from flask import * from flask_user import * from flask_login import login_user, logout_user from flask.ext import menu from app import app from app.models import * from flask_wtf import FlaskForm from flask_user.forms import RegisterForm from wtforms import * from wtforms.validators import * from .utils import rank_required, randomString from app.tasks.forumtasks import checkForumAccount from app.tasks.emails import sendVerifyEmail # Define the User profile form class UserProfileForm(FlaskForm): display_name = StringField("Display name", [InputRequired(), Length(2, 20)]) email = StringField("Email") rank = SelectField("Rank", [InputRequired()], choices=UserRank.choices(), coerce=UserRank.coerce, default=UserRank.NEW_MEMBER) submit = SubmitField("Save") @app.route("/users/", methods=["GET"]) @rank_required(UserRank.MODERATOR) def user_list_page(): users = User.query.all() return render_template("users/list.html", users=users) @app.route("/users//", methods=["GET", "POST"]) def user_profile_page(username): user = User.query.filter_by(username=username).first() if not user: abort(404) form = None if user == current_user or user.checkPerm(current_user, Permission.CHANGE_RANK): # Initialize form form = UserProfileForm(formdata=request.form, obj=user) # Process valid POST if request.method=="POST" and form.validate(): # Copy form fields to user_profile fields if user == current_user: user.display_name = form["display_name"].data if user.checkPerm(current_user, Permission.CHANGE_RANK): newRank = form["rank"].data if current_user.rank.atLeast(newRank): user.rank = form["rank"].data else: flash("Can't promote a user to a rank higher than yourself!", "error") if user.checkPerm(current_user, Permission.CHANGE_EMAIL): newEmail = form["email"].data if newEmail != user.email: token = randomString(32) ver = UserEmailVerification() ver.user = user ver.token = token ver.email = newEmail db.session.add(ver) db.session.commit() task = sendVerifyEmail.delay(newEmail, token) return redirect(url_for("check_task", id=task.id, r=url_for("user_profile_page", username=username))) # Save user_profile db.session.commit() # Redirect to home page return redirect(url_for("user_profile_page", username=username)) # Process GET or invalid POST return render_template("users/user_profile_page.html", user=user, form=form) @app.route("/users/claim/", methods=["GET", "POST"]) def user_claim_page(): username = request.args.get("username") if username is None: username = "" else: method = request.args.get("method") user = User.query.filter_by(forums_username=username).first() if user and user.rank.atLeast(UserRank.NEW_MEMBER): flash("User has already been claimed", "error") return redirect(url_for("user_claim_page")) elif user is None and method == "github": flash("Unable to get Github username for user", "error") return redirect(url_for("user_claim_page")) elif user is None: flash("Unable to find that user", "error") return redirect(url_for("user_claim_page")) if user is not None and method == "github": return redirect(url_for("github_signin_page")) if request.method == "POST": ctype = request.form.get("claim_type") username = request.form.get("username") if username is None or len(username.strip()) < 2: flash("Invalid username", "error") elif ctype == "github": task = checkForumAccount.delay(username) return redirect(url_for("check_task", id=task.id, r=url_for("user_claim_page", username=username, method="github"))) elif ctype == "forum": token = request.form.get("token") flash("Unimplemented", "error") else: flash("Unknown claim type", "error") return render_template("users/claim.html", username=username, key=randomString(32)) @app.route("/users/verify/") def verify_email_page(): token = request.args.get("token") ver = UserEmailVerification.query.filter_by(token=token).first() if ver is None: flash("Unknown verification token!", "error") else: ver.user.email = ver.email db.session.delete(ver) db.session.commit() if current_user.is_authenticated: return redirect(url_for("user_profile_page", username=current_user.username)) else: return redirect(url_for("home_page"))