main.py 37 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747
  1. import datetime
  2. import os
  3. import logging
  4. from flask import Flask, render_template, request, url_for
  5. from flask_login import login_user, current_user, LoginManager, logout_user, login_required
  6. from flask_wtf import CSRFProtect
  7. from flask_restful import abort
  8. from werkzeug.datastructures import CombinedMultiDict
  9. from werkzeug.utils import redirect
  10. from itsdangerous import URLSafeTimedSerializer, SignatureExpired
  11. from sqlalchemy import or_
  12. from json import loads
  13. from waitress import serve
  14. from functions import check_password, mail, init_db_default, get_projects_data, get_user_data, save_project_logo, \
  15. overdue_quest_project, save_proof_quest, find_files_answer, file_tree, delete_project_data, delete_quest_data, \
  16. copy_template, save_admin_data
  17. from forms.edit_profile import EditProfileForm
  18. from forms.login import LoginForm
  19. from forms.find_project import FindProjectForm
  20. from forms.register import RegisterForm
  21. from forms.project import ProjectForm, AddFileProject
  22. from forms.recovery import RecoveryForm, NewPasswordForm
  23. from forms.conf_delete_project import DeleteProjectForm
  24. from forms.task import Task, AnswerTask
  25. from forms.encrypt_form import EncryptForm
  26. from data.users import User
  27. from data.quests import Quests
  28. from data.answer import Answer
  29. from data.proof_file import FileProof
  30. from data.files import Files
  31. from data.projects import Projects
  32. from data.staff_projects import StaffProjects
  33. from data.roles import Roles
  34. from data import db_session
  35. app = Flask(__name__)
  36. with open('incepted.config', 'r', encoding='utf-8') as file:
  37. file = file.read()
  38. file = loads(file)
  39. key = file["encrypt_key"]
  40. app.config['SECRET_KEY'] = key
  41. app.debug = True
  42. logging.basicConfig(level=logging.INFO, filename="logfiles/main.log", format="%(asctime)s %(levelname)s %(message)s",
  43. encoding='utf-8')
  44. csrf = CSRFProtect(app)
  45. s = URLSafeTimedSerializer(key)
  46. login_manager = LoginManager()
  47. login_manager.init_app(app)
  48. @app.route('/')
  49. def base():
  50. if not current_user.is_authenticated:
  51. return render_template('main.html', title='Главная')
  52. else:
  53. return redirect('/projects')
  54. @app.route('/admin', methods=['GET', 'POST'])
  55. def admin():
  56. if current_user.is_authenticated:
  57. if current_user.role == 1:
  58. data_session = db_session.create_session()
  59. roles, users = data_session.query(Roles).all(), \
  60. data_session.query(User).filter(User.id != current_user.id).all()
  61. form = EncryptForm()
  62. if request.method == 'POST':
  63. data_form = request.form.to_dict()
  64. del data_form['csrf_token'], data_form['submit']
  65. data_form = list(map(lambda x: (x[0], x[1]), data_form.items()))
  66. list(
  67. map(lambda x: save_admin_data(x, data_session), list(filter(lambda x: 'role_' in x[0], data_form))))
  68. activ_id = list(
  69. map(lambda user: int(user[0].split('_')[-1]), list(filter(lambda x: 'active_' in x[0], data_form))))
  70. banned_id = list(
  71. map(lambda user: int(user[0].split('_')[-1]), list(filter(lambda x: 'banned_' in x[0], data_form))))
  72. for user in users:
  73. if int(user.role) != 1:
  74. user.activated = 0 if user.id not in activ_id else 1
  75. user.banned = 0 if user.id not in banned_id else 1
  76. data_session.commit()
  77. return render_template('admin.html', title='Панель админа', roles=roles, users=users, form=form)
  78. abort(404)
  79. @app.route('/template/<int:id_template>/create')
  80. def create_by_template(id_template):
  81. if current_user.is_authenticated:
  82. data_session = db_session.create_session()
  83. current_template = data_session.query(Projects).filter(Projects.id == id_template).first()
  84. if current_template:
  85. add_project = Projects(
  86. name=current_template.name,
  87. description=current_template.description,
  88. date_create=datetime.datetime.now(),
  89. creator=current_user.id,
  90. is_open=False,
  91. is_template=False
  92. )
  93. data_session.add(add_project)
  94. data_session.flush()
  95. data_session.refresh(add_project)
  96. data_session.commit()
  97. copy_template(current_template, add_project, data_session, current_user)
