300 lines
8.5 KiB
Python
300 lines
8.5 KiB
Python
|
|
__author__ = 'sagi'
|
|
import json
|
|
from GithubAPI.GithubAPI import GitHubAPI_Keys
|
|
|
|
from google.appengine.ext import db
|
|
import requests
|
|
import uuid
|
|
|
|
from flask import Flask, request, render_template, redirect, abort, Response
|
|
|
|
from flask.ext.github import GitHub
|
|
from flask.ext.cors import CORS, cross_origin
|
|
from flask.ext.autodoc import Autodoc
|
|
|
|
# DB Models
|
|
from models.User import User
|
|
from models.Course import Course
|
|
from models.Project import Project
|
|
from models.Campus import Campus
|
|
|
|
#Validation Utils Libs
|
|
from SE_API.Validation_Utils import *
|
|
from SE_API.Respones_Utils import *
|
|
|
|
|
|
|
|
|
|
app = Flask(__name__, static_folder='../templates')
|
|
|
|
githubKeys = GitHubAPI_Keys()
|
|
|
|
app.config['GITHUB_CLIENT_ID'] = githubKeys.getId()
|
|
app.config['GITHUB_CLIENT_SECRET'] = githubKeys.getSecret()
|
|
|
|
github = GitHub(app)
|
|
cross = CORS(app)
|
|
auto = Autodoc(app)
|
|
|
|
@app.errorhandler(404)
|
|
def page_not_found(e):
|
|
return app.send_static_file('views/404/index.html')
|
|
|
|
@app.route('/')
|
|
def wellcomePage():
|
|
return app.send_static_file('index.html')
|
|
|
|
@app.route('/api/validation/confirm/<string:validation_token>')
|
|
@auto.doc()
|
|
def confirm_user_to_campus(validation_token):
|
|
"""
|
|
<span class="card-title">This Function is will Activate a user and add tha campus to it</span>
|
|
<br>
|
|
<b>Route Parameters</b>
|
|
<ul>
|
|
<li>
|
|
validation_token: 'seToken|email_suffix'
|
|
</li>
|
|
</ul>
|
|
:return:
|
|
200 - redirect to home + new cookie
|
|
403 - Invalid Token
|
|
<code>main(){
|
|
asd = 3
|
|
}</code>
|
|
"""
|
|
#TODO
|
|
token = str(validation_token).split('|')[0]
|
|
email_sufix = '@'+str(validation_token).split('|')[1]
|
|
|
|
user = get_user_by_token(token)
|
|
|
|
if user is None:
|
|
return forbidden('Forbidden: invalid Token')
|
|
else:
|
|
campus = get_campus_by_suffix(email_sufix)
|
|
if campus is None:
|
|
return bad_request('Bad Request: Email Suffix ' + email_sufix + ' Not Found')
|
|
user.isFirstLogin = False
|
|
user.seToken = str(uuid.uuid4())
|
|
if str(campus.key().id()) not in user.campuses_id_list:
|
|
user.campuses_id_list.append(str(campus.key().id()))
|
|
db.put(user)
|
|
return cookieMonster(user.seToken)
|
|
|
|
|
|
|
|
@app.route('/api/validation/sendmail/<string:token>', methods=['POST'])
|
|
@auto.doc()
|
|
def send_activation(token):
|
|
"""
|
|
This Method Will Send An Email To The User - To Confirm his Account
|
|
:param token: - seToken
|
|
:payload: JSON - {email: 'academic@email.ac.com'}
|
|
<b>:return:<b>
|
|
200 - Email Sent - No Response
|
|
400 - Bad Request
|
|
403 - Invalid Token
|
|
"""
|
|
if not request.data:
|
|
return Response(response=json.dumps({'message': 'Bad Request'}),
|
|
status=400,
|
|
mimetype="application/json")
|
|
payload = json.loads(request.data)
|
|
if not is_user_token_valid(token):
|
|
return Response(response=json.dumps({'message': 'Not A Valid Token!'}),
|
|
status=403,
|
|
mimetype="application/json")
|
|
query = User.all()
|
|
query.filter('seToken =', token)
|
|
for u in query.run(limit=1):
|
|
try:
|
|
send_validation_email(token=token, name=u.username, email=payload["email"])
|
|
except Exception:
|
|
return Response(response=json.dumps({'message': 'Bad Request'}),
|
|
status=400,
|
|
mimetype="application/json")
|
|
|
|
return Response(status=200)
|
|
|
|
@app.route('/api/help')
|
|
def documentation():
|
|
return auto.html()
|
|
|
|
@app.route('/home')
|
|
def returnHome():
|
|
try:
|
|
return app.send_static_file('views/index.html')
|
|
except Exception:
|
|
abort(404)
|
|
|
|
|
|
|
|
@app.route('/api/getUserByToken/<string:token>', methods=["GET"])
|
|
@auto.doc()
|
|
def getUserByToken(token):
|
|
'''
|
|
param: String - token: users se-Token
|
|
return: JSON object of the user
|
|
if no valid seToken, return message: No User Found
|
|
'''
|
|
query = User.all()
|
|
query.filter("seToken = ", token)
|
|
|
|
for u in query.run(limit=5):
|
|
return Response(response=u.to_JSON(),
|
|
status=201,
|
|
mimetype="application/json") # Real response!
