锦中融合门户系统

from flask import Flask, request, send_file

import os

app = Flask(__name__)

# 允许的文件类型

ALLOWED_EXTENSIONS = {'pdf', 'docx', 'txt'}

def allowed_file(filename):

return '.' in filename and filename.rsplit('.', 1)[1].lower() in ALLOWED_EXTENSIONS

@app.route('/download/', methods=['GET'])

def download_file(filename):

if not allowed_file(filename):

return "文件类型不支持", 403

# 检查用户权限（此处简化）

if not check_user_permission():

return "无权限下载", 401

return send_file(os.path.join('uploads', filename))

def check_user_permission():

# 实际应用中应从数据库或会话中获取用户信息

return True