  98. return redirect('/projects')
  99. else:
  100. abort(403)
  101. else:
  102. return redirect('/login')
  103. @app.route('/template/<int:id_template>')
  104. def template_project(id_template):
  105. if current_user.is_authenticated:
  106. data_session = db_session.create_session()
  107. current_project = data_session.query(Projects).filter(Projects.id == id_template).first()
  108. if current_project:
  109. quests = data_session.query(Quests).filter(Quests.project == current_project.id).all()
  110. files_list = file_tree(f'static/app_files/all_projects/{current_project.id}')
  111. return render_template('template_project.html', title=f'Шаблон {current_project.name}',
  112. project=current_project, quests=quests, file_tree=files_list)
  113. else:
  114. abort(404)
  115. else:
  116. return redirect('/login')
  117. @app.route('/showcase', methods=['GET', 'POST'])
  118. def showcase():
  119. if current_user.is_authenticated:
  120. data_session = db_session.create_session()
  121. list_template = list(map(lambda curr_project: get_projects_data(curr_project),
  122. data_session.query(Projects).filter(Projects.is_template == 1).all()))
  123. return render_template('showcase.html', title='Витрина', list_template=list_template)
  124. else:
  125. return redirect('/login')
  126. @app.route('/project/<int:id_project>/quest/<int:id_task>/edit', methods=['GET', 'POST'])
  127. def edit_quest(id_project, id_task):
  128. if current_user.is_authenticated:
  129. data_session = db_session.create_session()
  130. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  131. current_task = data_session.query(Quests).filter(Quests.id == id_task).first()
  132. if current_project and current_task and current_task.project == current_project.id and (
  133. current_task.creator == current_user.id or current_project.creator == current_user.id):
  134. form = Task()
  135. if request.method == 'GET':
  136. form.name.data = current_task.name
  137. form.description.data = current_task.description
  138. form.deadline_time.data = current_task.deadline.time()
  139. form.deadline_date.data = current_task.deadline.date()
  140. if form.delete.data:
  141. delete_quest_data(current_task, data_session)
  142. data_session.delete(current_task)
  143. data_session.commit()
  144. return redirect(f'/project/{str(current_project.id)}')
  145. if form.validate_on_submit():
  146. if form.deadline_date.data and form.deadline_time.data:
  147. deadline = datetime.datetime.combine(form.deadline_date.data, form.deadline_time.data)
  148. else:
  149. deadline = None
  150. current_task.name = form.name.data if form.name.data else None
  151. current_task.description = form.description.data if form.description.data else None
  152. current_task.deadline = deadline
  153. data_session.commit()
  154. return redirect(f'/project/{str(current_project.id)}/quest/{str(current_task.id)}')
  155. return render_template('edit_task.html', title='Редактирование задачи', form=form, porject=current_project,
  156. task=current_task)
  157. else:
  158. abort(403)
  159. else:
  160. return redirect('/login')
  161. @app.route('/project/<int:id_project>/file/<int:id_file>/delete')
  162. def delete_file(id_project, id_file):
  163. if current_user.is_authenticated:
  164. from_path = request.args.get('from') if request.args.get('from') else ''
  165. data_session = db_session.create_session()
  166. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  167. current_file = data_session.query(Files).filter(Files.id == id_file).first()
  168. if current_project and current_file:
  169. if current_user.id in map(lambda x: x[0], data_session.query(StaffProjects.user).filter(
  170. StaffProjects.project == current_project.id).all()) or current_user.id == current_project.creator:
  171. current_proof = data_session.query(FileProof).filter(FileProof.file == id_file).all()
  172. os.remove(current_file.path)
  173. data_session.delete(current_file)
  174. if current_proof:
  175. quest = data_session.query(Answer.quest).filter(Answer.id == current_proof[0].answer).first()
  176. for i in current_proof:
  177. data_session.delete(i)
  178. data_session.commit()
  179. if from_path == 'project':
  180. return redirect(f'/project/{current_project.id}')
  181. return redirect(f'/project/{current_project.id}/quest/{quest[0]}')
  182. data_session.commit()
  183. return redirect(f'/project/{current_project.id}')
