101 lines
3.6 KiB
Python
101 lines
3.6 KiB
Python
from flask import render_template, flash, redirect, url_for, request
|
|
from flask_login import login_user, logout_user, current_user, login_required
|
|
from werkzeug.urls import url_parse
|
|
from app import app, db
|
|
from app.forms import LoginForm, RegistrationForm, UpdateAccountForm, SearchForm, AdvancedSearchForm
|
|
from app.models.users import Member
|
|
|
|
# Ce truc c'est la vie !
|
|
def _render_template(*args, **kwargs):
|
|
# TODO: debugguer cette merde : au logout, ça foire
|
|
# if current_user.is_authenticated:
|
|
# login_form = LoginForm()
|
|
# return render_template(*args, **kwargs, login_form=login_form)
|
|
# return render_template(*args, **kwargs)
|
|
login_form = LoginForm()
|
|
search_form = SearchForm()
|
|
return render_template(*args, **kwargs,
|
|
login_form=login_form, search_form=search_form)
|
|
|
|
|
|
@app.route('/')
|
|
def index():
|
|
login_form = LoginForm()
|
|
return _render_template('index.html')
|
|
|
|
@app.route('/login', methods=['GET', 'POST'])
|
|
def login():
|
|
form = LoginForm()
|
|
if form.validate_on_submit():
|
|
member = Member.query.filter_by(name=form.username.data).first()
|
|
if member is None or not member.check_password(form.password.data):
|
|
flash('Pseudo ou mot de passe invalide', 'error')
|
|
return redirect(request.referrer)
|
|
login_user(member, remember=form.remember_me.data)
|
|
flash('Connexion réussie', 'info')
|
|
r = request.args.get('next')
|
|
if r:
|
|
# TODO : prevent OpenRedirect security issues
|
|
return redirect(r)
|
|
else:
|
|
try:
|
|
return redirect(request.referer)
|
|
except:
|
|
return redirect(url_for('index'))
|
|
return _render_template('login.html', form=form)
|
|
|
|
@app.route('/logout')
|
|
def logout():
|
|
logout_user()
|
|
flash('Déconnexion réussie', 'info')
|
|
return redirect(url_for('index'))
|
|
|
|
|
|
@app.route('/account', methods=['GET', 'POST'])
|
|
def account():
|
|
# TODO: utiliser le décorateur @login_required
|
|
if not current_user.is_authenticated:
|
|
flash('Veuillez vous authentifier', 'warning')
|
|
return redirect(url_for('login', next=url_for('account')))
|
|
form = UpdateAccountForm()
|
|
if request.method == "POST":
|
|
if form.validate_on_submit():
|
|
current_user.update({
|
|
"email": form.email.data,
|
|
"password": form.password.data,
|
|
"signature": form.signature.data,
|
|
"bio": form.biography.data,
|
|
"birthday": form.birthday.data,
|
|
"newsletter": form.newsletter.data
|
|
})
|
|
db.session.add(current_user)
|
|
db.session.commit()
|
|
flash('Modifications effectuées', 'ok')
|
|
else:
|
|
flash('Erreur lors de la modification', 'error')
|
|
return _render_template('account.html', form=form)
|
|
|
|
@app.route('/register', methods=['GET', 'POST'])
|
|
def register():
|
|
if current_user.is_authenticated:
|
|
return redirect(url_for('index'))
|
|
form = RegistrationForm()
|
|
if form.validate_on_submit():
|
|
member = Member(form.username.data, form.email.data, form.password.data)
|
|
db.session.add(member)
|
|
db.session.commit()
|
|
flash('Inscription réussie', 'ok')
|
|
return redirect(url_for('validation'))
|
|
return _render_template('register.html', title='Register', form=form)
|
|
|
|
@app.route('/register/validation/')
|
|
def validation():
|
|
if current_user.is_authenticated :
|
|
return redirect(url_for('index'))
|
|
return _render_template('validation.html')
|
|
|
|
@app.route('/search')
|
|
def search():
|
|
form = AdvancedSearchForm()
|
|
return _render_template('search.html', form=form)
|