main.py 36 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740
  1. import datetime
  2. import os
  3. import logging
  4. from flask import Flask, render_template, request, url_for
  5. from flask_login import login_user, current_user, LoginManager, logout_user, login_required
  6. from flask_wtf import CSRFProtect
  7. from flask_restful import abort
  8. from werkzeug.datastructures import CombinedMultiDict
  9. from werkzeug.utils import redirect
  10. from itsdangerous import URLSafeTimedSerializer, SignatureExpired
  11. from sqlalchemy import or_
  12. from json import loads
  13. from waitress import serve
  14. from functions import check_password, mail, init_db_default, get_projects_data, get_user_data, save_project_logo, \
  15. overdue_quest_project, save_proof_quest, find_files_answer, file_tree, delete_project_data, delete_quest_data, \
  16. copy_template, save_admin_data
  17. from forms.edit_profile import EditProfileForm
  18. from forms.login import LoginForm
  19. from forms.find_project import FindProjectForm
  20. from forms.register import RegisterForm
  21. from forms.project import ProjectForm, AddFileProject
  22. from forms.recovery import RecoveryForm, NewPasswordForm
  23. from forms.conf_delete_project import DeleteProjectForm
  24. from forms.task import Task, AnswerTask
  25. from forms.encrypt_form import EncryptForm
  26. from data.users import User
  27. from data.quests import Quests
  28. from data.answer import Answer
  29. from data.proof_file import FileProof
  30. from data.files import Files
  31. from data.projects import Projects
  32. from data.staff_projects import StaffProjects
  33. from data.roles import Roles
  34. from data import db_session
  35. app = Flask(__name__)
  36. with open('incepted.config', 'r', encoding='utf-8') as file:
  37. file = file.read()
  38. file = loads(file)
  39. key = file["encrypt_key"]
  40. app.config['SECRET_KEY'] = key
  41. app.debug = True
  42. logging.basicConfig(level=logging.INFO, filename="logfiles/main.log", format="%(asctime)s %(levelname)s %(message)s",
  43. encoding='utf-8')
  44. csrf = CSRFProtect(app)
  45. s = URLSafeTimedSerializer(key)
  46. login_manager = LoginManager()
  47. login_manager.init_app(app)
  48. @app.route('/')
  49. def base():
  50. if not current_user.is_authenticated:
  51. return render_template('main.html', title='Главная')
  52. else:
  53. return redirect('/projects')
  54. @app.route('/admin', methods=['GET', 'POST'])
  55. def admin():
  56. if current_user.is_authenticated:
  57. if current_user.role == 1:
  58. data_session = db_session.create_session()
  59. roles, users = data_session.query(Roles).all(), \
  60. data_session.query(User).filter(User.id != current_user.id).all()
  61. form = EncryptForm()
  62. if request.method == 'POST':
  63. data_form = request.form.to_dict()
  64. del data_form['csrf_token'], data_form['submit']
  65. data_form = list(map(lambda x: (x[0], x[1]), data_form.items()))
  66. list(
  67. map(lambda x: save_admin_data(x, data_session), list(filter(lambda x: 'role_' in x[0], data_form))))
  68. list_id = list(map(lambda user: int(user[0].split('_')[-1]), list(filter(lambda x: 'active_' in x[0], data_form))))
  69. for user in users:
  70. if user.id not in list_id:
  71. user.activated = 0
  72. else:
  73. user.activated = 1
  74. data_session.commit()
  75. return render_template('admin.html', title='Панель админа', roles=roles, users=users, form=form)
  76. abort(404)
  77. @app.route('/template/<int:id_template>/create')
  78. def create_by_template(id_template):
  79. if current_user.is_authenticated:
  80. data_session = db_session.create_session()
  81. current_template = data_session.query(Projects).filter(Projects.id == id_template).first()
  82. if current_template:
  83. new_project = Projects(
  84. name=current_template.name,
  85. description=current_template.description,
  86. date_create=datetime.datetime.now(),
  87. creator=current_user.id,
  88. is_open=False,
  89. is_template=False
  90. )
  91. data_session.add(new_project)
  92. data_session.flush()
  93. data_session.refresh(new_project)
  94. data_session.commit()
  95. copy_template(current_template, new_project, data_session, current_user)
  96. return redirect('/projects')
  97. else:
  98. abort(403)
  99. else:
  100. return redirect('/login')