  184. else:
  185. abort(403)
  186. else:
  187. abort(404)
  188. else:
  189. return redirect('/login')
  190. @app.route('/project/<int:id_project>/quest/<int:id_task>', methods=['GET', 'POST'])
  191. def task_project(id_project, id_task):
  192. if current_user.is_authenticated:
  193. data_session = db_session.create_session()
  194. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  195. current_task = data_session.query(Quests).filter(Quests.id == id_task).first()
  196. if current_project and current_task and current_task.project == current_project.id:
  197. form = AnswerTask()
  198. current_answer = data_session.query(Answer).filter(Answer.quest == current_task.id).first()
  199. list_files = None
  200. if form.submit.data and request.method == 'POST':
  201. if current_answer:
  202. current_answer.text = form.text.data
  203. current_answer.date_edit = datetime.datetime.now()
  204. current_task.realized = form.realized.data
  205. data_session.commit()
  206. if form.file.data[0].filename:
  207. files = list(
  208. map(lambda x: save_proof_quest(current_project, x, current_user.id), form.file.data))
  209. for i in files:
  210. if not data_session.query(FileProof).filter(FileProof.answer == current_answer.id,
  211. FileProof.file == i).first():
  212. proof_file = FileProof(
  213. answer=current_answer.id,
  214. file=i
  215. )
  216. data_session.add(proof_file)
  217. data_session.commit()
  218. else:
  219. if form.file.data[0].filename:
  220. files = list(
  221. map(lambda x: save_proof_quest(current_project, x, current_user.id), form.file.data))
  222. else:
  223. files = False
  224. current_task.realized = form.realized.data
  225. current_answer = Answer(
  226. quest=current_task.id,
  227. text=form.text.data,
  228. creator=current_user.id,
  229. date_create=datetime.datetime.now(),
  230. date_edit=datetime.datetime.now()
  231. )
  232. data_session.add(current_answer)
  233. data_session.flush()
  234. data_session.refresh(current_answer)
  235. if files:
  236. for i in files:
  237. proof_file = FileProof(
  238. answer=current_answer.id,
  239. file=i
  240. )
  241. data_session.add(proof_file)
  242. data_session.commit()
  243. return redirect(f'/project/{current_project.id}')
  244. if current_answer and request.method == 'GET':
  245. form.text.data = current_answer.text
  246. form.realized.data = current_task.realized
  247. files = data_session.query(FileProof).filter(FileProof.answer == current_answer.id).all()
  248. if files:
  249. list_files = list(map(lambda x: find_files_answer(x.file), files))
  250. return render_template('answer.html', title='Решение', project=current_project, task=current_task,
  251. form=form, list_files=list_files)
  252. else:
  253. abort(404)
  254. else:
  255. return redirect('/login')
  256. @app.route('/project/<int:id_project>/quest/new', methods=['GET', 'POST'])
  257. def new_task_project(id_project):
  258. if current_user.is_authenticated:
  259. data_session = db_session.create_session()
  260. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  261. if current_project:
  262. form = Task()
  263. if form.validate_on_submit():
  264. if form.deadline_date.data and form.deadline_time.data:
  265. deadline = datetime.datetime.combine(form.deadline_date.data, form.deadline_time.data)
  266. else:
  267. deadline = None
  268. quest = Quests(
  269. project=current_project.id,
  270. creator=current_user.id,
  271. name=form.name.data if form.name.data else None,
  272. description=form.description.data if form.description.data else None,
  273. date_create=datetime.datetime.now(),
  274. deadline=deadline,
  275. realized=False
  276. )
  277. data_session.add(quest)
  278. data_session.commit()
  279. return redirect(f'/project/{str(current_project.id)}')
  280. return render_template('new_task.html', title='Новая задача', form=form, porject=current_project)
  281. else:
  282. abort(404)
  283. else:
  284. return redirect('/login')
  285. @app.route('/project/<int:id_project>/edit', methods=['GET', 'POST'])
  286. def edit_project(id_project):
  287. if current_user.is_authenticated:
  288. data_session = db_session.create_session()
  289. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  290. if current_project:
  291. staff = data_session.query(StaffProjects).filter(StaffProjects.project == current_project.id).all()
