#!/usr/bin/env python # # Copyright (c) 2013 Piston Cloud Computing, Inc. # All Rights Reserved. # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. import os import requests from flask import Flask, abort, flash, request, redirect, url_for, \ render_template, g, session from flask_openid import OpenID from flask.ext.admin import Admin, BaseView, expose, AdminIndexView from flask.ext.admin.contrib.sqlamodel import ModelView from flask.ext.security import Security, SQLAlchemyUserDatastore, \ UserMixin, RoleMixin, login_required from wtforms import Form, BooleanField, TextField, \ PasswordField, validators from flask_mail import Mail from app import app from models import Vendor, Cloud, User, db mail = Mail(app) # setup flask-openid oid = OpenID(app) admin = Admin(app) class SecureView(ModelView): """ """ def is_accessible(self): """ """ return g.user is not None admin.add_view(SecureView(Vendor, db.session)) admin.add_view(SecureView(Cloud, db.session)) admin.add_view(SecureView(User, db.session)) @app.before_request def before_request(): """Runs before the request it self""" g.user = None if 'openid' in session: g.user = User.query.filter_by(openid=session['openid']).first() @app.route('/', methods=['POST', 'GET']) def index(): """Index view""" vendors = Vendor.query.all() return render_template('index.html', vendors=vendors) @app.route('/login', methods=['GET', 'POST']) @oid.loginhandler def login(): """Does the login via OpenID. Has to call into `oid.try_login` to start the OpenID machinery. """ # if we are already logged in, go back to were we came from if g.user is not None: return redirect(oid.get_next_url()) return oid.try_login( "https://login.launchpad.net/", ask_for=['email', 'nickname']) # return render_template('login.html', next=oid.get_next_url(), # error=oid.fetch_error()) @oid.after_login def create_or_login(resp): """This is called when login with OpenID succeeded and it's not necessary to figure out if this is the users's first login or not. This function has to redirect otherwise the user will be presented with a terrible URL which we certainly don't want. """ session['openid'] = resp.identity_url user = User.query.filter_by(openid=resp.identity_url).first() if user is not None: flash(u'Successfully signed in') g.user = user return redirect(oid.get_next_url()) return redirect(url_for('create_profile', next=oid.get_next_url(), name=resp.fullname or resp.nickname, email=resp.email)) @app.route('/create-profile', methods=['GET', 'POST']) def create_profile(): """If this is the user's first login, the create_or_login function will redirect here so that the user can set up his profile. """ if g.user is not None or 'openid' not in session: return redirect(url_for('index')) if request.method == 'POST': name = request.form['name'] email = request.form['email'] if not name: flash(u'Error: you have to provide a name') elif '@' not in email: flash(u'Error: you have to enter a valid email address') else: flash(u'Profile successfully created') db.session.add(User(name, email, session['openid'])) db.session.commit() return redirect(oid.get_next_url()) return render_template( 'create_profile.html', next_url=oid.get_next_url()) @app.route('/profile', methods=['GET', 'POST']) def edit_profile(): """Updates a profile""" if g.user is None: abort(401) form = dict(name=g.user.name, email=g.user.email) if request.method == 'POST': if 'delete' in request.form: db.session.delete(g.user) db.session.commit() session['openid'] = None flash(u'Profile deleted') return redirect(url_for('index')) form['name'] = request.form['name'] form['email'] = request.form['email'] if not form['name']: flash(u'Error: you have to provide a name') elif '@' not in form['email']: flash(u'Error: you have to enter a valid email address') else: flash(u'Profile successfully created') g.user.name = form['name'] g.user.email = form['email'] db.session.commit() return redirect(url_for('edit_profile')) return render_template('edit_profile.html', form=form) @app.route('/logout') def logout(): """logout route""" session.pop('openid', None) flash(u'You have been signed out') return redirect(oid.get_next_url())