['content'], author_id=user_id)

db.session.add(doc)

db.session.commit()

return jsonify({'message': 'Document uploaded successfully'})

@app.route('/approve/', methods=['POST'])

def approve_document(doc_id):

token = request.headers.get('Authorization')

user_id = verify_token(token)

if not user_id:

return jsonify({'error': 'Unauthorized'}), 401

doc = Document.query.get(doc_id)

if not doc:

return jsonify({'error': 'Document not found'}), 404

doc.status = 'approved'

db.session.commit()

return jsonify({'message': 'Document approved'})

@app.route('/reject/', methods=['POST'])

def reject_document(doc_id):

token = request.headers.get('Authorization')

user_id = verify_token(token)

if not user_id:

return jsonify({'error': 'Unauthorized'}), 401

doc = Document.query.get(doc_id)

if not doc:

return jsonify({'error': 'Document not found'}), 404

doc.status = 'rejected'

db.session.commit()

return jsonify({'message': 'Document rejected'})

if __name__ == '__main__':

db.create_all()

app.run(debug=True)