main.py 38 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783
  1. import datetime
  2. import os
  3. import logging
  4. from flask import Flask, render_template, request, url_for
  5. from flask_login import login_user, current_user, LoginManager, logout_user, login_required
  6. from flask_wtf import CSRFProtect
  7. from flask_restful import abort
  8. from werkzeug.datastructures import CombinedMultiDict
  9. from werkzeug.utils import redirect
  10. from itsdangerous import URLSafeTimedSerializer, SignatureExpired
  11. from sqlalchemy import or_
  12. from json import loads
  13. from waitress import serve
  14. from functions import check_password, mail, init_db_default, get_projects_data, get_user_data, save_project_logo, \
  15. overdue_quest_project, save_proof_quest, find_files_answer, file_tree, delete_project_data, delete_quest_data, \
  16. copy_template, save_admin_data
  17. from forms.edit_profile import EditProfileForm
  18. from forms.link_showcase import AddLink
  19. from forms.login import LoginForm
  20. from forms.find_project import FindProjectForm
  21. from forms.register import RegisterForm
  22. from forms.project import ProjectForm, AddFileProject
  23. from forms.recovery import RecoveryForm, NewPasswordForm
  24. from forms.conf_delete_project import DeleteProjectForm
  25. from forms.task import Task, AnswerTask
  26. from forms.encrypt_form import EncryptForm
  27. from data.users import User
  28. from data.quests import Quests
  29. from data.answer import Answer
  30. from data.proof_file import FileProof
  31. from data.files import Files
  32. from data.projects import Projects
  33. from data.staff_projects import StaffProjects
  34. from data.roles import Roles
  35. from data.showcase_link import ShowCaseLink
  36. from data import db_session
  37. app = Flask(__name__)
  38. with open('incepted.config', 'r', encoding='utf-8') as file:
  39. file = file.read()
  40. file = loads(file)
  41. key = file["encrypt_key"]
  42. app.config['SECRET_KEY'] = key
  43. app.debug = True
  44. logging.basicConfig(level=logging.INFO, filename="logfiles/main.log", format="%(asctime)s %(levelname)s %(message)s",
  45. encoding='utf-8')
  46. csrf = CSRFProtect(app)
  47. s = URLSafeTimedSerializer(key)
  48. login_manager = LoginManager()
  49. login_manager.init_app(app)
  50. @app.route('/')
  51. def base():
  52. if not current_user.is_authenticated:
  53. return render_template('main.html', title='Главная')
  54. else:
  55. return redirect('/projects')
  56. @app.route('/admin', methods=['GET', 'POST'])
  57. def admin():
  58. if current_user.is_authenticated:
  59. if current_user.role == 1:
  60. data_session = db_session.create_session()
  61. roles, users = data_session.query(Roles).all(), \
  62. data_session.query(User).filter(User.id != current_user.id).all()
  63. form = EncryptForm()
  64. if request.method == 'POST':
  65. data_form = request.form.to_dict()
  66. del data_form['csrf_token'], data_form['submit']
  67. data_form = list(map(lambda x: (x[0], x[1]), data_form.items()))
  68. list(
  69. map(lambda x: save_admin_data(x, data_session), list(filter(lambda x: 'role_' in x[0], data_form))))
  70. activ_id = list(
  71. map(lambda user: int(user[0].split('_')[-1]), list(filter(lambda x: 'active_' in x[0], data_form))))
  72. banned_id = list(
  73. map(lambda user: int(user[0].split('_')[-1]), list(filter(lambda x: 'banned_' in x[0], data_form))))
  74. for user in users:
  75. if int(user.role) != 1:
  76. user.activated = 0 if user.id not in activ_id else 1
  77. user.banned = 0 if user.id not in banned_id else 1
  78. else:
  79. user.banned = 0
  80. user.activated = 1
  81. data_session.commit()
  82. return render_template('admin.html', title='Панель админа', roles=roles, users=users, form=form)
  83. abort(404)
  84. @app.route('/template/<int:id_template>/create')
  85. def create_by_template(id_template):
  86. if current_user.is_authenticated:
  87. data_session = db_session.create_session()
