134 lines
5.4 KiB
Python
134 lines
5.4 KiB
Python
import datetime
|
|
|
|
from flask import Flask, render_template, request, url_for
|
|
from flask_login import login_user, current_user, LoginManager, logout_user, login_required
|
|
from werkzeug.utils import redirect
|
|
from itsdangerous import URLSafeTimedSerializer, SignatureExpired
|
|
|
|
from functions import check_password, mail
|
|
from forms.login import LoginForm
|
|
from forms.register import RegisterForm
|
|
from data.users import User
|
|
from waitress import serve
|
|
from data import db_session
|
|
|
|
app = Flask(__name__)
|
|
key = 'test_secret_key'
|
|
app.config['SECRET_KEY'] = key
|
|
s = URLSafeTimedSerializer(key)
|
|
login_manager = LoginManager()
|
|
login_manager.init_app(app)
|
|
|
|
|
|
@app.route('/')
|
|
def base():
|
|
return render_template('main.html', title='Главная')
|
|
|
|
|
|
@login_manager.user_loader
|
|
def load_user(user_id):
|
|
db_sess = db_session.create_session()
|
|
return db_sess.query(User).get(user_id)
|
|
|
|
|
|
@app.route('/login', methods=['GET', 'POST'])
|
|
def login():
|
|
if not current_user.is_authenticated:
|
|
message = request.args.get('message') if request.args.get('message') else ''
|
|
danger = request.args.get('danger') if request.args.get('danger') else False
|
|
form = LoginForm()
|
|
if form.validate_on_submit():
|
|
db_sess = db_session.create_session()
|
|
user = db_sess.query(User).filter(User.email == form.login.data).first()
|
|
if user and user.check_password(form.password.data):
|
|
if user.activated:
|
|
login_user(user, remember=form.remember_me.data)
|
|
return redirect('/')
|
|
else:
|
|
return render_template('login.html',
|
|
message="Ваша почта не подтверждена",
|
|
danger=True,
|
|
form=form)
|
|
return render_template('login.html',
|
|
message="Неправильный логин или пароль",
|
|
danger=True,
|
|
form=form)
|
|
return render_template('login.html', title='Авторизация', form=form, message=message,
|
|
danger=danger)
|
|
else:
|
|
return redirect('/')
|
|
|
|
|
|
@app.route('/logout')
|
|
@login_required
|
|
def logout():
|
|
logout_user()
|
|
return redirect("/")
|
|
|
|
|
|
@app.route('/register', methods=['GET', 'POST'])
|
|
def register():
|
|
if not current_user.is_authenticated:
|
|
form = RegisterForm()
|
|
if form.validate_on_submit():
|
|
data_session = db_session.create_session()
|
|
if data_session.query(User).filter(User.login == form.login.data).first():
|
|
return render_template('register.html', form=form, message="Такой пользователь уже есть",
|
|
title='Регистрация')
|
|
if data_session.query(User).filter(User.email == form.email.data).first():
|
|
return render_template('register.html', form=form, message="Такая почта уже есть", title='Регистрация')
|
|
status_password = check_password(form.password.data)
|
|
if status_password != 'OK':
|
|
return render_template('register.html', form=form, message=status_password, title='Регистрация')
|
|
user = User(
|
|
email=form.email.data,
|
|
name=form.name.data,
|
|
login=form.login.data,
|
|
activity=datetime.datetime.now()
|
|
)
|
|
user.set_password(form.password.data)
|
|
data_session.add(user)
|
|
data_session.commit()
|
|
data_session.close()
|
|
token = s.dumps(form.email.data)
|
|
link_conf = url_for('confirmation', token=token, _external=True)
|
|
mail(f'Для завершения регистрации пройдите по ссылке: {link_conf}', form.email.data,
|
|
'Подтверждение регистрации')
|
|
return redirect('/login?message=Мы выслали ссылку для подтверждения почты')
|
|
return render_template('register.html', form=form, message='', title='Регистрация')
|
|
else:
|
|
return redirect('/')
|
|
|
|
|
|
@app.route('/confirmation/<token>')
|
|
def confirmation(token):
|
|
try:
|
|
user_email = s.loads(token, max_age=86400)
|
|
data_session = db_session.create_session()
|
|
user = data_session.query(User).filter(User.email == user_email).first()
|
|
if user:
|
|
user.activated = True
|
|
data_session.commit()
|
|
data_session.close()
|
|
return redirect('/login?message=Почта успешно подтверждена')
|
|
else:
|
|
return redirect('/login?message=Пользователь не найден&danger=True')
|
|
except SignatureExpired:
|
|
data_session = db_session.create_session()
|
|
users = data_session.query(User).filter(
|
|
User.activated == 0 and User.activated < datetime.datetime.now() - datetime.timedelta(days=1)).all()
|
|
if users:
|
|
list(map(lambda x: data_session.delete(x), users))
|
|
data_session.commit()
|
|
data_session.close()
|
|
return redirect('/login?message=Срок действия ссылки истек, данные удалены&danger=True')
|
|
|
|
|
|
def main():
|
|
db_session.global_init("db/incepted.db")
|
|
serve(app, host='0.0.0.0', port=5000)
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main()
|