haproxy-wi/app/routes/user/routes.py

import json

from flask import render_template, request, jsonify, g, abort
from flask_login import login_required

from app.routes.user import bp
import app.modules.db.sql as sql
import app.modules.db.user as user_sql
import app.modules.db.group as group_sql
import app.modules.common.common as common
import app.modules.roxywi.user as roxywi_user
import app.modules.roxywi.auth as roxywi_auth
import app.modules.roxywi.common as roxywi_common
from app.middleware import get_user_params


@bp.before_request
@login_required
def before_request():
    """ Protect all the admin endpoints. """
    pass


@bp.route('', methods=['POST', 'PUT', 'DELETE'])
@get_user_params()
def create_user():
    roxywi_auth.page_for_admin(level=2)
    json_data = request.get_json()

    if request.method == 'POST':
        email = common.checkAjaxInput(json_data['email'])
        password = common.checkAjaxInput(json_data['password'])
        role = int(json_data['role'])
        new_user = common.checkAjaxInput(json_data['username'])
        enabled = int(json_data['enabled'])
        group_id = int(json_data['user_group'])
        lang = roxywi_common.get_user_lang_for_flask()
        current_user_role_id = g.user_params['role']
        if not roxywi_common.check_user_group_for_flask():
            return roxywi_common.handle_json_exceptions('Wrong group', 'Roxy-WI server', '')
        if current_user_role_id < role:
            return roxywi_common.handle_json_exceptions('Wrong role', 'Roxy-WI server', '')
        try:
            user_id = roxywi_user.create_user(new_user, email, password, role, enabled, group_id)
        except Exception as e:
            return roxywi_common.handle_json_exceptions(e, 'Roxy-WI server', 'Cannot create a new user')
        else:
            return jsonify({'status': 'created', 'id': user_id, 'data': render_template(
                'ajax/new_user.html', users=user_sql.select_users(user=new_user), groups=group_sql.select_groups(),
                roles=sql.select_roles(), adding=1, lang=lang
            )})
    elif request.method == 'PUT':
        user_id = int(json_data['user_id'])
        user_name = common.checkAjaxInput(json_data['username'])
        email = common.checkAjaxInput(json_data['email'])
        enabled = int(json_data['enabled'])
        if roxywi_common.check_user_group_for_flask():
            try:
                user_sql.update_user_from_admin_area(user_name, email, user_id, enabled)
            except Exception as e:
                return roxywi_common.handle_json_exceptions(e, 'Roxy-WI server', 'Cannot update user')
            roxywi_common.logging(user_name, ' has been updated user ', roxywi=1, login=1)
            return jsonify({'status': 'updated'})
    elif request.method == 'DELETE':
        roxywi_auth.page_for_admin(level=2)
        user_id = int(json_data['user_id'])
        try:
            roxywi_user.delete_user(user_id)
            return jsonify({'status': 'deleted'})
        except Exception as e:
            return roxywi_common.handle_json_exceptions(e, 'Roxy-WI server', f'Cannot delete the user {user_id}')
    else:
        abort(405)


@bp.route('/ldap/<username>')
def get_ldap_email(username):
    roxywi_auth.page_for_admin(level=2)

    return roxywi_user.get_ldap_email(username)


@bp.post('/password')
def update_password():
    password = request.form.get('updatepassowrd')
    uuid = request.form.get('uuid')
    user_id_from_get = request.form.get('id')

    return roxywi_user.update_user_password(password, uuid, user_id_from_get)


@bp.route('/services/<int:user_id>', methods=['GET', 'POST'])
def show_user_services(user_id):
    if request.method == 'GET':
        return roxywi_user.get_user_services(user_id)
    else:
        json_data = request.get_json()
        user = json_data['username']
        user_services = json_data['services']
        try:
            roxywi_user.change_user_services(user, user_id, user_services)
            return jsonify({'status': 'updated'})
        except Exception as e:
            return roxywi_common.handle_json_exceptions(e, 'Roxy-WI server', 'Cannot change user services')


@bp.route('/group', methods=['GET', 'PUT'])
def get_current_group():
    if request.method == 'GET':
        uuid = common.checkAjaxInput(request.cookies.get('uuid'))
        group = common.checkAjaxInput(request.cookies.get('group'))
        return roxywi_user.get_user_active_group(uuid, group)
    elif request.method == 'PUT':
        group_id = common.checkAjaxInput(request.form.get('group'))
        user_uuid = common.checkAjaxInput(request.form.get('uuid'))

        return roxywi_user.change_user_active_group(group_id, user_uuid)


@bp.route('/groups/<int:user_id>')
def show_user_groups_and_roles(user_id):
    lang = roxywi_common.get_user_lang_for_flask()

    return roxywi_user.show_user_groups_and_roles(user_id, lang)


@bp.post('/groups/save')
def change_user_groups_and_roles():
    user = common.checkAjaxInput(request.form.get('changeUserGroupsUser'))
    groups_and_roles = json.loads(request.form.get('jsonDatas'))
    user_uuid = request.cookies.get('uuid')

    return roxywi_user.save_user_group_and_role(user, groups_and_roles, user_uuid)


@bp.route('/group/name/<int:group_id>')
def get_group_name_by_id(group_id):
    return group_sql.get_group_name_by_id(group_id)