  88. current_template = data_session.query(Projects).filter(Projects.id == id_template).first()
  89. if current_template:
  90. add_project = Projects(
  91. name=current_template.name,
  92. description=current_template.description,
  93. date_create=datetime.datetime.now(),
  94. creator=current_user.id,
  95. is_open=False,
  96. is_template=False
  97. )
  98. data_session.add(add_project)
  99. data_session.flush()
  100. data_session.refresh(add_project)
  101. data_session.commit()
  102. copy_template(current_template, add_project, data_session, current_user)
  103. return redirect('/projects')
  104. else:
  105. abort(403)
  106. else:
  107. return redirect('/login')
  108. @app.route('/template/<int:id_template>')
  109. def template_project(id_template):
  110. if current_user.is_authenticated:
  111. data_session = db_session.create_session()
  112. current_project = data_session.query(Projects).filter(Projects.id == id_template).first()
  113. if current_project:
  114. quests = data_session.query(Quests).filter(Quests.project == current_project.id).all()
  115. files_list = file_tree(f'static/app_files/all_projects/{current_project.id}')
  116. return render_template('template_project.html', title=f'Шаблон {current_project.name}',
  117. project=current_project, quests=quests, file_tree=files_list)
  118. else:
  119. abort(404)
  120. else:
  121. return redirect('/login')
  122. @app.route('/showcase/link/<int:id_link>/delete')
  123. def delete_link(id_link):
  124. if current_user.is_authenticated:
  125. if current_user.role in [1, 4]:
  126. data_session = db_session.create_session()
  127. link = data_session.query(ShowCaseLink).filter(ShowCaseLink.id == id_link).first()
  128. if link:
  129. data_session.delete(link)
  130. data_session.commit()
  131. return redirect('/showcase')
  132. else:
  133. abort(404)
  134. else:
  135. abort(403)
  136. return redirect('/login')
  137. @app.route('/showcase', methods=['GET', 'POST'])
  138. def showcase():
  139. if current_user.is_authenticated:
  140. form = AddLink() if current_user.role in [1, 4] else None
  141. data_session = db_session.create_session()
  142. if request.method == 'POST' and current_user.role in [1, 4]:
  143. if form.validate_on_submit():
  144. link = ShowCaseLink(
  145. link=form.link.data,
  146. name=form.name.data,
  147. user=current_user.id,
  148. up_date=datetime.datetime.now()
  149. )
  150. data_session.add(link)
  151. data_session.commit()
  152. return redirect('/showcase')
  153. list_template = list(map(lambda curr_project: get_projects_data(curr_project),
  154. data_session.query(Projects).filter(Projects.is_template == 1).all()))
  155. list_links = data_session.query(ShowCaseLink).all()
  156. return render_template('showcase.html', title='Витрина', list_template=list_template, list_links=list_links,
  157. form=form, type=type)
  158. else:
  159. return redirect('/login')
  160. @app.route('/project/<int:id_project>/quest/<int:id_task>/edit', methods=['GET', 'POST'])
  161. def edit_quest(id_project, id_task):
  162. if current_user.is_authenticated:
  163. data_session = db_session.create_session()
  164. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  165. current_task = data_session.query(Quests).filter(Quests.id == id_task).first()
  166. if current_project and current_task and current_task.project == current_project.id and (
  167. current_task.creator == current_user.id or current_project.creator == current_user.id):
  168. form = Task()
  169. if request.method == 'GET':
  170. form.name.data = current_task.name
  171. form.description.data = current_task.description
  172. form.deadline_time.data = current_task.deadline.time()
  173. form.deadline_date.data = current_task.deadline.date()
  174. if form.delete.data:
  175. delete_quest_data(current_task, data_session)
  176. data_session.delete(current_task)
  177. data_session.commit()
  178. return redirect(f'/project/{str(current_project.id)}')
  179. if form.validate_on_submit():
