implement certificates

README.md

@@ -39,7 +39,7 @@ python .\paios\scripts\setup_environment.py (only on first run)
 python -m paios
 ```
 
-Visit [http://localhost:3080/](http://localhost:3080/)
+Visit [https://localhost:8443/](https://localhost:8443/)
 
 ### Developers
 
@@ -65,5 +65,5 @@ Run the uvicorn server:
 python -m paios
 ```
 
-Visit [http://localhost:3080/](http://localhost:3080/)
+Visit [https://localhost:8443/](https://localhost:8443/)
 

__main__.py

@@ -7,7 +7,7 @@
 base_dir = Path(__file__).parent
 if base_dir not in sys.path:
     sys.path.append(str(base_dir))
-from common.paths import backend_dir, venv_dir
+from common.paths import backend_dir, venv_dir, cert_dir
 from common.config import logging_config
 
 # check environment
@@ -31,6 +31,10 @@ def cleanup():
     #signal.signal(signal.SIGINT, handle_keyboard_interrupt)
     #signal.signal(signal.SIGTERM, handle_keyboard_interrupt)
 
+    # Ensure certificates are generated
+    from common.cert import check_cert
+    check_cert()
+
     # Create the app
     logger.info("Creating the app.")
     from app import create_app
@@ -39,9 +43,27 @@ def cleanup():
     # Run the app
     import uvicorn
 
+    cert_path = cert_dir / "cert.pem"
+    key_path = cert_dir / "key.pem"
+
     logger.info("Running the app with uvicorn.")
     try:
-        uvicorn.run("app:create_app", host="localhost", port=3080, factory=True, workers=1, reload=True, reload_dirs=[backend_dir], reload_excludes=[venv_dir], log_config=logging_config)
+        uvicorn.run(
+            "app:create_app", 
+            host="localhost", 
+            port=8443, 
+            factory=True, 
+            workers=1, 
+            reload=True, 
+            reload_dirs=[backend_dir], 
+            reload_excludes=[venv_dir], 
+            log_config=logging_config,
+            ssl_certfile=str(cert_path),
+            ssl_keyfile=str(key_path),
+            #ssl_keyfile_password=key_passphrase  # Pass the passphrase if the key is encrypted
+        )
+    except PermissionError as e:
+        logger.error(f"Permission error: {e}. Ensure the application has access to the certificate and key files.")
     except KeyboardInterrupt:
         #handle_keyboard_interrupt(None, None)
         pass

apis/paios/abilities.http

@@ -1,11 +1,11 @@
 # API testing with Visual Studio Code - REST Client Extention
 
-POST http://localhost:3080/api/v1/abilities/chroma/start
+POST https://localhost:8443/api/v1/abilities/chroma/start
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 ###
 
-POST http://localhost:3080/api/v1/abilities/chroma/stop
+POST https://localhost:8443/api/v1/abilities/chroma/stop
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json

apis/paios/asset.http

@@ -1,6 +1,6 @@
 # API testing with Visual Studio Code - REST Client Extention
 
-POST http://localhost:3080/api/v1/assets
+POST https://localhost:8443/api/v1/assets
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
@@ -13,7 +13,7 @@ Content-Type: application/json
 
 ###
 
-PUT http://localhost:3080/api/v1/assets/1cbb0bc5-bae2-4b9d-9555-f2282f767047
+PUT https://localhost:8443/api/v1/assets/1cbb0bc5-bae2-4b9d-9555-f2282f767047
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
@@ -26,12 +26,12 @@ Content-Type: application/json
 
 ###
 
-GET http://localhost:3080/api/v1/assets/1cbb0bc5-bae2-4b9d-9555-f2282f767047
+GET https://localhost:8443/api/v1/assets/1cbb0bc5-bae2-4b9d-9555-f2282f767047
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 ###
 
-DELETE http://localhost:3080/api/v1/assets/1cbb0bc5-bae2-4b9d-9555-f2282f767047
+DELETE https://localhost:8443/api/v1/assets/1cbb0bc5-bae2-4b9d-9555-f2282f767047
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json

apis/paios/config.http

@@ -1,13 +1,13 @@
 # API testing with Visual Studio Code - REST Client Extention
 
-PUT http://localhost:3080/api/v1/config/openapi-key
+PUT https://localhost:8443/api/v1/config/openapi-key
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 "abc123"
 
