university-final-iot-backend/app/api/resources/account.py

126 lines
4.5 KiB
Python
Raw Normal View History

from flask_restful import Resource, abort
from flask import g, render_template, redirect
2018-05-08 14:45:09 +00:00
from marshmallow import Schema, fields
from webargs.flaskparser import use_args
2018-05-07 14:13:07 +00:00
from flasgger import swag_from
from app.api.blueprint import api
import app.accounts.api as accounts
from app.accounts.tasks import send_email_task
from app.api.auth_protection import ProtectedResource
2018-10-06 12:18:04 +00:00
from app.api.permission_protection import (requires_permission,
valid_permissions)
from app.api.schemas import BaseResourceSchema
from flask import current_app as app
2018-05-06 19:42:21 +00:00
class UserSchema(BaseResourceSchema):
2018-05-08 14:45:09 +00:00
username = fields.Str(required=True)
email = fields.Email(required=True)
password = fields.Str(required=True, load_only=True)
2018-09-22 17:01:50 +00:00
class RoleUpdateSchema(Schema):
role_id = fields.Integer(required=True, load_only=True, location='json')
2018-10-06 12:18:04 +00:00
def validate_role_permissions(permissions_list):
return set(permissions_list).issubset(valid_permissions)
class RoleSchema(BaseResourceSchema):
2018-09-23 11:56:41 +00:00
id = fields.Integer(required=True, location='json')
2018-09-22 23:22:19 +00:00
display_name = fields.String(required=True, location='json')
permissions = fields.List(fields.String, required=True,
2018-10-06 12:18:04 +00:00
location='json', many=True,
validate=validate_role_permissions)
2018-09-22 23:22:19 +00:00
class RoleCreationSchema(Schema):
display_name = fields.String(required=True, location='json')
permissions = fields.List(fields.String, required=True,
location='json', many=True)
2018-05-08 14:45:09 +00:00
class AccountResource(ProtectedResource):
2018-05-08 08:52:36 +00:00
@swag_from('swagger/get_account_spec.yaml')
def get(self, account_id):
if g.current_account.id == account_id:
return UserSchema().dump(g.current_account), 200
2018-05-08 08:52:36 +00:00
abort(403, message='You can only get your own account', status='error')
2018-09-22 23:22:19 +00:00
class RoleResource(ProtectedResource):
@swag_from('swagger/get_role_spec.yaml')
def get(self, role_id):
return RoleSchema().dump(
accounts.get_role(role_id)), 200
2018-09-22 23:22:19 +00:00
class RolesResource(ProtectedResource):
2018-09-23 11:56:41 +00:00
@requires_permission('CREATE_ROLE', 'Role creation')
@use_args(RoleCreationSchema(), locations=('json',))
2018-09-22 23:22:19 +00:00
@swag_from('swagger/create_role_spec.yaml')
def post(self, args):
created_role = accounts.create_role(args['display_name'],
args['permissions'])
return RoleSchema().dump(created_role), 201
2018-09-22 23:22:19 +00:00
@swag_from('swagger/get_roles_spec.yaml')
def get(self):
return RoleSchema().dump(accounts.get_all_roles(), many=True), 200
2018-09-22 23:22:19 +00:00
2018-09-22 17:01:50 +00:00
class AccountRoleResource(ProtectedResource):
@use_args(RoleUpdateSchema(), locations=('json',))
2018-09-22 17:01:50 +00:00
@swag_from('swagger/update_account_role_spec.yaml')
def put(self, args, account_id):
if g.current_account.id == account_id:
abort(403, message='You may not change your own roles',
status='error')
updated_account = accounts.update_account_role(
account_id, args['role_id'])
return UserSchema().dump(updated_account), 200
2018-09-22 17:01:50 +00:00
2018-05-08 08:52:36 +00:00
class AccountListResource(Resource):
@use_args(UserSchema(), locations=('json',))
2018-05-07 14:13:07 +00:00
@swag_from('swagger/create_account_spec.yaml')
def post(self, args):
2018-05-06 19:42:21 +00:00
try:
created_account, emailtoken = accounts.create_account(
2018-05-06 19:42:21 +00:00
args['username'],
args['email'],
args['password'])
confirm_url = api.url_for(
AccountEmailTokenResource,
token=emailtoken, _external=True)
html = render_template(
'activate_mail.html',
confirm_url=confirm_url)
send_email_task.delay(
args['email'],
'Please confirm your email',
html)
return UserSchema().dump(created_account), 201
2018-05-06 19:42:21 +00:00
except ValueError:
abort(422, message='Account already exists', status='error')
class AccountEmailTokenResource(Resource):
def get(self, token):
success, email = accounts.confirm_email_token(token)
if success:
html = render_template(
'welcome_to_iot.html')
send_email_task.delay(
email,
'Welcome to IoT!',
html)
return redirect(app.config['FRONTEND_URL'])
class AccountEmailTokenResendResource(Resource):
@use_args(UserSchema(), locations=('json',))
def post(self, args):
return '', 201