aboutsummaryrefslogtreecommitdiff
path: root/app/views/auth.py
blob: 3d798f7403f3bbb51cefc4a9ee3c8fc290c88bfc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
from app import app, db, models, login_manager, oauth
from app.forms.app_forms import UserSignUp, UserLogIn 
from flask import render_template, flash,url_for, redirect, request
from app.misc_func import flash_errors
import flask_login
from sqlalchemy.exc import IntegrityError

@app.route("/signup", methods=['GET', 'POST'])
def register_user():
    if request.method == "GET" and flask_login.current_user.is_authenticated:
            return redirect(url_for("user_dashboard"))
    form = UserSignUp()
    if form.validate_on_submit():
        user = models.User(
            first_name=form.first_name.data,
            last_name=form.last_name.data,
            email=form.email.data,
            confirmation=False,
            password=form.password.data,
            )
        db.session.add(user)
        try:
            db.session.commit()
        except IntegrityError:
            flash("Oops! An account with that email already exists")
            return render_template("auth/signup.html",form=form)
        flask_login.login_user(user)
        return redirect(url_for("user_dashboard")) 
    flash_errors(form)
    return render_template("auth/signup.html",form=form)

@app.route("/signin", methods=['GET', 'POST'])
def signin_user():
    if request.method == "GET" and flask_login.current_user.is_authenticated:
            return redirect(url_for("user_dashboard"))
    form = UserLogIn()
    if form.validate_on_submit():
        user = models.User.query.filter_by(email=form.email.data).first()
        if user is not None:
            if user.login_type != "Normie":
                flash("Please Use Sign in With {}".format(user.login_type.title()))
            elif user.check_password(form.password.data):
                flask_login.login_user(user)
                return redirect(url_for("user_dashboard"))
            else:
                flash("Incorrect Password")
        else:
            flash("Incorrect Email")
    else:
        flash_errors(form)
    return render_template("auth/signin.html",form=form) 

@app.route("/login/with/google")
def login_with_google():
    redirect_uri = url_for("login_with_google_auth", _external=True)
    return oauth.google.authorize_redirect(redirect_uri)


@app.route("/login/with/google/callback")
def login_with_google_auth():
    token = oauth.google.authorize_access_token()
    g_user = oauth.google.parse_id_token(token)
    print(g_user)
    if g_user["email_verified"]:
        user = models.User(
            first_name=g_user["given_name"],
            last_name=g_user["family_name"],
            email=g_user["email"],
            confirmation=True,
            login_type="google")
        db.session.add(user)
        try:
            db.session.commit()
            flask_login.login_user(user)
            return redirect(url_for("user_dashboard"))
        except IntegrityError:
            db.session.rollback()
            user = models.User.query.filter_by(email=g_user["email"]).first()
            if user.login_type == "google":
                flask_login.login_user(user)
                return redirect(url_for("user_dashboard"))
            else:
                flash("An account already exists for this email. Please use your password to log in.")
                return redirect(url_for("signin_user"))
    else:
        return render_template(
            "message.html",
            message="To use sign-in with Google, you need a verified e-mail.",
        )

@app.route("/dashboard")
@flask_login.login_required
def user_dashboard():
    return render_template("dashboard.html",user=flask_login.current_user)

@app.route('/logout')
def logout():
    flask_login.logout_user()
    return render_template("message.html",message="You have been logged out.")

@login_manager.unauthorized_handler
def unauthorized():
    return render_template("message.html",message="You need to be logged in to access this resource", code=401), 401