堡垒机安全性连接公网

from flask import Flask, request, abort

app = Flask(__name__)

# 模拟用户数据库
users = {
    'admin': {'password': 'admin123', 'roles': ['admin']},
    'user1': {'password': 'user123', 'roles': ['user']}
}

@app.route('/login', methods=['POST'])
def login():
    username = request.form['username']
    password = request.form['password']
    
    if username in users and users[username]['password'] == password:
        return {'message': 'Login successful', 'roles': users[username]['roles']}
    else:
        abort(401)

@app.route('/resource', methods=['GET'])
def resource():
    auth_header = request.headers.get('Authorization')
    if not auth_header:
        abort(401)
    
    username, password = auth_header.split(':')
    if username in users and users[username]['password'] == password:
        if 'admin' in users[username]['roles']:
            return {'message': 'Access granted to admin resource'}
        else:
            return {'message': 'Access granted to user resource'}
    else:
        abort(401)

if __name__ == '__main__':
    app.run(host='0.0.0.0', port=5000)