|
|
|
|
return Response(response=json.dumps({'message' : 'No User Found'}),
|
|
status=400,
|
|
mimetype="application/json")
|
|
|
|
|
|
|
|
@app.route('/githubOAuth')
|
|
@cross_origin('*')
|
|
@github.authorized_handler
|
|
def oauth(oauth_token):
|
|
if oauth_token is None:
|
|
return render_template("index.html", messages={'error': 'OAuth Fail'})
|
|
try:
|
|
response = requests.get("https://api.github.com/user?access_token=" + oauth_token)
|
|
user_data = json.loads(response.content)
|
|
response = requests.get("https://api.github.com/user/emails?access_token=" + oauth_token)
|
|
userEmails = json.loads(response.content)
|
|
except Exception:
|
|
return "<h1>Max Retries connection To Github</h1><p>github has aborted connection due to to many retries. you need to wait</p>"
|
|
|
|
resault = User.all()
|
|
resault.filter("username =", str(user_data["login"]))
|
|
|
|
print user_data["login"]
|
|
|
|
for u in resault.run():
|
|
print "Exists!!!"
|
|
u.seToken = str(uuid.uuid4())
|
|
u.accessToken = oauth_token
|
|
u.put()
|
|
return cookieMonster(u.seToken)
|
|
|
|
tempName = ";"
|
|
|
|
if user_data["email"] == "":
|
|
for email in userEmails:
|
|
if email["primary"] and email["verified"]:
|
|
tempEmail = email["email"]
|
|
else:
|
|
tempEmail = user_data["email"]
|
|
|
|
user = User(username=user_data["login"], name=tempName, avatar_url=user_data["avatar_url"], email=tempEmail, isLecturer=False, accessToken=oauth_token, seToken=str(uuid.uuid4()))
|
|
db.put(user)
|
|
db.save
|
|
return cookieMonster(user.seToken)
|
|
|
|
|
|
@app.route('/api/Campuses/create/<string:token>', methods=['POST'])
|
|
@auto.doc()
|
|
def create_campus(token):
|
|
"""
|
|
This call will create a new campus in the DB
|
|
:param token: user seToken
|
|
Payload
|
|
{'title': self.title,
|
|
'email_ending': self.email_ending,
|
|
'avatar_url': self.avatar_url
|
|
}
|
|
:return:
|
|
code 200
|
|
"""
|
|
print "1\n"
|
|
if not request.data:
|
|
return Response(response=json.dumps({'message': 'Bad Request0'}),
|
|
status=400,
|
|
mimetype="application/json")
|
|
payload = json.loads(request.data)
|
|
if not is_lecturer(token): #todo: change to lecturer id
|
|
return Response(response=json.dumps({'message': 'Invalid token or not a lecturer!'}),
|
|
status=403,
|
|
mimetype="application/json")
|
|
|
|
user = get_user_by_token(token)
|
|
|
|
#todo: check legality
|
|
|
|
|
|
try:
|
|
campus = Campus(title=payload['title'], email_ending=payload['email_ending'], master_user_id=user.key().id(), avatar_url=payload['avatar_url'])
|
|
except Exception:
|
|
return Response(response=json.dumps({'message': 'Bad Request1'}),
|
|
status=400,
|
|
mimetype="application/json")
|
|
|
|
db.put(campus)
|
|
db.save
|
|
return Response(response=json.dumps(campus.to_JSON()),
|
|
status=200,
|
|
mimetype="application/json")
|
|
|
|
|
|
|
|
|
|
@app.route('/api/Campuses/<string:token>', methods=['GET'])
|
|
@auto.doc()
|
|
def get_campuses(token):
|
|
"""
|
|
This Call will return an array of all Campuses available
|
|
:param token: user seToken
|
|
:return:
|
|
code 200:
|
|
[
|
|
{
|
|
'title': 'JCE',
|
|
'email_ending': '@post.jce.ac.il',
|
|
'master_user_id': 123453433341, (User that created the campus)
|
|
'avatar_url': 'http://some.domain.com/imagefile.jpg'
|
|
},
|
|
....
|
|
{
|
|
...
|
|
}req
|
|
]
|
|
|
|
code 403: Forbidden - Invalid Token
|
|
code 500: internal server error
|
|
"""
|
|
if is_user_token_valid(token):
|
|
arr = []
|
|
query = Campus.all()
|
|
for c in query.run():
|
|
arr.append(dict(json.loads(c.to_JSON())))
|
|
print arr
|
|
if len(arr) != 0:
|
|
return Response(response=json.dumps(arr),
|
|
status=200,
|
|
mimetype="application/json")
|
|
else:
|
|
return Response(response=[],
|
|
status=200,
|
|
mimetype="application/json")
|
|
else:
|
|
return Response(response=json.dumps({'message': 'Invalid Token'}),
|
|
status=403,
|
|
mimetype="application/json")
|
|
|
|
|
|
|
|
@app.route('/login')
|
|
@cross_origin('*')
|
|
def login():
|
|
return github.authorize()
|
|
|
|
|
|
|
|
|
|
def cookieMonster(uid):
|
|
redirect_to_home = redirect('/home')
|
|
response = app.make_response(redirect_to_home )
|
|
response.set_cookie('com.sehub.www',value=uid)
|
|
return response
|