miniBase/web/minibase/blueprints/user/routes.py

from flask import render_template, url_for, flash, redirect, request, Blueprint
from flask_login import login_user, current_user, logout_user, login_required
from minibase.app import db, bcrypt
import minibase.theme as theme
from minibase.blueprints.user.models import Users, User_Roles
import minibase.blueprints.database.utils as dbUtils
import minibase.blueprints.user.utils as UserUtils
from minibase.blueprints.user.forms import registrationForm, loginForm, resetPasswordForm, requestResetForm, updateRoleForm, accountUpdateForm
import minibase.blueprints.main.utils as mainUtils

# Declaring a blueprint
user = Blueprint('user', __name__, template_folder='templates')

@user.route("/register", methods=['GET', 'POST'])
def register():
    if current_user.is_authenticated:
        flash('You are already logged in', 'success')
        return redirect(url_for('main.index'))

    user = Users()
    form = registrationForm()
    form.populate_for_adding(user)

    if request.method == 'GET':
        form.populate_for_adding(user)

    if form.validate_on_submit():
        mainUtils.fill_model(user, form)
        user.password = bcrypt.generate_password_hash(form.password.data).decode('utf-8')
        dbUtils.dbAddAndCommit(user)
        flash('User has been successfully added', 'success')

    return render_template('edit.html',
                            theme=theme,
                            form=form)


@user.route("/login", methods=['GET', 'POST'])
def login():
    if current_user.is_authenticated:  # Is the user alredy authenticated?
        return redirect(url_for('main.index'))  # Then redirect home

    form = loginForm()
    if form.validate_on_submit():
        user = UserUtils.dbGetMailFirst(form.email.data)
        if user and bcrypt.check_password_hash(user.password, form.password.data):
            login_user(user, remember=form.remember.data)
            next_page = request.args.get('next')
            return redirect(next_page) if next_page else redirect(url_for('main.index'))
        else:
            flash('Login unsuccessful. Please chek your Email and Password!', 'danger')
    return render_template('user/login.html',
                            theme=theme,
                            form=form)


@user.route("/logout")
def logout():
    logout_user()
    return redirect(url_for('main.index'))


@user.route("/account", methods=['GET', 'POST'])
@login_required
def account():
    form = accountUpdateForm()
    form.populate_for_update(current_user)
    _accountInfo = mainUtils.accountInfo(
            title=current_user.username,
            description=current_user.email_account,
            short=current_user.role,
            status=current_user.name,
            image_file=mainUtils.imageFileLink(current_user.image_file)
            )

    if form.validate_on_submit():
        mainUtils.fill_model(current_user, form)

        if form.image_file.data:
            picture_file = mainUtils.save_picture(form.image_file.data)
            current_user.image_file = picture_file

        if form.password.data:
            print(f"Passsword is :  {form.password.data}")
            print(f"User pass id :  {current_user.password}")
            hashed = bcrypt.generate_password_hash(form.password.data).decode('utf-8')
            current_user.password = hashed
            print(f"Hashed is :  {hashed}")
            print(f"Hashed is :  {current_user.password}")
        db.session.commit()
        flash('Your account has been updated!', 'success')
        return redirect(url_for('user.accountt'))

    elif request.method == 'GET':
        mainUtils.populate_form(form, current_user)

    return render_template('account.html',
                                theme=theme,
                                accountInfo=_accountInfo,
                                form=form)


@user.route("/reset_password", methods=['GET', 'POST'])
def reset_request():
    if current_user.is_authenticated:
        return redirect(url_for('main.index'))
    form = requestResetForm()
    if form.validate_on_submit():
        user = UserUtils.dbGetMailFirst(form.email.data)
        mainUtils.send_reset_email(user)
        flash('An Email has been sent with instruction to reset your password', 'warning')
    return render_template('user/reset_request.html',
                            theme=theme,
                            form=form)


@user.route("/reset_password/<token>", methods=['GET', 'POST'])
def reset_token(token):
    if current_user.is_authenticated:
        return redirect(url_for('main.index'))
    user = Users.verify_reset_token(token)
    if user is None:
        flash('That is an invalid or expired token', 'warning')
        return redirect(url_for('user.reset_request'))
    form = resetPasswordForm()
    if form.validate_on_submit():
        hashed_pw = bcrypt.generate_password_hash(form.password.data).decode('utf-8')
        user.password = hashed_pw
        db.session.commit()
        flash(f'{"Your password has benn updated"}', 'success')
        return redirect(url_for('user.login'))
    return render_template('user/reset_token.html',
                            theme=theme,
                            form=form)


@user.route("/roles", methods=['GET', 'POST'])
@login_required
def roles():
    page=request.args.get('page', 1, type=int)
    table=dbUtils.table_printable_paginate(User_Roles, page, 20, 'role/edit/', 'id')
    return(render_template('view.html', theme=theme, table=table, title="User Roles"))


class bottons:
    def __init__(self, name, link):
        self.name = name
        self.link = link


@user.route("/role/edit/<int:id>", methods=['GET', 'POST'])
@login_required
def updateRole(id):
    if current_user.role.id == 1:
        extraButton=[]
        extraButton.append(bottons('Back To Roles', url_for('user.roles')))
        role = UserUtils.queryRoleById(id)
        form = updateRoleForm()
        if form.validate_on_submit():
            role.title = form.role.data
            role.description = form.description.data
            dbUtils.dbCommit()
            flash('The role has been updated', 'success')
            return redirect(url_for('user.updateRole', id=role.id))
        elif request.method == 'GET':
            form.id.data  = role.id
            form.role.data = role.name
            form.description.data = role.description
        return(render_template('edit.html', theme=theme, form=form, title=current_user.role.name, extraButtons=extraButton))
    else:
        flash('You have no permission to do that', 'danger')
        return redirect(url_for('main.index'))