  292. if current_user.id == current_project.creator:
  293. list_users = list(
  294. map(lambda x: get_user_data(x),
  295. data_session.query(User).filter(User.id != current_user.id, User.activated == 1).all()))
  296. staff = list(map(lambda x: get_user_data(x), data_session.query(User).filter(
  297. User.id.in_(list(map(lambda x: x.user, staff)))).all())) if staff else []
  298. form = ProjectForm()
  299. if form.save.data:
  300. new_staff = []
  301. for i in list_users:
  302. if request.form.getlist(f"choose_{i['login']}") and i['id'] != current_user.id:
  303. new_staff.append(i)
  304. if i not in staff:
  305. new_staffer = StaffProjects(
  306. user=i['id'],
  307. project=current_project.id,
  308. role='user',
  309. permission=3
  310. )
  311. data_session.add(new_staffer)
  312. data_session.commit()
  313. if sorted(new_staff, key=lambda x: x['id']) != sorted(staff, key=lambda x: x['id']):
  314. for i in staff:
  315. if i not in new_staff:
  316. data_session.delete(data_session.query(StaffProjects).filter(
  317. StaffProjects.user == i['id'], StaffProjects.project == current_project.id).first())
  318. data_session.commit()
  319. if form.logo.data:
  320. current_project.photo = save_project_logo(form.logo.data)
  321. data_session.commit()
  322. current_project.name = form.name.data
  323. current_project.description = form.description.data
  324. data_session.commit()
  325. return redirect(f'/project/{current_project.id}')
  326. if form.del_photo.data:
  327. os.remove(current_project.photo)
  328. current_project.photo = 'static/images/none_project.png'
  329. data_session.commit()
  330. return redirect(f'/project/{current_project.id}/edit')
  331. form.name.data = current_project.name
  332. form.description.data = current_project.description
  333. return render_template('edit_project.html', title='Изменение проекта', form=form, list_users=list_users,
  334. staff=staff, project=current_project)
  335. else:
  336. abort(403)
  337. else:
  338. abort(404)
  339. else:
  340. return redirect('/login')
  341. @app.route('/project/<int:id_project>', methods=['POST', 'GET'])
  342. def project(id_project):
  343. if current_user.is_authenticated:
  344. data_session = db_session.create_session()
  345. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  346. if current_project:
  347. staff = data_session.query(StaffProjects).filter(StaffProjects.project == current_project.id).all()
  348. if current_user.id == current_project.creator or current_user.id in list(map(lambda x: x.user, staff)):
  349. staff = list(map(lambda x: get_user_data(x), data_session.query(User).filter(
  350. User.id.in_(list(map(lambda x: x.user, staff)))).all())) if staff else []
  351. quests = data_session.query(Quests).filter(Quests.project == current_project.id).all()
  352. if quests:
  353. quests_sort = sorted(list(filter(lambda x: x.deadline is not None, quests)),
  354. key=lambda x: (x.realized, x.deadline))
  355. quests = list(filter(lambda x: x.realized == 0, quests_sort)) + list(
  356. filter(lambda x: x.deadline is None, quests)) + list(
  357. filter(lambda x: x.realized == 1, quests_sort))
  358. quests = list(map(lambda x: overdue_quest_project(x), quests))
  359. files_list = file_tree(f'static/app_files/all_projects/{current_project.id}')
  360. form_file = AddFileProject()
  361. if form_file.validate_on_submit():
  362. if form_file.file.data[0].filename:
  363. files = list(
  364. map(lambda x: save_proof_quest(current_project, x, current_user.id), form_file.file.data))
  365. return redirect(f'/project/{str(current_project.id)}')
  366. return render_template('project.html',
  367. project=current_project,
  368. title=current_project.name,
  369. staff=staff,
  370. quests=quests,
  371. file_tree=files_list,
  372. form_file=form_file)
  373. else:
  374. abort(403)
  375. else:
  376. abort(404)
  377. else:
  378. return redirect('/login')
  379. @app.route('/recovery/confirmation/<token>', methods=['GET', 'POST'])
  380. def conf_recovery(token):
  381. try:
  382. user_email = s.loads(token, max_age=86400)
  383. data_session = db_session.create_session()
  384. user = data_session.query(User).filter(User.email == user_email).first()
  385. if user:
  386. form = NewPasswordForm()
  387. if form.validate_on_submit():
  388. if form.password.data != form.repeat_password.data:
  389. return render_template('recovery.html', title='Восстановление', form=form, recovery=0,