  180. if form.deadline_date.data and form.deadline_time.data:
  181. deadline = datetime.datetime.combine(form.deadline_date.data, form.deadline_time.data)
  182. else:
  183. deadline = None
  184. current_task.name = form.name.data if form.name.data else None
  185. current_task.description = form.description.data if form.description.data else None
  186. current_task.deadline = deadline
  187. data_session.commit()
  188. return redirect(f'/project/{str(current_project.id)}/quest/{str(current_task.id)}')
  189. return render_template('edit_task.html', title='Редактирование задачи', form=form, porject=current_project,
  190. task=current_task)
  191. else:
  192. abort(403)
  193. else:
  194. return redirect('/login')
  195. @app.route('/project/<int:id_project>/file/<int:id_file>/delete')
  196. def delete_file(id_project, id_file):
  197. if current_user.is_authenticated:
  198. from_path = request.args.get('from') if request.args.get('from') else ''
  199. data_session = db_session.create_session()
  200. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  201. current_file = data_session.query(Files).filter(Files.id == id_file).first()
  202. if current_project and current_file:
  203. if current_user.id in map(lambda x: x[0], data_session.query(StaffProjects.user).filter(
  204. StaffProjects.project == current_project.id).all()) or current_user.id == current_project.creator:
  205. current_proof = data_session.query(FileProof).filter(FileProof.file == id_file).all()
  206. os.remove(current_file.path)
  207. data_session.delete(current_file)
  208. if current_proof:
  209. quest = data_session.query(Answer.quest).filter(Answer.id == current_proof[0].answer).first()
  210. for i in current_proof:
  211. data_session.delete(i)
  212. data_session.commit()
  213. if from_path == 'project':
  214. return redirect(f'/project/{current_project.id}')
  215. return redirect(f'/project/{current_project.id}/quest/{quest[0]}')
  216. data_session.commit()
  217. return redirect(f'/project/{current_project.id}')
  218. else:
  219. abort(403)
  220. else:
  221. abort(404)
  222. else:
  223. return redirect('/login')
  224. @app.route('/project/<int:id_project>/quest/<int:id_task>', methods=['GET', 'POST'])
  225. def task_project(id_project, id_task):
  226. if current_user.is_authenticated:
  227. data_session = db_session.create_session()
  228. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  229. current_task = data_session.query(Quests).filter(Quests.id == id_task).first()
  230. if current_project and current_task and current_task.project == current_project.id:
  231. form = AnswerTask()
  232. current_answer = data_session.query(Answer).filter(Answer.quest == current_task.id).first()
  233. list_files = None
  234. if form.submit.data and request.method == 'POST':
  235. if current_answer:
  236. current_answer.text = form.text.data
  237. current_answer.date_edit = datetime.datetime.now()
  238. current_task.realized = form.realized.data
  239. data_session.commit()
  240. if form.file.data[0].filename:
  241. files = list(
  242. map(lambda x: save_proof_quest(current_project, x, current_user.id), form.file.data))
  243. for i in files:
  244. if not data_session.query(FileProof).filter(FileProof.answer == current_answer.id,
  245. FileProof.file == i).first():
  246. proof_file = FileProof(
  247. answer=current_answer.id,
  248. file=i
  249. )
  250. data_session.add(proof_file)
  251. data_session.commit()
  252. else:
  253. if form.file.data[0].filename:
  254. files = list(
  255. map(lambda x: save_proof_quest(current_project, x, current_user.id), form.file.data))
  256. else:
  257. files = False
  258. current_task.realized = form.realized.data
  259. current_answer = Answer(
  260. quest=current_task.id,
  261. text=form.text.data,
  262. creator=current_user.id,
  263. date_create=datetime.datetime.now(),
  264. date_edit=datetime.datetime.now()
  265. )
  266. data_session.add(current_answer)
  267. data_session.flush()
  268. data_session.refresh(current_answer)
