Spaces:
Running
Running
| """Gradio UI and named JSON API endpoints for bbcollect.""" | |
| import os | |
| os.environ.setdefault("GRADIO_ANALYTICS_ENABLED", "False") | |
| import gradio as gr | |
| from collector import PLATFORMS, collector | |
| from api import create_api | |
| def collect(platforms, search, bounty_only, limit, offset): | |
| """Stable five-input API; always include live rewards, scopes and rules.""" | |
| return collector.collect(platforms, search, bounty_only, limit, offset, True) | |
| def collect_options(platforms, search, bounty_only, limit, offset, include_details=True): | |
| """Collect programs with an explicit full-details/summary toggle.""" | |
| return collector.collect(platforms, search, bounty_only, limit, offset, include_details) | |
| def scope(platform, handle): | |
| """Fetch scopes, rules and rewards for a program (alias of /details).""" | |
| return collector.scope(platform, handle.strip()) | |
| def details(platform, handle): | |
| """Get live public rewards, scopes, exclusions and full program rules.""" | |
| return collector.details(platform, handle.strip()) | |
| def sources(): | |
| """Describe supported sources and cache behavior without crawling upstreams.""" | |
| return {"platforms": list(PLATFORMS), "hackerone": "Public live GraphQL, dataset fallback", | |
| "other_platforms": "Directory: public dataset; details: live platform public program documents", | |
| "collect_default": "Five inputs; full details, scopes, rules and reward tables", | |
| "collect_options": "Six inputs; include_details=False for summaries", | |
| "cache_seconds": 900, "failure_cache_seconds": 60, | |
| "scope_fields": "Platform-native fields; in_scope and out_of_scope kept separate"} | |
| with gr.Blocks(title="bbconnectapi") as demo: | |
| gr.Markdown("# bbconnectapi\nPublic bug bounty programs and scope. **No API key or login required.** " | |
| "[Interactive REST docs](/api/docs) · [OpenAPI schema](/api/openapi.json) · " | |
| "[GitHub guide](https://github.com/Wuhpondiscord/bbcollect)\n\n" | |
| "HackerOne uses live public data with an explicit dataset fallback. " | |
| "All four platforms have live program details: reward tables, scopes and rules. " | |
| "Directory feeds use public snapshots outside HackerOne. Results are cached for 15 minutes.") | |
| with gr.Tab("Programs"): | |
| platforms = gr.CheckboxGroup(list(PLATFORMS), value=["hackerone"], label="Platforms") | |
| search = gr.Textbox(label="Search name, handle, URL or website", max_lines=1) | |
| bounty_only = gr.Checkbox(label="Only programs known to offer bounties", value=False) | |
| include_details = gr.Checkbox(label="Include scopes, rules and live reward tables (slower)", value=True) | |
| with gr.Row(): | |
| limit = gr.Slider(1, 100, value=10, step=1, label="Page size") | |
| offset = gr.Number(value=0, precision=0, minimum=0, maximum=100000, label="Offset") | |
| collect_button = gr.Button("Collect programs", variant="primary") | |
| programs_json = gr.JSON(label="Programs and source status") | |
| collect_button.click(collect_options, [platforms, search, bounty_only, limit, offset, include_details], | |
| programs_json, api_name="collect_options", concurrency_limit=2) | |
| # Preserve the original wire format: Gradio validates component counts | |
| # before Python defaults apply, so /collect must have exactly five inputs. | |
| legacy_collect = gr.Button(visible=False) | |
| legacy_collect.click(collect, [platforms, search, bounty_only, limit, offset], | |
| programs_json, api_name="collect", concurrency_limit=2) | |
| with gr.Tab("Program details and scope"): | |
| platform = gr.Dropdown(list(PLATFORMS), value="hackerone", label="Platform") | |
| handle = gr.Textbox(value="security", label="Program handle (from collect results)") | |
| scope_button = gr.Button("Get rewards, scopes and rules") | |
| scope_json = gr.JSON(label="Rewards, targets, rules and source status") | |
| scope_button.click(scope, [platform, handle], scope_json, api_name="scope", concurrency_limit=2) | |
| details_button = gr.Button("Get full details via /details") | |
| details_button.click(details, [platform, handle], scope_json, api_name="details", concurrency_limit=2) | |
| with gr.Tab("API"): | |
| gr.Markdown('''### REST API — direct JSON, no key | |
| Base URL: `https://wuhp-bbconnectapi.hf.space/api/v1` | |
| ```python | |
| import requests | |
| base = "https://wuhp-bbconnectapi.hf.space/api/v1" | |
| page = requests.get(f"{base}/programs", params={ | |
| "platforms": "hackerone,bugcrowd", "search": "", "limit": 10 | |
| }, timeout=120).json() | |
| detail = requests.get(f"{base}/programs/hackerone/security", timeout=120).json() | |
| ``` | |
| Summaries are the REST default. Add `include_details=true` for full policies and scopes. | |
| Use `/programs/{platform}/{handle}/assets` for normalized assets and exclusions, | |
| `POST /programs/batch` for up to 20 detail lookups, and `/stats`, `/sources`, `/health` for metadata. | |
| [Try requests in the interactive docs](/api/docs) · [Full API reference on GitHub](https://github.com/Wuhpondiscord/bbcollect/blob/main/docs/API.md) | |
| ### Existing Gradio API | |
| Use **View API** in the footer for generated client examples. `/collect` keeps its five-input contract. | |
| ```python | |
| from gradio_client import Client | |
| client = Client("wuhp/bbconnectapi") | |
| result = client.predict( | |
| platforms=["hackerone", "bugcrowd"], search="", bounty_only=False, | |
| limit=100, offset=0, api_name="/collect") | |
| scope = client.predict(platform="hackerone", handle="security", api_name="/scope") | |
| ``` | |
| Scope is a snapshot: check the linked program's current rules and exclusions before testing.''') | |
| source_button = gr.Button("Source information") | |
| source_json = gr.JSON(label="Supported sources") | |
| source_button.click(sources, [], source_json, api_name="sources") | |
| demo.queue(max_size=32, default_concurrency_limit=2) | |
| # Register REST routes before the root Gradio mount. Existing Gradio URLs stay unchanged. | |
| app = gr.mount_gradio_app(create_api(), demo, path="/", show_error=False, ssr_mode=False) | |
| if __name__ == "__main__": | |
| import uvicorn | |
| uvicorn.run(app, host="0.0.0.0", port=int(os.getenv("PORT", "7860"))) | |