  390. message='Пароли не совпадают')
  391. status_password = check_password(form.password.data)
  392. if status_password != 'OK':
  393. return render_template('recovery.html', title='Восстановление', form=form, recovery=0,
  394. message=str(status_password))
  395. user.set_password(form.password.data)
  396. data_session.commit()
  397. mail(f'Для аккаунта {user.login}, успешно был обновлен пароль', user.email,
  398. 'Изменение пароля')
  399. return redirect('/login?message=Пароль обновлен')
  400. return render_template('recovery.html', title='Восстановление', form=form, recovery=0, message='')
  401. else:
  402. return redirect('/login?message=Пользователь не найден&danger=True')
  403. except SignatureExpired:
  404. return redirect('/login?message=Срок действия ссылки истек&danger=True')
  405. @app.route('/recovery', methods=['GET', 'POST'])
  406. def recovery():
  407. if not current_user.is_authenticated:
  408. form = RecoveryForm()
  409. if form.validate_on_submit():
  410. token = s.dumps(form.email.data)
  411. link_conf = url_for('conf_recovery', token=token, _external=True)
  412. mail(f'Для сбросы пароля пройдите по ссылке: {link_conf}', form.email.data,
  413. 'Восстановление доступа')
  414. return redirect('/login?message=Мы выслали ссылку для сброса вам на почту')
  415. return render_template('recovery.html', title='Восстановление пароля', form=form, recovery=True, message='')
  416. else:
  417. return redirect('/')
  418. @app.route('/project/<int:id_project>/delete', methods=['GET', 'POST'])
  419. def delete_project(id_project):
  420. if current_user.is_authenticated:
  421. data_session = db_session.create_session()
  422. project_del = data_session.query(Projects).filter(Projects.id == id_project).first()
  423. if project_del:
  424. if project_del.creator == current_user.id:
  425. form = DeleteProjectForm()
  426. if form.validate_on_submit():
  427. if str(form.conf.data).lower().strip() != f'delete/{str(project_del.name)}'.lower().strip():
  428. return render_template('delete_project.html', title='Удаление проекта', form=form,
  429. project=project_del,
  430. message='Вы не правильно ввели фразу')
  431. delete_project_data(project_del, data_session)
  432. return redirect('/projects')
  433. return render_template('delete_project.html', title='Удаление проекта', form=form, project=project_del,
  434. message='')
  435. else:
  436. abort(403)
  437. else:
  438. abort(404)
  439. else:
  440. return redirect('/login')
  441. @app.route('/user/<string:_login>', methods=['GET', 'POST'])
  442. def user_view(_login):
  443. if current_user.is_authenticated:
  444. data_session = db_session.create_session()
  445. user = data_session.query(User).filter(User.login == _login).first()
  446. if user:
  447. current_projects = data_session.query(Projects).filter(or_(Projects.creator == user.id, Projects.id.in_(
  448. list(map(lambda x: x[0], data_session.query(
  449. StaffProjects.project).filter(
  450. StaffProjects.user == user.id).all()))))).all()
  451. resp = list(map(lambda x: get_projects_data(x), current_projects))
  452. return render_template('user_view.html',
  453. title=user.name if user.name else '' + ' ' + user.surname if user.surname else '',
  454. user=user,
  455. list_projects=resp)
  456. else:
  457. abort(404)
  458. else:
  459. return redirect('/login')
  460. @app.route('/projects/new', methods=['GET', 'POST'])
  461. def new_project():
  462. if current_user.is_authenticated:
  463. form = ProjectForm()
  464. data_session = db_session.create_session()
  465. list_users = list(
  466. map(lambda x: get_user_data(x), data_session.query(User).filter(User.id != current_user.id).all()))
  467. if form.validate_on_submit():
  468. current_project = Projects(
  469. name=form.name.data,
  470. description=form.description.data,
  471. date_create=datetime.datetime.now(),
  472. creator=current_user.id,
  473. is_template=form.is_template.data
  474. )
  475. current_project.photo = save_project_logo(
  476. form.logo.data) if form.logo.data else 'static/images/none_project.png'
  477. data_session.add(current_project)
  478. data_session.flush()
  479. data_session.refresh(current_project)
  480. for i in list_users:
  481. if request.form.getlist(f"choose_{i['login']}") and i['id'] != current_user.id:
  482. new_staffer = StaffProjects(
  483. user=i['id'],