  269. if files:
  270. for i in files:
  271. proof_file = FileProof(
  272. answer=current_answer.id,
  273. file=i
  274. )
  275. data_session.add(proof_file)
  276. data_session.commit()
  277. return redirect(f'/project/{current_project.id}')
  278. if current_answer and request.method == 'GET':
  279. form.text.data = current_answer.text
  280. form.realized.data = current_task.realized
  281. files = data_session.query(FileProof).filter(FileProof.answer == current_answer.id).all()
  282. if files:
  283. list_files = list(map(lambda x: find_files_answer(x.file), files))
  284. return render_template('answer.html', title='Решение', project=current_project, task=current_task,
  285. form=form, list_files=list_files)
  286. else:
  287. abort(404)
  288. else:
  289. return redirect('/login')
  290. @app.route('/project/<int:id_project>/quest/new', methods=['GET', 'POST'])
  291. def new_task_project(id_project):
  292. if current_user.is_authenticated:
  293. data_session = db_session.create_session()
  294. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  295. if current_project:
  296. form = Task()
  297. if form.validate_on_submit():
  298. if form.deadline_date.data and form.deadline_time.data:
  299. deadline = datetime.datetime.combine(form.deadline_date.data, form.deadline_time.data)
  300. else:
  301. deadline = None
  302. quest = Quests(
  303. project=current_project.id,
  304. creator=current_user.id,
  305. name=form.name.data if form.name.data else None,
  306. description=form.description.data if form.description.data else None,
  307. date_create=datetime.datetime.now(),
  308. deadline=deadline,
  309. realized=False
  310. )
  311. data_session.add(quest)
  312. data_session.commit()
  313. return redirect(f'/project/{str(current_project.id)}')
  314. return render_template('new_task.html', title='Новая задача', form=form, porject=current_project)
  315. else:
  316. abort(404)
  317. else:
  318. return redirect('/login')
  319. @app.route('/project/<int:id_project>/edit', methods=['GET', 'POST'])
  320. def edit_project(id_project):
  321. if current_user.is_authenticated:
  322. data_session = db_session.create_session()
  323. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  324. if current_project:
  325. staff = data_session.query(StaffProjects).filter(StaffProjects.project == current_project.id).all()
  326. if current_user.id == current_project.creator:
  327. list_users = list(
  328. map(lambda x: get_user_data(x),
  329. data_session.query(User).filter(User.id != current_user.id, User.activated == 1).all()))
  330. staff = list(map(lambda x: get_user_data(x), data_session.query(User).filter(
  331. User.id.in_(list(map(lambda x: x.user, staff)))).all())) if staff else []
  332. form = ProjectForm()
  333. if form.save.data:
  334. new_staff = []
  335. for i in list_users:
  336. if request.form.getlist(f"choose_{i['login']}") and i['id'] != current_user.id:
  337. new_staff.append(i)
  338. if i not in staff:
  339. new_staffer = StaffProjects(
  340. user=i['id'],
  341. project=current_project.id,
  342. role='user',
  343. permission=3
  344. )
  345. data_session.add(new_staffer)
  346. data_session.commit()
  347. if sorted(new_staff, key=lambda x: x['id']) != sorted(staff, key=lambda x: x['id']):
  348. for i in staff:
  349. if i not in new_staff:
  350. data_session.delete(data_session.query(StaffProjects).filter(
  351. StaffProjects.user == i['id'], StaffProjects.project == current_project.id).first())
  352. data_session.commit()
  353. if form.logo.data:
  354. current_project.photo = save_project_logo(form.logo.data)
  355. data_session.commit()
  356. current_project.name = form.name.data
  357. current_project.description = form.description.data
  358. data_session.commit()
  359. return redirect(f'/project/{current_project.id}')
  360. if form.del_photo.data:
  361. os.remove(current_project.photo)
  362. current_project.photo = 'static/images/none_project.png'
  363. data_session.commit()
