Add search API endpoint

Author: Pandora

bazaar/core/api_view.py

@@ -4,12 +4,14 @@
 from django.core.files.storage import default_storage
 from elasticsearch import Elasticsearch
 from rest_framework.authentication import TokenAuthentication
-from rest_framework.decorators import api_view, authentication_classes, permission_classes
+from rest_framework.decorators import api_view, authentication_classes, permission_classes, throttle_classes
 from rest_framework.permissions import IsAuthenticated
 from rest_framework.response import Response
+from rest_framework.throttling import UserRateThrottle
 
 from bazaar.core.tasks import analyze
 from bazaar.core.utils import get_sha256_of_file
+from bazaar.front.utils import transform_hl_results
 
 
 @api_view(['GET', 'POST'])
@@ -65,3 +67,40 @@ def analysis_tasks_status(request, sha256):
         except Exception as e:
             logging.exception(e)
             return Response({"error": "Object of type NotFoundError is not JSON serializable"})
+
+
+@api_view(['POST'])
+@authentication_classes([TokenAuthentication])
+@permission_classes([IsAuthenticated])
+@throttle_classes([UserRateThrottle])
+def search(request):
+    user_query = request.data
+    if not user_query or 'q' not in user_query:
+        return Response([])
+    q = user_query.get('q')
+    query = {
+        "query": {
+            "query_string": {
+                "default_field": "sha256",
+                "query": q
+            }
+        },
+        "highlight": {
+            "fields": {
+                "*": {"pre_tags": ["<mark>"], "post_tags": ["</mark>"]}
+            }
+        },
+        "sort": {"analysis_date": "desc"},
+        "_source": ["sha256", "uploaded_at", "handle", "app_name",
+                    "version_code", "size", "dexofuzzy.apk", "quark.threat_level", "vt", "malware_bazaar",
+                    "is_signed", "frosting_data.is_frosted", "features"],
+        "size": 150,
+    }
+
+    es = Elasticsearch(settings.ELASTICSEARCH_HOSTS)
+    try:
+        raw_results = es.search(index=settings.ELASTICSEARCH_APK_INDEX, body=query)
+        results = transform_hl_results(raw_results)
+        return Response(results)
+    except Exception as e:
+        return Response([])

bazaar/core/urls.py

@@ -7,5 +7,6 @@
     path("hello", hello_world, name="bazaar-api"),
     path("upload", apk_upload, name="bazaar-api"),
     path("report/<str:sha256>", apk_analysis_report, name="bazaar-api"),
-    path("status/<str:sha256>", analysis_tasks_status, name="bazaar-api")
+    path("status/<str:sha256>", analysis_tasks_status, name="bazaar-api"),
+    path("search/", search, name="bazaar-api"),
 ]

config/settings/base.py

@@ -304,7 +304,15 @@
         "rest_framework.authentication.TokenAuthentication",
         "rest_framework.authentication.SessionAuthentication",
     ),
-    "DEFAULT_PERMISSION_CLASSES": ("rest_framework.permissions.IsAuthenticated",),
+    "DEFAULT_PERMISSION_CLASSES": (
+        "rest_framework.permissions.IsAuthenticated",
+    ),
+    'DEFAULT_THROTTLE_CLASSES': [
+        'rest_framework.throttling.UserRateThrottle'
+    ],
+    'DEFAULT_THROTTLE_RATES': {
+        'user': '10/minute'
+    },
 }
 
 # django-cors-headers - https://github.com/adamchainz/django-cors-headers#setup