 ###
 
-GET http://localhost:3080/api/v1/config/openapi-key
+GET https://localhost:8443/api/v1/config/openapi-key
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json

apis/paios/downloads.http

@@ -1,6 +1,6 @@
 ### Test single large download
 
-POST http://localhost:3080/api/v1/downloads
+POST https://localhost:8443/api/v1/downloads
 Content-Type: application/json
 
 [
@@ -12,7 +12,7 @@ Content-Type: application/json
 
 ### Test single small download
 
-POST http://localhost:3080/api/v1/downloads
+POST https://localhost:8443/api/v1/downloads
 Content-Type: application/json
 
 [
@@ -24,7 +24,7 @@ Content-Type: application/json
 
 ### Test download with target directory specified
 
-POST http://localhost:3080/api/v1/downloads
+POST https://localhost:8443/api/v1/downloads
 Content-Type: application/json
 
 [
@@ -37,7 +37,7 @@ Content-Type: application/json
 
 ### Test download without filename specified
 
-POST http://localhost:3080/api/v1/downloads
+POST https://localhost:8443/api/v1/downloads
 Content-Type: application/json
 
 [
@@ -48,7 +48,7 @@ Content-Type: application/json
 
 ### Test multiple downloads
 
-POST http://localhost:3080/api/v1/downloads
+POST https://localhost:8443/api/v1/downloads
 Content-Type: application/json
 
 [
@@ -58,7 +58,7 @@ Content-Type: application/json
 
 ###
 
-POST http://localhost:3080/api/v1/downloads
+POST https://localhost:8443/api/v1/downloads
 Content-Type: application/json
 
 [
@@ -70,7 +70,7 @@ Content-Type: application/json
 
 ###
 
-POST http://localhost:3080/api/v1/downloads
+POST https://localhost:8443/api/v1/downloads
 Content-Type: application/json
 
 [
@@ -83,7 +83,7 @@ Content-Type: application/json
 
 ### Path traversal attack
 
-POST http://localhost:3080/api/v1/downloads
+POST https://localhost:8443/api/v1/downloads
 Content-Type: application/json
 
 [
@@ -95,20 +95,20 @@ Content-Type: application/json
 
 ### 
 
-POST http://localhost:3080/api/v1/downloads/ac56536c-96a1-4dda-a664-d2262cbf5c7e/pause
+POST https://localhost:8443/api/v1/downloads/ac56536c-96a1-4dda-a664-d2262cbf5c7e/pause
 Content-Type: application/json
 
 ###
 
-POST http://localhost:3080/api/v1/downloads/ac56536c-96a1-4dda-a664-d2262cbf5c7e/resume
+POST https://localhost:8443/api/v1/downloads/ac56536c-96a1-4dda-a664-d2262cbf5c7e/resume
 Content-Type: application/json
 
 ###
 
-GET http://localhost:3080/api/v1/downloads/4fd98231-02ab-4321-ac57-d9dc96fa6d01
+GET https://localhost:8443/api/v1/downloads/4fd98231-02ab-4321-ac57-d9dc96fa6d01
 Content-Type: application/json
 
 ###
 
-DELETE http://localhost:3080/api/v1/downloads/83bdac3a-e5de-4783-a9b9-dabdcae2a1d2
+DELETE https://localhost:8443/api/v1/downloads/83bdac3a-e5de-4783-a9b9-dabdcae2a1d2
 Content-Type: application/json

apis/paios/options.http

@@ -1,3 +1,3 @@
-OPTIONS http://localhost:3080/api/v1/users
+OPTIONS https://localhost:8443/api/v1/users
 Origin: http://localhost
 Access-Control-Request-Method: GET

apis/paios/personas.http

@@ -1,6 +1,6 @@
 # API testing with Visual Studio Code - REST Client Extention
 
-POST http://localhost:3080/api/v1/personas
+POST https://localhost:8443/api/v1/personas
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
@@ -13,7 +13,7 @@ Content-Type: application/json
 
 ###
 
-PUT http://localhost:3080/api/v1/personas/1cbb0bc5-bae2-4b9d-9555-f2282f767047
+PUT https://localhost:8443/api/v1/personas/1cbb0bc5-bae2-4b9d-9555-f2282f767047
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
@@ -26,12 +26,12 @@ Content-Type: application/json
 
 ###
 
-GET http://localhost:3080/api/v1/personas/1cbb0bc5-bae2-4b9d-9555-f2282f767047
+GET https://localhost:8443/api/v1/personas/1cbb0bc5-bae2-4b9d-9555-f2282f767047
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 ###
 