  364. return redirect(f'/project/{current_project.id}/edit')
  365. form.name.data = current_project.name
  366. form.description.data = current_project.description
  367. return render_template('edit_project.html', title='Изменение проекта', form=form, list_users=list_users,
  368. staff=staff, project=current_project)
  369. else:
  370. abort(403)
  371. else:
  372. abort(404)
  373. else:
  374. return redirect('/login')
  375. @app.route('/project/<int:id_project>', methods=['POST', 'GET'])
  376. def project(id_project):
  377. if current_user.is_authenticated:
  378. data_session = db_session.create_session()
  379. current_project = data_session.query(Projects).filter(Projects.id == id_project).first()
  380. if current_project:
  381. staff = data_session.query(StaffProjects).filter(StaffProjects.project == current_project.id).all()
  382. if current_user.id == current_project.creator or current_user.id in list(map(lambda x: x.user, staff)):
  383. staff = list(map(lambda x: get_user_data(x), data_session.query(User).filter(
  384. User.id.in_(list(map(lambda x: x.user, staff)))).all())) if staff else []
  385. quests = data_session.query(Quests).filter(Quests.project == current_project.id).all()
  386. if quests:
  387. quests_sort = sorted(list(filter(lambda x: x.deadline is not None, quests)),
  388. key=lambda x: (x.realized, x.deadline))
  389. quests = list(filter(lambda x: x.realized == 0, quests_sort)) + list(
  390. filter(lambda x: x.deadline is None, quests)) + list(
  391. filter(lambda x: x.realized == 1, quests_sort))
  392. quests = list(map(lambda x: overdue_quest_project(x), quests))
  393. files_list = file_tree(f'static/app_files/all_projects/{current_project.id}')
  394. form_file = AddFileProject()
  395. if form_file.validate_on_submit():
  396. if form_file.file.data[0].filename:
  397. files = list(
  398. map(lambda x: save_proof_quest(current_project, x, current_user.id), form_file.file.data))
  399. return redirect(f'/project/{str(current_project.id)}')
  400. return render_template('project.html',
  401. project=current_project,
  402. title=current_project.name,
  403. staff=staff,
  404. quests=quests,
  405. file_tree=files_list,
  406. form_file=form_file)
  407. else:
  408. abort(403)
  409. else:
  410. abort(404)
  411. else:
  412. return redirect('/login')
  413. @app.route('/recovery/confirmation/<token>', methods=['GET', 'POST'])
  414. def conf_recovery(token):
  415. try:
  416. user_email = s.loads(token, max_age=86400)
  417. data_session = db_session.create_session()
  418. user = data_session.query(User).filter(User.email == user_email).first()
  419. if user:
  420. form = NewPasswordForm()
  421. if form.validate_on_submit():
  422. if form.password.data != form.repeat_password.data:
  423. return render_template('recovery.html', title='Восстановление', form=form, recovery=0,
  424. message='Пароли не совпадают')
  425. status_password = check_password(form.password.data)
  426. if status_password != 'OK':
  427. return render_template('recovery.html', title='Восстановление', form=form, recovery=0,
  428. message=str(status_password))
  429. user.set_password(form.password.data)
  430. data_session.commit()
  431. mail(f'Для аккаунта {user.login}, успешно был обновлен пароль', user.email,
  432. 'Изменение пароля')
  433. return redirect('/login?message=Пароль обновлен')
  434. return render_template('recovery.html', title='Восстановление', form=form, recovery=0, message='')
  435. else:
  436. return redirect('/login?message=Пользователь не найден&danger=True')
  437. except SignatureExpired:
  438. return redirect('/login?message=Срок действия ссылки истек&danger=True')
  439. @app.route('/recovery', methods=['GET', 'POST'])
  440. def recovery():
  441. if not current_user.is_authenticated:
  442. form = RecoveryForm()
  443. if form.validate_on_submit():
  444. token = s.dumps(form.email.data)
  445. link_conf = url_for('conf_recovery', token=token, _external=True)
  446. mail(f'Для сбросы пароля пройдите по ссылке: {link_conf}', form.email.data,
