gemini (kostenintensives) app-aufbauen

services/submission_service.py

@@ -0,0 +1,121 @@
+# ==============================================================================
+# Formeleon - Multi-tenant Form Generator
+# Author: Björn Runden <br@runden.net>
+# Module: services/submission_service.py
+# Description: Business logic for processing and handling form submissions.
+# ==============================================================================
+
+import uuid
+import logging
+from typing import Dict, Any, Tuple
+from flask import current_app
+from werkzeug.exceptions import BadRequest, Unauthorized, Forbidden, NotFound
+
+from models import db, Tenant, FormConfig, Submission, SubmissionStatus
+from services.recaptcha import RecaptchaService
+from utils.helpers import hash_ip
+
+logger = logging.getLogger(__name__)
+
+class SubmissionService:
+    """Service layer for handling form submissions."""
+
+    @staticmethod
+    def process_submission(form_id: str, tenant: Tenant, origin: str, payload: dict, 
+                           ip_address: str, user_agent: str, recaptcha_token: str = None, 
+                           content_type: str = 'application/json') -> Tuple[Dict[str, Any], int]:
+        """
+        Process a form submission with validation and reCAPTCHA checking.
+        
+        :param form_id: ID of the form being submitted
+        :param tenant: Validated tenant object
+        :param origin: Validated origin string
+        :param payload: Submitted form data
+        :param ip_address: Submitter IP address
+        :param user_agent: Submitter user agent
+        :param recaptcha_token: Optional reCAPTCHA token
+        :param content_type: Request content type
+        :return: Tuple of (response_dict, http_status_code)
+        """
+        if not payload:
+            raise BadRequest('No form data provided')
+
+        # Get form
+        form = FormConfig.query.filter_by(
+            id=form_id,
+            tenant_id=tenant.id
+        ).first()
+        
+        if not form:
+            raise NotFound('Form not found')
+        
+        if not form.is_active:
+            raise Forbidden('Form is not active')
+
+        # Validate reCAPTCHA if enabled
+        recaptcha_score = None
+        recaptcha_passed = None
+        
+        if form.settings.get('recaptcha_enabled', True) if form.settings else True:
+            if recaptcha_token:
+                recaptcha_service = RecaptchaService()
+                is_valid, score = recaptcha_service.verify(
+                    recaptcha_token,
+                    ip_address
+                )
+                recaptcha_score = score
+                recaptcha_passed = is_valid
+                
+                if not is_valid:
+                    logger.warning(f'Submission rejected: reCAPTCHA failed with score {score}')
+            else:
+                # If no token provided, use dev mode score if in dev mode
+                if current_app.config.get('DEV_MODE', False):
+                    recaptcha_score = current_app.config.get('MOCK_RECAPTCHA_SCORE', 0.9)
+                    recaptcha_passed = True
+        
+        # Create submission
+        submission_id = f'sub_{form_id}_{str(uuid.uuid4())[:8]}'
+        
+        submission = Submission(
+            id=submission_id,
+            form_config_id=form.id,
+            tenant_id=tenant.id,
+            payload=payload,
+            ip_hash=hash_ip(ip_address),
+            user_agent=user_agent,
+            referer=origin,
+            recaptcha_score=recaptcha_score,
+            recaptcha_passed=recaptcha_passed,
+            submission_metadata={
+                'origin': origin,
+                'user_agent': user_agent,
+                'content_type': content_type
+            }
+        )
+        
+        # Set status based on reCAPTCHA
+        if recaptcha_passed is False:
+            submission.status = SubmissionStatus.SPAM
+        else:
+            submission.status = SubmissionStatus.PENDING
+        
+        db.session.add(submission)
+        db.session.commit()
+        
+        logger.info(f'Form submission: {submission_id} for form {form_id}, tenant {tenant.id}')
+        
+        # Prepare response
+        response = {
+            'status': 'success',
+            'submission_id': submission.id,
+            'message': form.settings.get('success_message', 'Form submitted successfully!') if form.settings else 'Form submitted successfully!'
+        }
+        
+        # If reCAPTCHA failed, indicate in response
+        if submission.status == SubmissionStatus.SPAM:
+            response['status'] = 'spam'
+            response['message'] = 'Submission flagged as spam'
+            logger.warning(f'Spam submission: {submission_id}')
+        
+        return response, 200