-DELETE http://localhost:3080/api/v1/personas/1cbb0bc5-bae2-4b9d-9555-f2282f767047
+DELETE https://localhost:8443/api/v1/personas/1cbb0bc5-bae2-4b9d-9555-f2282f767047
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json

apis/paios/resource.http

@@ -1,27 +1,27 @@
 # API testing with Visual Studio Code - REST Client Extention
 
-POST http://localhost:3080/api/v1/resources
+POST https://localhost:8443/api/v1/resources
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 {
     "name": "My Resource",
-    "uri": "http://localhost:3080/resources/my-resource"
+    "uri": "https://localhost:8443/resources/my-resource"
 }
 
 ###
-PUT http://localhost:3080/api/v1/resources/llm-api
+PUT https://localhost:8443/api/v1/resources/llm-api
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 {
     "id": "llm-api",
     "name": "LLM API",
-    "uri": "http://localhost:3080/resources/llm-api"
+    "uri": "https://localhost:8443/resources/llm-api"
 }
 
 ###
-PUT http://localhost:3080/api/v1/resources/imap-sync
+PUT https://localhost:8443/api/v1/resources/imap-sync
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
@@ -33,18 +33,18 @@ Content-Type: application/json
 
 ###
 
-DELETE http://localhost:3080/api/v1/resources/llm-api
+DELETE https://localhost:8443/api/v1/resources/llm-api
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 ###
 
-GET http://localhost:3080/api/v1/resources/llm-api
+GET https://localhost:8443/api/v1/resources/llm-api
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 ###
 
-GET http://localhost:3080/api/v1/resources
+GET https://localhost:8443/api/v1/resources
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json

apis/paios/users.http

@@ -1,6 +1,6 @@
 # API testing with Visual Studio Code - REST Client Extention
 
-POST http://localhost:3080/api/v1/users
+POST https://localhost:8443/api/v1/users
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
@@ -10,7 +10,7 @@ Content-Type: application/json
 }
 
 ###
-PUT http://localhost:3080/api/v1/users/5bae4a90-ce69-4483-86ef-d723258f21e5
+PUT https://localhost:8443/api/v1/users/5bae4a90-ce69-4483-86ef-d723258f21e5
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
@@ -21,7 +21,7 @@ Content-Type: application/json
 }
 
 ###
-PUT http://localhost:3080/api/v1/users/1cbb0bc5-bae2-4b9d-9555-f2282f767047
+PUT https://localhost:8443/api/v1/users/1cbb0bc5-bae2-4b9d-9555-f2282f767047
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
@@ -33,30 +33,30 @@ Content-Type: application/json
 
 ###
 
-DELETE http://localhost:3080/api/v1/users/5bae4a90-ce69-4483-86ef-d723258f21e5
+DELETE https://localhost:8443/api/v1/users/5bae4a90-ce69-4483-86ef-d723258f21e5
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 ###
 
-DELETE http://localhost:3080/api/v1/users/1cbb0bc5-bae2-4b9d-9555-f2282f767047
+DELETE https://localhost:8443/api/v1/users/1cbb0bc5-bae2-4b9d-9555-f2282f767047
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 ###
 
-GET http://localhost:3080/api/v1/users/5bae4a90-ce69-4483-86ef-d723258f21e5
+GET https://localhost:8443/api/v1/users/5bae4a90-ce69-4483-86ef-d723258f21e5
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 ###
 
-GET http://localhost:3080/api/v1/users/1cbb0bc5-bae2-4b9d-9555-f2282f767047
+GET https://localhost:8443/api/v1/users/1cbb0bc5-bae2-4b9d-9555-f2282f767047
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json
 
 ###
 
-GET http://localhost:3080/api/v1/users
+GET https://localhost:8443/api/v1/users
 Authorization: Bearer {{PAIOS_BEARER_TOKEN}}
 Content-Type: application/json

app.py

@@ -21,7 +21,7 @@ def add_frontend_app(app):
         app.add_url_rule(
             '/{path:path}', 
             endpoint='frontend', 
-            view_func=StaticFiles(directory=static_dir, html=True)
+            view_func=StaticFiles(directory=static_dir, check_dir=False, html=True)
         )
     else:
         logger.info(f"Skipping serving frontend: {static_dir} directory not found. Options:")

backend/__init__.py

@@ -11,4 +11,3 @@
 for directory in required_directories:
     if not os.path.exists(directory):
         os.makedirs(directory)
-