  447. 'Восстановление доступа')
  448. return redirect('/login?message=Мы выслали ссылку для сброса вам на почту')
  449. return render_template('recovery.html', title='Восстановление пароля', form=form, recovery=True, message='')
  450. else:
  451. return redirect('/')
  452. @app.route('/project/<int:id_project>/delete', methods=['GET', 'POST'])
  453. def delete_project(id_project):
  454. if current_user.is_authenticated:
  455. data_session = db_session.create_session()
  456. project_del = data_session.query(Projects).filter(Projects.id == id_project).first()
  457. if project_del:
  458. if project_del.creator == current_user.id:
  459. form = DeleteProjectForm()
  460. if form.validate_on_submit():
  461. if str(form.conf.data).lower().strip() != f'delete/{str(project_del.name)}'.lower().strip():
  462. return render_template('delete_project.html', title='Удаление проекта', form=form,
  463. project=project_del,
  464. message='Вы не правильно ввели фразу')
  465. delete_project_data(project_del, data_session)
  466. return redirect('/projects')
  467. return render_template('delete_project.html', title='Удаление проекта', form=form, project=project_del,
  468. message='')
  469. else:
  470. abort(403)
  471. else:
  472. abort(404)
  473. else:
  474. return redirect('/login')
  475. @app.route('/user/<string:_login>', methods=['GET', 'POST'])
  476. def user_view(_login):
  477. if current_user.is_authenticated:
  478. data_session = db_session.create_session()
  479. user = data_session.query(User).filter(User.login == _login).first()
  480. if user:
  481. current_projects = data_session.query(Projects).filter(or_(Projects.creator == user.id, Projects.id.in_(
  482. list(map(lambda x: x[0], data_session.query(
  483. StaffProjects.project).filter(
  484. StaffProjects.user == user.id).all()))))).all()
  485. resp = list(map(lambda x: get_projects_data(x), current_projects))
  486. return render_template('user_view.html',
  487. title=user.name if user.name else '' + ' ' + user.surname if user.surname else '',
  488. user=user,
  489. list_projects=resp)
  490. else:
  491. abort(404)
  492. else:
  493. return redirect('/login')
  494. @app.route('/projects/new', methods=['GET', 'POST'])
  495. def new_project():
  496. if current_user.is_authenticated:
  497. form = ProjectForm()
  498. data_session = db_session.create_session()
  499. list_users = list(
  500. map(lambda x: get_user_data(x), data_session.query(User).filter(User.id != current_user.id).all()))
  501. if form.validate_on_submit():
  502. current_project = Projects(
  503. name=form.name.data,
  504. description=form.description.data,
  505. date_create=datetime.datetime.now(),
  506. creator=current_user.id,
  507. is_template=form.is_template.data
  508. )
  509. current_project.photo = save_project_logo(
  510. form.logo.data) if form.logo.data else 'static/images/none_project.png'
  511. data_session.add(current_project)
  512. data_session.flush()
  513. data_session.refresh(current_project)
  514. for i in list_users:
  515. if request.form.getlist(f"choose_{i['login']}") and i['id'] != current_user.id:
  516. new_staffer = StaffProjects(
  517. user=i['id'],
  518. project=current_project.id,
  519. role='user',
  520. permission=3
  521. )
  522. data_session.add(new_staffer)
  523. data_session.commit()
  524. os.mkdir(f'static/app_files/all_projects/{str(current_project.id)}')
  525. return redirect('/projects')
  526. return render_template('new_project.html', title='Новый проект', form=form, list_users=list_users)
  527. else:
  528. return redirect('/login')
  529. @app.route('/projects', methods=['GET', 'POST'])
  530. def projects():
  531. if current_user.is_authenticated:
  532. find = False
  533. form = FindProjectForm()
  534. data_session = db_session.create_session()
  535. resp = []
  536. current_projects = \
  537. data_session.query(Projects).filter(or_(Projects.creator == current_user.id,
  538. Projects.id.in_(
