capsul-flask/capsulflask/auth.py

85 lines
2.6 KiB
Python
Raw Normal View History

2020-05-10 01:36:14 +00:00
import functools
2020-05-10 04:45:20 +00:00
import re
2020-05-10 01:36:14 +00:00
from flask import Blueprint
2020-05-10 03:59:22 +00:00
from flask import flash
from flask import current_app
2020-05-10 01:36:14 +00:00
from flask import g
from flask import redirect
from flask import url_for
2020-05-10 03:59:22 +00:00
from flask import request
2020-05-10 01:36:14 +00:00
from flask import session
2020-05-10 03:59:22 +00:00
from flask import render_template
from flask_mail import Message
2020-05-10 04:32:13 +00:00
from werkzeug.exceptions import abort
2020-05-10 01:36:14 +00:00
from capsulflask.db import get_model
bp = Blueprint("auth", __name__, url_prefix="/auth")
def account_required(view):
2020-05-10 18:51:54 +00:00
"""View decorator that redirects non-logged-in users to the login page."""
2020-05-10 01:36:14 +00:00
@functools.wraps(view)
def wrapped_view(**kwargs):
if session.get("account") is None:
return redirect(url_for("auth.login"))
return view(**kwargs)
return wrapped_view
2020-05-10 03:59:22 +00:00
@bp.route("/login", methods=("GET", "POST"))
def login():
2020-05-10 01:36:14 +00:00
if request.method == "POST":
email = request.form["email"]
error = None
if not email:
2020-05-10 18:51:54 +00:00
error = "email is required"
2020-05-10 04:45:20 +00:00
elif not re.match(r"(^[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\.[a-zA-Z0-9-.]+$)", email):
2020-05-10 18:51:54 +00:00
error = "enter a valid email address"
2020-05-10 01:36:14 +00:00
if error is None:
2020-05-10 03:59:22 +00:00
token = get_model().login(email)
2020-05-10 18:51:54 +00:00
if token is None:
error = "too many logins. please use one of the existing login links that have been emailed to you"
else:
link = f"{current_app.config['BASE_URL']}/auth/magic/{token}"
current_app.config["FLASK_MAIL_INSTANCE"].send(
Message(
"Click This Link to Login to Capsul",
body=f"""
Navigate to {link} to log into capsul.
If you didn't request this, ignore this message.
""",
html=f"""
<p>Navigate to <a href="{link}">{link}</a> to log into capsul.</p>
<p>If you didn't request this, ignore this message.</p>
""",
recipients=[email]
2020-05-10 18:51:54 +00:00
)
2020-05-10 03:59:22 +00:00
)
2020-05-10 18:51:54 +00:00
return render_template("login-landing.html", email=email)
2020-05-10 01:36:14 +00:00
flash(error)
2020-05-10 03:59:22 +00:00
return render_template("login.html")
2020-05-10 04:32:13 +00:00
@bp.route("/magic/<string:token>", methods=("GET", ))
def magiclink(token):
email = get_model().consumeToken(token)
if email is not None:
session.clear()
session["account"] = email
return redirect(url_for("index"))
else:
abort(404, f"Token {token} doesn't exist or has already been used.")
2020-05-10 03:59:22 +00:00
@bp.route("/logout")
def logout():
session.clear()
return redirect(url_for("index"))