  484. project=current_project.id,
  485. role='user',
  486. permission=3
  487. )
  488. data_session.add(new_staffer)
  489. data_session.commit()
  490. os.mkdir(f'static/app_files/all_projects/{str(current_project.id)}')
  491. return redirect('/projects')
  492. return render_template('new_project.html', title='Новый проект', form=form, list_users=list_users)
  493. else:
  494. return redirect('/login')
  495. @app.route('/projects', methods=['GET', 'POST'])
  496. def projects():
  497. if current_user.is_authenticated:
  498. find = False
  499. form = FindProjectForm()
  500. data_session = db_session.create_session()
  501. resp = []
  502. current_projects = \
  503. data_session.query(Projects).filter(or_(Projects.creator == current_user.id,
  504. Projects.id.in_(
  505. list(map(lambda x: x[0],
  506. data_session.query(
  507. StaffProjects.project).filter(
  508. StaffProjects.user
  509. == current_user.id).all()))))).all()
  510. if form.validate_on_submit():
  511. new_resp = []
  512. for i in range(len(current_projects)):
  513. if str(form.project.data).lower().strip() in str(current_projects[i].name).lower().strip():
  514. new_resp.append(current_projects[i])
  515. current_projects = new_resp
  516. find = True
  517. resp = list(map(lambda x: get_projects_data(x), current_projects))
  518. return render_template('projects.html', title='Проекты', list_projects=resp, form=form, find=find)
  519. else:
  520. return redirect('/login')
  521. @app.route('/profile', methods=['GET', 'POST'])
  522. def profile():
  523. if current_user.is_authenticated:
  524. data_session = db_session.create_session()
  525. form = EditProfileForm(
  526. CombinedMultiDict((request.files, request.form)),
  527. email=current_user.email,
  528. name=current_user.name,
  529. surname=current_user.surname,
  530. about=current_user.about,
  531. birthday=current_user.birthday
  532. )
  533. if form.del_photo.data:
  534. user = data_session.query(User).filter(User.id == current_user.id).first()
  535. if not user:
  536. return render_template('profile.html', title='Профиль', form=form,
  537. message='Ошибка, пользователь ненайден')
  538. os.remove(current_user.photo)
  539. user.photo = 'static/images/none_logo.png'
  540. data_session.commit()
  541. if form.validate_on_submit():
  542. user = data_session.query(User).filter(User.id == current_user.id).first()
  543. if not user:
  544. return render_template('profile.html', title='Профиль', form=form,
  545. message='Ошибка, пользователь ненайден')
  546. if form.email.data != current_user.email:
  547. token = s.dumps(form.email.data)
  548. link_conf = url_for('confirmation', token=token, _external=True)
  549. mail(f'Для изменения почты пройдите по ссылке: {link_conf}', form.email.data,
  550. 'Изменение почты')
  551. user.activated = False
  552. user.email = form.email.data
  553. if form.photo.data:
  554. with open(f'static/app_files/user_logo/{current_user.login}.png', 'wb') as file:
  555. form.photo.data.save(file)
  556. user.photo = f'static/app_files/user_logo/{current_user.login}.png'
  557. user.name = form.name.data
  558. user.surname = form.surname.data
  559. user.about = form.about.data
  560. user.birthday = form.birthday.data
  561. data_session.commit()
  562. return redirect('/profile')
  563. return render_template('profile.html', title='Профиль', form=form, message='')
  564. else:
  565. return redirect('/login')
  566. @login_manager.user_loader
  567. def load_user(user_id):
  568. db_sess = db_session.create_session()
  569. return db_sess.query(User).get(user_id)
  570. @app.route('/login', methods=['GET', 'POST'])
  571. def login():
  572. if not current_user.is_authenticated:
  573. message = request.args.get('message') if request.args.get('message') else ''
  574. danger = request.args.get('danger') if request.args.get('danger') else False
  575. form = LoginForm()
  576. if form.validate_on_submit():
  577. data_session = db_session.create_session()
  578. user = data_session.query(User).filter(User.email == form.login.data).first()
  579. if not user:
  580. user = data_session.query(User).filter(User.login == form.login.data).first()
  581. if user and user.check_password(form.password.data):
  582. if user.activated and not user.banned:
  583. login_user(user, remember=form.remember_me.data)
  584. logging.info(f'{user.login} logged in')
  585. return redirect('/projects')