  539. list(map(lambda x: x[0],
  540. data_session.query(
  541. StaffProjects.project).filter(
  542. StaffProjects.user
  543. == current_user.id).all()))))).all()
  544. if form.validate_on_submit():
  545. new_resp = []
  546. for i in range(len(current_projects)):
  547. if str(form.project.data).lower().strip() in str(current_projects[i].name).lower().strip():
  548. new_resp.append(current_projects[i])
  549. current_projects = new_resp
  550. find = True
  551. resp = list(map(lambda x: get_projects_data(x), current_projects))
  552. return render_template('projects.html', title='Проекты', list_projects=resp, form=form, find=find)
  553. else:
  554. return redirect('/login')
  555. @app.route('/profile', methods=['GET', 'POST'])
  556. def profile():
  557. if current_user.is_authenticated:
  558. data_session = db_session.create_session()
  559. form = EditProfileForm(
  560. CombinedMultiDict((request.files, request.form)),
  561. email=current_user.email,
  562. name=current_user.name,
  563. surname=current_user.surname,
  564. about=current_user.about,
  565. birthday=current_user.birthday
  566. )
  567. if form.del_photo.data:
  568. user = data_session.query(User).filter(User.id == current_user.id).first()
  569. if not user:
  570. return render_template('profile.html', title='Профиль', form=form,
  571. message='Ошибка, пользователь ненайден')
  572. os.remove(current_user.photo)
  573. user.photo = 'static/images/none_logo.png'
  574. data_session.commit()
  575. if form.validate_on_submit():
  576. user = data_session.query(User).filter(User.id == current_user.id).first()
  577. if not user:
  578. return render_template('profile.html', title='Профиль', form=form,
  579. message='Ошибка, пользователь ненайден')
  580. if form.email.data != current_user.email:
  581. token = s.dumps(form.email.data)
  582. link_conf = url_for('confirmation', token=token, _external=True)
  583. mail(f'Для изменения почты пройдите по ссылке: {link_conf}', form.email.data,
  584. 'Изменение почты')
  585. user.activated = False
  586. user.email = form.email.data
  587. if form.photo.data:
  588. with open(f'static/app_files/user_logo/{current_user.login}.png', 'wb') as file:
  589. form.photo.data.save(file)
  590. user.photo = f'static/app_files/user_logo/{current_user.login}.png'
  591. user.name = form.name.data
  592. user.surname = form.surname.data
  593. user.about = form.about.data
  594. user.birthday = form.birthday.data
  595. data_session.commit()
  596. return redirect('/profile')
  597. return render_template('profile.html', title='Профиль', form=form, message='')
  598. else:
  599. return redirect('/login')
  600. @login_manager.user_loader
  601. def load_user(user_id):
  602. db_sess = db_session.create_session()
  603. return db_sess.query(User).get(user_id)
  604. @app.route('/login', methods=['GET', 'POST'])
  605. def login():
  606. if not current_user.is_authenticated:
  607. message = request.args.get('message') if request.args.get('message') else ''
  608. danger = request.args.get('danger') if request.args.get('danger') else False
  609. form = LoginForm()
  610. if form.validate_on_submit():
  611. data_session = db_session.create_session()
  612. user = data_session.query(User).filter(User.email == form.login.data).first()
  613. if not user:
  614. user = data_session.query(User).filter(User.login == form.login.data).first()
  615. if user and user.check_password(form.password.data):
  616. if user.activated and not user.banned:
  617. login_user(user, remember=form.remember_me.data)
  618. logging.info(f'{user.login} logged in')
  619. return redirect('/projects')
  620. elif user.banned:
  621. return render_template('login.html',
  622. message="Ваш аккаунт заблокирован, обратитесь в поддержку: inepted@yandex.ru",
  623. danger=True,
  624. form=form)
  625. else:
  626. return render_template('login.html',
  627. message="Ваша почта не подтверждена",
  628. danger=True,
  629. form=form)
  630. return render_template('login.html',