  101. @app.route('/template/<int:id_template>')
  102. def template_project(id_template):
  103. if current_user.is_authenticated:
  104. data_session = db_session.create_session()
  105. current_project = data_session.query(Projects).filter(Projects.id == id_template).first()
  106. if current_project:
  107. quests = data_session.query(Quests).filter(Quests.project == current_project.id).all()
  108. files_list = file_tree(f'static/app_files/all_projects/{current_project.id}')
  109. return render_template('template_project.html', title=f'Шаблон {current_project.name}',
  110. project=current_project, quests=quests, file_tree=files_list)
  111. else:
  112. abort(404)
  113. else:
  114. return redirect('/login')
  115. @app.route('/showcase', methods=['GET', 'POST'])
  116. def showcase():
  117. if current_user.is_authenticated:
  118. data_session = db_session.create_session()
  119. list_template = list(map(lambda curr_project: get_projects_data(curr_project),
  120. data_session.query(Projects).filter(Projects.is_template == 1).all()))
  121. return render_template('showcase.html', title='Витрина', list_template=list_template)
  122. else:
  123. return redirect('/login')
  124. @app.route('/project/<int:id_project>/quest/<int:id_task>/edit', methods=['GET', 'POST'])
  125. def edit_quest(id_project, id_task):
  126. if current_user.is_authenticated:
  127. data_session = db_session.create_session()
  128. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  129. current_task = data_session.query(Quests).filter(Quests.id == id_task).first()
  130. if current_project and current_task and current_task.project == current_project.id and (
  131. current_task.creator == current_user.id or current_project.creator == current_user.id):
  132. form = Task()
  133. if request.method == 'GET':
  134. form.name.data = current_task.name
  135. form.description.data = current_task.description
  136. form.deadline_time.data = current_task.deadline.time()
  137. form.deadline_date.data = current_task.deadline.date()
  138. if form.delete.data:
  139. delete_quest_data(current_task, data_session)
  140. data_session.delete(current_task)
  141. data_session.commit()
  142. return redirect(f'/project/{str(current_project.id)}')
  143. if form.validate_on_submit():
  144. if form.deadline_date.data and form.deadline_time.data:
  145. deadline = datetime.datetime.combine(form.deadline_date.data, form.deadline_time.data)
  146. else:
  147. deadline = None
  148. current_task.name = form.name.data if form.name.data else None
  149. current_task.description = form.description.data if form.description.data else None
  150. current_task.deadline = deadline
  151. data_session.commit()
  152. return redirect(f'/project/{str(current_project.id)}/quest/{str(current_task.id)}')
  153. return render_template('edit_task.html', title='Редактирование задачи', form=form, porject=current_project,
  154. task=current_task)
  155. else:
  156. abort(403)
  157. else:
  158. return redirect('/login')
  159. @app.route('/project/<int:id_project>/file/<int:id_file>/delete')
  160. def delete_file(id_project, id_file):
  161. if current_user.is_authenticated:
  162. from_path = request.args.get('from') if request.args.get('from') else ''
  163. data_session = db_session.create_session()
  164. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  165. current_file = data_session.query(Files).filter(Files.id == id_file).first()
  166. if current_project and current_file:
  167. if current_user.id in map(lambda x: x[0], data_session.query(StaffProjects.user).filter(
  168. StaffProjects.project == current_project.id).all()) or current_user.id == current_project.creator:
  169. current_proof = data_session.query(FileProof).filter(FileProof.file == id_file).all()
  170. os.remove(current_file.path)
  171. data_session.delete(current_file)
  172. if current_proof:
  173. quest = data_session.query(Answer.quest).filter(Answer.id == current_proof[0].answer).first()
  174. for i in current_proof:
  175. data_session.delete(i)
  176. data_session.commit()
  177. if from_path == 'project':
  178. return redirect(f'/project/{current_project.id}')
  179. return redirect(f'/project/{current_project.id}/quest/{quest[0]}')
  180. data_session.commit()
  181. return redirect(f'/project/{current_project.id}')
  182. else:
  183. abort(403)
  184. else:
  185. abort(404)