  586. elif user.banned:
  587. return render_template('login.html',
  588. message="Ваш аккаунт заблокирован, обратитесь в поддержку: inepted@yandex.ru",
  589. danger=True,
  590. form=form)
  591. else:
  592. return render_template('login.html',
  593. message="Ваша почта не подтверждена",
  594. danger=True,
  595. form=form)
  596. return render_template('login.html',
  597. message="Неправильный логин или пароль",
  598. danger=True,
  599. form=form)
  600. return render_template('login.html', title='Авторизация', form=form, message=message,
  601. danger=danger)
  602. else:
  603. return redirect('/projects')
  604. @app.route('/logout')
  605. @login_required
  606. def logout():
  607. logging.info(f'{current_user.login} logged out')
  608. logout_user()
  609. return redirect("/")
  610. @app.route('/register', methods=['GET', 'POST'])
  611. def register():
  612. if not current_user.is_authenticated:
  613. form = RegisterForm()
  614. if form.validate_on_submit():
  615. data_session = db_session.create_session()
  616. if data_session.query(User).filter(User.login == form.login.data).first():
  617. return render_template('register.html', form=form, message="Такой пользователь уже есть",
  618. title='Регистрация')
  619. if data_session.query(User).filter(User.email == form.email.data).first():
  620. return render_template('register.html', form=form, message="Такая почта уже есть", title='Регистрация')
  621. status_password = check_password(form.password.data)
  622. if status_password != 'OK':
  623. return render_template('register.html', form=form, message=status_password, title='Регистрация')
  624. user = User(
  625. email=form.email.data,
  626. name=form.name.data,
  627. login=form.login.data,
  628. activity=datetime.datetime.now(),
  629. data_reg=datetime.date.today(),
  630. photo='static/images/none_logo.png',
  631. role=3
  632. )
  633. user.set_password(form.password.data)
  634. data_session.add(user)
  635. data_session.commit()
  636. token = s.dumps(form.email.data)
  637. link_conf = url_for('confirmation', token=token, _external=True)
  638. mail(f'Для завершения регистрации пройдите по ссылке: {link_conf}', form.email.data,
  639. 'Подтверждение регистрации')
  640. logging.info(f'{form.login.data} was registered')
  641. return redirect('/login?message=Мы выслали ссылку для подтверждения почты')
  642. return render_template('register.html', form=form, message='', title='Регистрация')
  643. else:
  644. return redirect('/projects')
  645. @app.route('/confirmation/<token>')
  646. def confirmation(token):
  647. try:
  648. user_email = s.loads(token, max_age=86400)
  649. data_session = db_session.create_session()
  650. user = data_session.query(User).filter(User.email == user_email).first()
  651. if user:
  652. user.activated = True
  653. data_session.commit()
  654. logging.info(f'{user.login} has been confirmed')
  655. return redirect('/login?message=Почта успешно подтверждена')
  656. else:
  657. return redirect('/login?message=Пользователь не найден&danger=True')
  658. except SignatureExpired:
  659. data_session = db_session.create_session()
  660. users = data_session.query(User).filter(
  661. User.activated == 0 and User.activated < datetime.datetime.now() - datetime.timedelta(days=1)).all()
  662. if users:
  663. list(map(lambda x: data_session.delete(x), users))
  664. data_session.commit()
  665. return redirect('/login?message=Срок действия ссылки истек, данные удалены&danger=True')
  666. @app.errorhandler(500)
  667. def internal_server_error(error):
  668. return render_template('page_error.html', title='Ошибка сервера', error='500', message='Технические шоколадки')
  669. @app.errorhandler(404)
  670. def page_not_found(error):
  671. return render_template('page_error.html', title='Страница не найдена', error='404', message='Страница не найдена')
  672. @app.errorhandler(403)
  673. def access_error(error):
  674. return render_template('page_error.html', title='Ошибка доступа', error='403', message='Доступ сюда запрещен')
  675. def main():
  676. db_path = 'db/incepted.db'
  677. db = os.path.exists(db_path)
  678. db_session.global_init(db_path)
  679. if not db:
  680. init_db_default()
  681. serve(app, host='0.0.0.0', port=5000, threads=100)
  682. if __name__ == '__main__':
  683. try:
  684. main()
  685. except Exception as error:
  686. logging.warning(f'{error}')