  631. message="Неправильный логин или пароль",
  632. danger=True,
  633. form=form)
  634. return render_template('login.html', title='Авторизация', form=form, message=message,
  635. danger=danger)
  636. else:
  637. return redirect('/projects')
  638. @app.route('/logout')
  639. @login_required
  640. def logout():
  641. logging.info(f'{current_user.login} logged out')
  642. logout_user()
  643. return redirect("/")
  644. @app.route('/register', methods=['GET', 'POST'])
  645. def register():
  646. if not current_user.is_authenticated:
  647. form = RegisterForm()
  648. if form.validate_on_submit():
  649. data_session = db_session.create_session()
  650. if data_session.query(User).filter(User.login == form.login.data).first():
  651. return render_template('register.html', form=form, message="Такой пользователь уже есть",
  652. title='Регистрация')
  653. if data_session.query(User).filter(User.email == form.email.data).first():
  654. return render_template('register.html', form=form, message="Такая почта уже есть", title='Регистрация')
  655. status_password = check_password(form.password.data)
  656. if status_password != 'OK':
  657. return render_template('register.html', form=form, message=status_password, title='Регистрация')
  658. user = User(
  659. email=form.email.data,
  660. name=form.name.data,
  661. login=form.login.data,
  662. activity=datetime.datetime.now(),
  663. data_reg=datetime.date.today(),
  664. photo='static/images/none_logo.png',
  665. role=3
  666. )
  667. user.set_password(form.password.data)
  668. data_session.add(user)
  669. data_session.commit()
  670. token = s.dumps(form.email.data)
  671. link_conf = url_for('confirmation', token=token, _external=True)
  672. mail(f'Для завершения регистрации пройдите по ссылке: {link_conf}', form.email.data,
  673. 'Подтверждение регистрации')
  674. logging.info(f'{form.login.data} was registered')
  675. return redirect('/login?message=Мы выслали ссылку для подтверждения почты')
  676. return render_template('register.html', form=form, message='', title='Регистрация')
  677. else:
  678. return redirect('/projects')
  679. @app.route('/confirmation/<token>')
  680. def confirmation(token):
  681. try:
  682. user_email = s.loads(token, max_age=86400)
  683. data_session = db_session.create_session()
  684. user = data_session.query(User).filter(User.email == user_email).first()
  685. if user:
  686. user.activated = True
  687. data_session.commit()
  688. logging.info(f'{user.login} has been confirmed')
  689. return redirect('/login?message=Почта успешно подтверждена')
  690. else:
  691. return redirect('/login?message=Пользователь не найден&danger=True')
  692. except SignatureExpired:
  693. data_session = db_session.create_session()
  694. users = data_session.query(User).filter(
  695. User.activated == 0 and User.activated < datetime.datetime.now() - datetime.timedelta(days=1)).all()
  696. if users:
  697. list(map(lambda x: data_session.delete(x), users))
  698. data_session.commit()
  699. return redirect('/login?message=Срок действия ссылки истек, данные удалены&danger=True')
  700. @app.errorhandler(500)
  701. def internal_server_error(error):
  702. return render_template('page_error.html', title='Ошибка сервера', error='500', message='Технические шоколадки')
  703. @app.errorhandler(404)
  704. def page_not_found(error):
  705. return render_template('page_error.html', title='Страница не найдена', error='404', message='Страница не найдена')
  706. @app.errorhandler(403)
  707. def access_error(error):
  708. return render_template('page_error.html', title='Ошибка доступа', error='403', message='Доступ сюда запрещен')
  709. def main():
  710. db_path = 'db/incepted.db'
  711. db = os.path.exists(db_path)
  712. db_session.global_init(db_path)
  713. if not db:
  714. init_db_default()
  715. serve(app, host='0.0.0.0', port=5000, threads=100)
  716. if __name__ == '__main__':
  717. try:
  718. main()
  719. except Exception as error:
  720. logging.warning(f'{error}')