  186. else:
  187. return redirect('/login')
  188. @app.route('/project/<int:id_project>/quest/<int:id_task>', methods=['GET', 'POST'])
  189. def task_project(id_project, id_task):
  190. if current_user.is_authenticated:
  191. data_session = db_session.create_session()
  192. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  193. current_task = data_session.query(Quests).filter(Quests.id == id_task).first()
  194. if current_project and current_task and current_task.project == current_project.id:
  195. form = AnswerTask()
  196. current_answer = data_session.query(Answer).filter(Answer.quest == current_task.id).first()
  197. list_files = None
  198. if form.submit.data and request.method == 'POST':
  199. if current_answer:
  200. current_answer.text = form.text.data
  201. current_answer.date_edit = datetime.datetime.now()
  202. current_task.realized = form.realized.data
  203. data_session.commit()
  204. if form.file.data[0].filename:
  205. files = list(
  206. map(lambda x: save_proof_quest(current_project, x, current_user.id), form.file.data))
  207. for i in files:
  208. if not data_session.query(FileProof).filter(FileProof.answer == current_answer.id,
  209. FileProof.file == i).first():
  210. proof_file = FileProof(
  211. answer=current_answer.id,
  212. file=i
  213. )
  214. data_session.add(proof_file)
  215. data_session.commit()
  216. else:
  217. if form.file.data[0].filename:
  218. files = list(
  219. map(lambda x: save_proof_quest(current_project, x, current_user.id), form.file.data))
  220. else:
  221. files = False
  222. current_task.realized = form.realized.data
  223. current_answer = Answer(
  224. quest=current_task.id,
  225. text=form.text.data,
  226. creator=current_user.id,
  227. date_create=datetime.datetime.now(),
  228. date_edit=datetime.datetime.now()
  229. )
  230. data_session.add(current_answer)
  231. data_session.flush()
  232. data_session.refresh(current_answer)
  233. if files:
  234. for i in files:
  235. proof_file = FileProof(
  236. answer=current_answer.id,
  237. file=i
  238. )
  239. data_session.add(proof_file)
  240. data_session.commit()
  241. return redirect(f'/project/{current_project.id}')
  242. if current_answer and request.method == 'GET':
  243. form.text.data = current_answer.text
  244. form.realized.data = current_task.realized
  245. files = data_session.query(FileProof).filter(FileProof.answer == current_answer.id).all()
  246. if files:
  247. list_files = list(map(lambda x: find_files_answer(x.file), files))
  248. return render_template('answer.html', title='Решение', project=current_project, task=current_task,
  249. form=form, list_files=list_files)
  250. else:
  251. abort(404)
  252. else:
  253. return redirect('/login')
  254. @app.route('/project/<int:id_project>/quest/new', methods=['GET', 'POST'])
  255. def new_task_project(id_project):
  256. if current_user.is_authenticated:
  257. data_session = db_session.create_session()
  258. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  259. if current_project:
  260. form = Task()
  261. if form.validate_on_submit():
  262. if form.deadline_date.data and form.deadline_time.data:
  263. deadline = datetime.datetime.combine(form.deadline_date.data, form.deadline_time.data)
  264. else:
  265. deadline = None
  266. quest = Quests(
  267. project=current_project.id,
  268. creator=current_user.id,
  269. name=form.name.data if form.name.data else None,
  270. description=form.description.data if form.description.data else None,
  271. date_create=datetime.datetime.now(),
  272. deadline=deadline,
  273. realized=False
  274. )
  275. data_session.add(quest)
  276. data_session.commit()
  277. return redirect(f'/project/{str(current_project.id)}')
  278. return render_template('new_task.html', title='Новая задача', form=form, porject=current_project)
  279. else:
  280. abort(404)
  281. else:
  282. return redirect('/login')
  283. @app.route('/project/<int:id_project>/edit', methods=['GET', 'POST'])
  284. def edit_project(id_project):
  285. if current_user.is_authenticated:
  286. data_session = db_session.create_session()
  287. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  288. if current_project:
  289. staff = data_session.query(StaffProjects).filter(StaffProjects.project == current_project.id).all()
  290. if current_user.id == current_project.creator:
  291. list_users = list(
  292. map(lambda x: get_user_data(x),
  293. data_session.query(User).filter(User.id != current_user.id, User.activated == 1).all()))
  294. staff = list(map(lambda x: get_user_data(x), data_session.query(User).filter(
  295. User.id.in_(list(map(lambda x: x.user, staff)))).all())) if staff else []
  296. form = ProjectForm()
  297. if form.save.data:
  298. new_staff = []
  299. for i in list_users:
  300. if request.form.getlist(f"choose_{i['login']}") and i['id'] != current_user.id:
  301. new_staff.append(i)
  302. if i not in staff:
  303. new_staffer = StaffProjects(
  304. user=i['id'],
  305. project=current_project.id,
  306. role='user',
  307. permission=3
  308. )
  309. data_session.add(new_staffer)
  310. data_session.commit()
  311. if sorted(new_staff, key=lambda x: x['id']) != sorted(staff, key=lambda x: x['id']):
  312. for i in staff:
  313. if i not in new_staff:
  314. data_session.delete(data_session.query(StaffProjects).filter(
  315. StaffProjects.user == i['id'], StaffProjects.project == current_project.id).first())
  316. data_session.commit()
  317. if form.logo.data:
  318. current_project.photo = save_project_logo(form.logo.data)
  319. data_session.commit()
  320. current_project.name = form.name.data
  321. current_project.description = form.description.data
  322. data_session.commit()
  323. return redirect(f'/project/{current_project.id}')
  324. if form.del_photo.data:
  325. os.remove(current_project.photo)
  326. current_project.photo = 'static/images/none_project.png'
  327. data_session.commit()
  328. return redirect(f'/project/{current_project.id}/edit')
  329. form.name.data = current_project.name
  330. form.description.data = current_project.description
  331. return render_template('edit_project.html', title='Изменение проекта', form=form, list_users=list_users,
  332. staff=staff, project=current_project)
  333. else:
  334. abort(403)
  335. else:
  336. abort(404)
  337. else:
  338. return redirect('/login')
  339. @app.route('/project/<int:id_project>', methods=['POST', 'GET'])
  340. def project(id_project):
  341. if current_user.is_authenticated:
  342. data_session = db_session.create_session()
  343. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  344. if current_project:
  345. staff = data_session.query(StaffProjects).filter(StaffProjects.project == current_project.id).all()
  346. if current_user.id == current_project.creator or current_user.id in list(map(lambda x: x.user, staff)):
  347. staff = list(map(lambda x: get_user_data(x), data_session.query(User).filter(
  348. User.id.in_(list(map(lambda x: x.user, staff)))).all())) if staff else []
  349. quests = data_session.query(Quests).filter(Quests.project == current_project.id).all()
  350. if quests:
  351. quests_sort = sorted(list(filter(lambda x: x.deadline is not None, quests)),
  352. key=lambda x: (x.realized, x.deadline))
  353. quests = list(filter(lambda x: x.realized == 0, quests_sort)) + list(
  354. filter(lambda x: x.deadline is None, quests)) + list(
  355. filter(lambda x: x.realized == 1, quests_sort))
  356. quests = list(map(lambda x: overdue_quest_project(x), quests))
  357. files_list = file_tree(f'static/app_files/all_projects/{current_project.id}')
  358. form_file = AddFileProject()
  359. if form_file.validate_on_submit():
  360. if form_file.file.data[0].filename:
  361. files = list(
  362. map(lambda x: save_proof_quest(current_project, x, current_user.id), form_file.file.data))
  363. return redirect(f'/project/{str(current_project.id)}')
  364. return render_template('project.html',
  365. project=current_project,
  366. title=current_project.name,
  367. staff=staff,
  368. quests=quests,
  369. file_tree=files_list,
  370. form_file=form_file)
  371. else:
  372. abort(403)
  373. else:
  374. abort(404)
  375. else:
  376. return redirect('/login')
  377. @app.route('/recovery/confirmation/<token>', methods=['GET', 'POST'])
  378. def conf_recovery(token):
  379. try:
  380. user_email = s.loads(token, max_age=86400)
  381. data_session = db_session.create_session()
  382. user = data_session.query(User).filter(User.email == user_email).first()
  383. if user:
  384. form = NewPasswordForm()
  385. if form.validate_on_submit():
  386. if form.password.data != form.repeat_password.data:
  387. return render_template('recovery.html', title='Восстановление', form=form, recovery=0,
  388. message='Пароли не совпадают')
  389. status_password = check_password(form.password.data)
  390. if status_password != 'OK':
  391. return render_template('recovery.html', title='Восстановление', form=form, recovery=0,
  392. message=str(status_password))
  393. user.set_password(form.password.data)
  394. data_session.commit()
  395. mail(f'Для аккаунта {user.login}, успешно был обновлен пароль', user.email,
  396. 'Изменение пароля')
  397. return redirect('/login?message=Пароль обновлен')
  398. return render_template('recovery.html', title='Восстановление', form=form, recovery=0, message='')
  399. else:
  400. return redirect('/login?message=Пользователь не найден&danger=True')
  401. except SignatureExpired:
  402. return redirect('/login?message=Срок действия ссылки истек&danger=True')
  403. @app.route('/recovery', methods=['GET', 'POST'])
  404. def recovery():
  405. if not current_user.is_authenticated:
  406. form = RecoveryForm()
  407. if form.validate_on_submit():
  408. token = s.dumps(form.email.data)
  409. link_conf = url_for('conf_recovery', token=token, _external=True)
  410. mail(f'Для сбросы пароля пройдите по ссылке: {link_conf}', form.email.data,
  411. 'Восстановление доступа')
  412. return redirect('/login?message=Мы выслали ссылку для сброса вам на почту')
  413. return render_template('recovery.html', title='Восстановление пароля', form=form, recovery=True, message='')
  414. else:
  415. return redirect('/')
  416. @app.route('/project/<int:id_project>/delete', methods=['GET', 'POST'])
  417. def delete_project(id_project):
  418. if current_user.is_authenticated:
  419. data_session = db_session.create_session()
  420. project_del = data_session.query(Projects).filter(Projects.id == id_project).first()
  421. if project_del:
  422. if project_del.creator == current_user.id:
  423. form = DeleteProjectForm()
  424. if form.validate_on_submit():
  425. if str(form.conf.data).lower().strip() != f'delete/{str(project_del.name)}'.lower().strip():
  426. return render_template('delete_project.html', title='Удаление проекта', form=form,
  427. project=project_del,
  428. message='Вы не правильно ввели фразу')
  429. delete_project_data(project_del, data_session)
  430. return redirect('/projects')
  431. return render_template('delete_project.html', title='Удаление проекта', form=form, project=project_del,
  432. message='')
  433. else:
  434. abort(403)
  435. else:
  436. abort(404)
  437. else:
  438. return redirect('/login')
  439. @app.route('/user/<string:_login>', methods=['GET', 'POST'])
  440. def user_view(_login):
  441. if current_user.is_authenticated:
  442. data_session = db_session.create_session()
  443. user = data_session.query(User).filter(User.login == _login).first()
  444. if user:
  445. current_projects = data_session.query(Projects).filter(or_(Projects.creator == user.id, Projects.id.in_(
  446. list(map(lambda x: x[0], data_session.query(
  447. StaffProjects.project).filter(
  448. StaffProjects.user == user.id).all()))))).all()
  449. resp = list(map(lambda x: get_projects_data(x), current_projects))
  450. return render_template('user_view.html',
  451. title=user.name if user.name else '' + ' ' + user.surname if user.surname else '',
  452. user=user,
  453. list_projects=resp)
  454. else:
  455. abort(404)
  456. else:
  457. return redirect('/login')
  458. @app.route('/projects/new', methods=['GET', 'POST'])
  459. def new_project():
  460. if current_user.is_authenticated:
  461. form = ProjectForm()
  462. data_session = db_session.create_session()
  463. list_users = list(
  464. map(lambda x: get_user_data(x), data_session.query(User).filter(User.id != current_user.id).all()))
  465. if form.validate_on_submit():
  466. current_project = Projects(
  467. name=form.name.data,
  468. description=form.description.data,
  469. date_create=datetime.datetime.now(),
  470. creator=current_user.id,
  471. is_template=form.is_template.data
  472. )
  473. current_project.photo = save_project_logo(
  474. form.logo.data) if form.logo.data else 'static/images/none_project.png'
  475. data_session.add(current_project)
  476. data_session.flush()
  477. data_session.refresh(current_project)
  478. for i in list_users:
  479. if request.form.getlist(f"choose_{i['login']}") and i['id'] != current_user.id:
  480. new_staffer = StaffProjects(
  481. user=i['id'],
  482. project=current_project.id,
  483. role='user',
  484. permission=3
  485. )
  486. data_session.add(new_staffer)
  487. data_session.commit()
  488. os.mkdir(f'static/app_files/all_projects/{str(current_project.id)}')
  489. return redirect('/projects')
  490. return render_template('new_project.html', title='Новый проект', form=form, list_users=list_users)
  491. else:
  492. return redirect('/login')
  493. @app.route('/projects', methods=['GET', 'POST'])
  494. def projects():
  495. if current_user.is_authenticated:
  496. find = False
  497. form = FindProjectForm()
  498. data_session = db_session.create_session()
  499. resp = []
  500. current_projects = \
  501. data_session.query(Projects).filter(or_(Projects.creator == current_user.id,
  502. Projects.id.in_(
  503. list(map(lambda x: x[0],
  504. data_session.query(
  505. StaffProjects.project).filter(
  506. StaffProjects.user
  507. == current_user.id).all()))))).all()
  508. if form.validate_on_submit():
  509. new_resp = []
  510. for i in range(len(current_projects)):
  511. if str(form.project.data).lower().strip() in str(current_projects[i].name).lower().strip():
  512. new_resp.append(current_projects[i])
  513. current_projects = new_resp
  514. find = True
  515. resp = list(map(lambda x: get_projects_data(x), current_projects))
  516. return render_template('projects.html', title='Проекты', list_projects=resp, form=form, find=find)
  517. else:
  518. return redirect('/login')
  519. @app.route('/profile', methods=['GET', 'POST'])
  520. def profile():
  521. if current_user.is_authenticated:
  522. data_session = db_session.create_session()
  523. form = EditProfileForm(
  524. CombinedMultiDict((request.files, request.form)),
  525. email=current_user.email,
  526. name=current_user.name,
  527. surname=current_user.surname,
  528. about=current_user.about,
  529. birthday=current_user.birthday
  530. )
  531. if form.del_photo.data:
  532. user = data_session.query(User).filter(User.id == current_user.id).first()
  533. if not user:
  534. return render_template('profile.html', title='Профиль', form=form,
  535. message='Ошибка, пользователь ненайден')
  536. os.remove(current_user.photo)
  537. user.photo = 'static/images/none_logo.png'
  538. data_session.commit()
  539. if form.validate_on_submit():
  540. user = data_session.query(User).filter(User.id == current_user.id).first()
  541. if not user:
  542. return render_template('profile.html', title='Профиль', form=form,
  543. message='Ошибка, пользователь ненайден')
  544. if form.email.data != current_user.email:
  545. token = s.dumps(form.email.data)
  546. link_conf = url_for('confirmation', token=token, _external=True)
  547. mail(f'Для изменения почты пройдите по ссылке: {link_conf}', form.email.data,
  548. 'Изменение почты')
  549. user.activated = False
  550. user.email = form.email.data
  551. if form.photo.data:
  552. with open(f'static/app_files/user_logo/{current_user.login}.png', 'wb') as file:
  553. form.photo.data.save(file)
  554. user.photo = f'static/app_files/user_logo/{current_user.login}.png'
  555. user.name = form.name.data
  556. user.surname = form.surname.data
  557. user.about = form.about.data
  558. user.birthday = form.birthday.data
  559. data_session.commit()
  560. return redirect('/profile')
  561. return render_template('profile.html', title='Профиль', form=form, message='')
  562. else:
  563. return redirect('/login')
  564. @login_manager.user_loader
  565. def load_user(user_id):
  566. db_sess = db_session.create_session()
  567. return db_sess.query(User).get(user_id)
  568. @app.route('/login', methods=['GET', 'POST'])
  569. def login():
  570. if not current_user.is_authenticated:
  571. message = request.args.get('message') if request.args.get('message') else ''
  572. danger = request.args.get('danger') if request.args.get('danger') else False
  573. form = LoginForm()
  574. if form.validate_on_submit():
  575. data_session = db_session.create_session()
  576. user = data_session.query(User).filter(User.email == form.login.data).first()
  577. if not user:
  578. user = data_session.query(User).filter(User.login == form.login.data).first()
  579. if user and user.check_password(form.password.data):
  580. if user.activated:
  581. login_user(user, remember=form.remember_me.data)
  582. logging.info(f'{user.login} logged in')
  583. return redirect('/projects')
  584. else:
  585. return render_template('login.html',
  586. message="Ваша почта не подтверждена",
  587. danger=True,
  588. form=form)
  589. return render_template('login.html',
  590. message="Неправильный логин или пароль",
  591. danger=True,
  592. form=form)
  593. return render_template('login.html', title='Авторизация', form=form, message=message,
  594. danger=danger)
  595. else:
  596. return redirect('/projects')
  597. @app.route('/logout')
  598. @login_required
  599. def logout():
  600. logging.info(f'{current_user.login} logged out')
  601. logout_user()
  602. return redirect("/")
  603. @app.route('/register', methods=['GET', 'POST'])
  604. def register():
  605. if not current_user.is_authenticated:
  606. form = RegisterForm()
  607. if form.validate_on_submit():
  608. data_session = db_session.create_session()
  609. if data_session.query(User).filter(User.login == form.login.data).first():
  610. return render_template('register.html', form=form, message="Такой пользователь уже есть",
  611. title='Регистрация')
  612. if data_session.query(User).filter(User.email == form.email.data).first():
  613. return render_template('register.html', form=form, message="Такая почта уже есть", title='Регистрация')
  614. status_password = check_password(form.password.data)
  615. if status_password != 'OK':
  616. return render_template('register.html', form=form, message=status_password, title='Регистрация')
  617. user = User(
  618. email=form.email.data,
  619. name=form.name.data,
  620. login=form.login.data,
  621. activity=datetime.datetime.now(),
  622. data_reg=datetime.date.today(),
  623. photo='static/images/none_logo.png',
  624. role=3
  625. )
  626. user.set_password(form.password.data)
  627. data_session.add(user)
  628. data_session.commit()
  629. token = s.dumps(form.email.data)
  630. link_conf = url_for('confirmation', token=token, _external=True)
  631. mail(f'Для завершения регистрации пройдите по ссылке: {link_conf}', form.email.data,
  632. 'Подтверждение регистрации')
  633. logging.info(f'{form.login.data} was registered')
  634. return redirect('/login?message=Мы выслали ссылку для подтверждения почты')
  635. return render_template('register.html', form=form, message='', title='Регистрация')
  636. else:
  637. return redirect('/projects')
  638. @app.route('/confirmation/<token>')
  639. def confirmation(token):
  640. try:
  641. user_email = s.loads(token, max_age=86400)
  642. data_session = db_session.create_session()
  643. user = data_session.query(User).filter(User.email == user_email).first()
  644. if user:
  645. user.activated = True
  646. data_session.commit()
  647. logging.info(f'{user.login} has been confirmed')
  648. return redirect('/login?message=Почта успешно подтверждена')
  649. else:
  650. return redirect('/login?message=Пользователь не найден&danger=True')
  651. except SignatureExpired:
  652. data_session = db_session.create_session()
  653. users = data_session.query(User).filter(
  654. User.activated == 0 and User.activated < datetime.datetime.now() - datetime.timedelta(days=1)).all()
  655. if users:
  656. list(map(lambda x: data_session.delete(x), users))
  657. data_session.commit()
  658. return redirect('/login?message=Срок действия ссылки истек, данные удалены&danger=True')
  659. @app.errorhandler(500)
  660. def internal_server_error(error):
  661. return render_template('page_error.html', title='Ошибка сервера', error='500', message='Технические шоколадки')
  662. @app.errorhandler(404)
  663. def page_not_found(error):
  664. return render_template('page_error.html', title='Страница не найдена', error='404', message='Страница не найдена')
  665. @app.errorhandler(403)
  666. def access_error(error):
  667. return render_template('page_error.html', title='Ошибка доступа', error='403', message='Доступ сюда запрещен')
  668. def main():
  669. db_path = 'db/incepted.db'
  670. db = os.path.exists(db_path)
  671. db_session.global_init(db_path)
  672. if not db:
  673. init_db_default()
  674. serve(app, host='0.0.0.0', port=5000, threads=100)
  675. if __name__ == '__main__':
  676. try:
  677. main()
  678. except Exception as error:
  679. logging.warning(f'{error}')