159 lines
5.2 KiB
Python
Executable File
159 lines
5.2 KiB
Python
Executable File
#!/usr/bin/env python
|
|
#
|
|
# Copyright (c) 2013 Piston Cloud Computing, Inc.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
import os
|
|
import requests
|
|
from flask import Flask, abort, flash, request, redirect, url_for, \
|
|
render_template, g, session
|
|
from flask_openid import OpenID
|
|
from flask.ext.admin import Admin, BaseView, expose, AdminIndexView
|
|
from flask.ext.admin.contrib.sqlamodel import ModelView
|
|
from flask.ext.security import Security, SQLAlchemyUserDatastore, \
|
|
UserMixin, RoleMixin, login_required
|
|
from wtforms import Form, BooleanField, TextField, \
|
|
PasswordField, validators
|
|
from flask_mail import Mail
|
|
|
|
from app import app
|
|
from models import Vendor, Cloud, User, db
|
|
|
|
mail = Mail(app)
|
|
|
|
# setup flask-openid
|
|
oid = OpenID(app)
|
|
admin = Admin(app)
|
|
|
|
|
|
class SecureView(ModelView):
|
|
""" """
|
|
def is_accessible(self):
|
|
""" """
|
|
return g.user is not None
|
|
|
|
admin.add_view(SecureView(Vendor, db.session))
|
|
admin.add_view(SecureView(Cloud, db.session))
|
|
admin.add_view(SecureView(User, db.session))
|
|
|
|
|
|
@app.before_request
|
|
def before_request():
|
|
"""Runs before the request it self"""
|
|
g.user = None
|
|
if 'openid' in session:
|
|
g.user = User.query.filter_by(openid=session['openid']).first()
|
|
|
|
|
|
@app.route('/', methods=['POST', 'GET'])
|
|
def index():
|
|
"""Index view"""
|
|
vendors = Vendor.query.all()
|
|
return render_template('index.html', vendors=vendors)
|
|
|
|
|
|
@app.route('/login', methods=['GET', 'POST'])
|
|
@oid.loginhandler
|
|
def login():
|
|
"""Does the login via OpenID. Has to call into `oid.try_login`
|
|
to start the OpenID machinery.
|
|
"""
|
|
# if we are already logged in, go back to were we came from
|
|
if g.user is not None:
|
|
return redirect(oid.get_next_url())
|
|
return oid.try_login(
|
|
"https://login.launchpad.net/", ask_for=['email', 'nickname'])
|
|
# return render_template('login.html', next=oid.get_next_url(),
|
|
# error=oid.fetch_error())
|
|
|
|
|
|
@oid.after_login
|
|
def create_or_login(resp):
|
|
"""This is called when login with OpenID succeeded and it's not
|
|
necessary to figure out if this is the users's first login or not.
|
|
This function has to redirect otherwise the user will be presented
|
|
with a terrible URL which we certainly don't want.
|
|
"""
|
|
session['openid'] = resp.identity_url
|
|
user = User.query.filter_by(openid=resp.identity_url).first()
|
|
if user is not None:
|
|
flash(u'Successfully signed in')
|
|
g.user = user
|
|
return redirect(oid.get_next_url())
|
|
return redirect(url_for('create_profile', next=oid.get_next_url(),
|
|
name=resp.fullname or resp.nickname,
|
|
email=resp.email))
|
|
|
|
|
|
@app.route('/create-profile', methods=['GET', 'POST'])
|
|
def create_profile():
|
|
"""If this is the user's first login, the create_or_login function
|
|
will redirect here so that the user can set up his profile.
|
|
"""
|
|
if g.user is not None or 'openid' not in session:
|
|
return redirect(url_for('index'))
|
|
if request.method == 'POST':
|
|
name = request.form['name']
|
|
email = request.form['email']
|
|
if not name:
|
|
flash(u'Error: you have to provide a name')
|
|
elif '@' not in email:
|
|
flash(u'Error: you have to enter a valid email address')
|
|
else:
|
|
flash(u'Profile successfully created')
|
|
db.session.add(User(name, email, session['openid']))
|
|
db.session.commit()
|
|
return redirect(oid.get_next_url())
|
|
return render_template(
|
|
'create_profile.html', next_url=oid.get_next_url())
|
|
|
|
|
|
@app.route('/profile', methods=['GET', 'POST'])
|
|
def edit_profile():
|
|
"""Updates a profile"""
|
|
if g.user is None:
|
|
abort(401)
|
|
form = dict(name=g.user.name, email=g.user.email)
|
|
if request.method == 'POST':
|
|
if 'delete' in request.form:
|
|
db.session.delete(g.user)
|
|
db.session.commit()
|
|
session['openid'] = None
|
|
flash(u'Profile deleted')
|
|
return redirect(url_for('index'))
|
|
form['name'] = request.form['name']
|
|
form['email'] = request.form['email']
|
|
if not form['name']:
|
|
flash(u'Error: you have to provide a name')
|
|
elif '@' not in form['email']:
|
|
flash(u'Error: you have to enter a valid email address')
|
|
else:
|
|
flash(u'Profile successfully created')
|
|
g.user.name = form['name']
|
|
g.user.email = form['email']
|
|
db.session.commit()
|
|
return redirect(url_for('edit_profile'))
|
|
return render_template('edit_profile.html', form=form)
|
|
|
|
|
|
@app.route('/logout')
|
|
def logout():
|
|
"""logout route"""
|
|
session.pop('openid', None)
|
|
flash(u'You have been signed out')
|
|
return redirect(oid.get_next_url())
|
|
|
|
|
|
|