import datetime import os from typing import Dict, Tuple, Union import jwt from fittrackee import appLog, bcrypt, db from fittrackee.responses import ( ForbiddenErrorResponse, HttpResponse, InvalidPayloadErrorResponse, PayloadTooLargeErrorResponse, UnauthorizedErrorResponse, handle_error_and_return_response, ) from fittrackee.tasks import reset_password_email from flask import Blueprint, current_app, request from sqlalchemy import exc, or_ from werkzeug.exceptions import RequestEntityTooLarge from werkzeug.utils import secure_filename from ..workouts.utils_files import get_absolute_file_path from .models import User from .utils import ( authenticate, check_passwords, display_readable_file_size, get_readable_duration, register_controls, verify_extension_and_size, ) from .utils_token import decode_user_token auth_blueprint = Blueprint('auth', __name__) @auth_blueprint.route('/auth/register', methods=['POST']) def register_user() -> Union[Tuple[Dict, int], HttpResponse]: """ register a user **Example request**: .. sourcecode:: http POST /api/auth/register HTTP/1.1 Content-Type: application/json **Example responses**: - successful registration .. sourcecode:: http HTTP/1.1 201 CREATED Content-Type: application/json { "auth_token": "JSON Web Token", "message": "Successfully registered.", "status": "success" } - error on registration .. sourcecode:: http HTTP/1.1 400 BAD REQUEST Content-Type: application/json { "message": "Errors: Valid email must be provided.\\n", "status": "error" } : Union[Dict, HttpResponse]: """ user login **Example request**: .. sourcecode:: http POST /api/auth/login HTTP/1.1 Content-Type: application/json **Example responses**: - successful login .. sourcecode:: http HTTP/1.1 200 OK Content-Type: application/json { "auth_token": "JSON Web Token", "message": "Successfully logged in.", "status": "success" } - error on login .. sourcecode:: http HTTP/1.1 404 NOT FOUND Content-Type: application/json { "message": "Invalid credentials.", "status": "error" } : Union[Dict, HttpResponse]: """ user logout **Example request**: .. sourcecode:: http GET /api/auth/logout HTTP/1.1 Content-Type: application/json **Example responses**: - successful logout .. sourcecode:: http HTTP/1.1 200 OK Content-Type: application/json { "message": "Successfully logged out.", "status": "success" } - error on login .. sourcecode:: http HTTP/1.1 401 UNAUTHORIZED Content-Type: application/json { "message": "Provide a valid auth token.", "status": "error" } :reqheader Authorization: OAuth 2.0 Bearer Token :statuscode 200: Successfully logged out. :statuscode 401: Provide a valid auth token. """ # get auth token auth_header = request.headers.get('Authorization') if not auth_header: return UnauthorizedErrorResponse('Provide a valid auth token.') auth_token = auth_header.split(' ')[1] resp = User.decode_auth_token(auth_token) if isinstance(auth_user_id, str): return UnauthorizedErrorResponse(resp) return { 'status': 'success', 'message': 'Successfully logged out.', } @auth_blueprint.route('/auth/profile', methods=['GET']) @authenticate def get_authenticated_user_profile( auth_user_id: int, ) -> Union[Dict, HttpResponse]: """ get authenticated user info **Example request**: .. sourcecode:: http GET /api/auth/profile HTTP/1.1 Content-Type: application/json **Example response**: .. sourcecode:: http HTTP/1.1 200 OK Content-Type: application/json { "data": { "admin": false, "bio": null, "birth_date": null, "created_at": "Sun, 14 Jul 2019 14:09:58 GMT", "email": "sam@example.com", "first_name": null, "language": "en", "last_name": null, "location": null, "nb_sports": 3, "nb_workouts": 6, "picture": false, "sports_list": [ 1, 4, 6 ], "timezone": "Europe/Paris", "total_distance": 67.895, "total_duration": "6:50:27", "username": "sam", "weekm": false }, "status": "success" } :reqheader Authorization: OAuth 2.0 Bearer Token :statuscode 200: success. :statuscode 401: - Provide a valid auth token. - Signature expired. Please log in again. - Invalid token. Please log in again. """ user = User.query.filter_by(id=auth_user_id).first() return {'status': 'success', 'data': user.serialize()} @auth_blueprint.route('/auth/profile/edit', methods=['POST']) @authenticate def edit_user(auth_user_id: int) -> Union[Dict, HttpResponse]: """ edit authenticated user **Example request**: .. sourcecode:: http POST /api/auth/profile/edit HTTP/1.1 Content-Type: application/json **Example response**: .. sourcecode:: http HTTP/1.1 200 OK Content-Type: application/json { "data": { "admin": false, "bio": null, "birth_date": null, "created_at": "Sun, 14 Jul 2019 14:09:58 GMT", "email": "sam@example.com", "first_name": null, "language": "en", "last_name": null, "location": null, "nb_sports": 3, "nb_workouts": 6, "picture": false, "sports_list": [ 1, 4, 6 ], "timezone": "Europe/Paris", "total_distance": 67.895, "total_duration": "6:50:27", "username": "sam" "weekm": true, }, "message": "User profile updated.", "status": "success" } := user_mandatory_data: return InvalidPayloadErrorResponse() first_name = post_data.get('first_name') last_name = post_data.get('last_name') bio = post_data.get('bio') birth_date = post_data.get('birth_date') language = post_data.get('language') location = post_data.get('location') password = post_data.get('password') password_conf = post_data.get('password_conf') timezone = post_data.get('timezone') weekm = post_data.get('weekm') if password is not None and password != '': message = check_passwords(password, password_conf) if message != '': return InvalidPayloadErrorResponse(message) password = bcrypt.generate_password_hash( password, current_app.config.get('BCRYPT_LOG_ROUNDS') ).decode() try: user = User.query.filter_by(id=auth_user_id).first() user.first_name = first_name user.last_name = last_name user.bio = bio user.language = language user.location = location user.birth_date = ( datetime.datetime.strptime(birth_date, '%Y-%m-%d') if birth_date else None ) if password is not None and password != '': user.password = password user.timezone = timezone user.weekm = weekm db.session.commit() return { 'status': 'success', 'message': 'User profile updated.', 'data': user.serialize(), } # handler errors except (exc.IntegrityError, exc.OperationalError, ValueError) as e: return handle_error_and_return_response(e, db=db) @auth_blueprint.route('/auth/picture', methods=['POST']) @authenticate def edit_picture(auth_user_id: int) -> Union[Dict, HttpResponse]: """ update authenticated user picture **Example request**: .. sourcecode:: http POST /api/auth/picture HTTP/1.1 Content-Type: multipart/form-data **Example response**: .. sourcecode:: http HTTP/1.1 200 OK Content-Type: application/json { "message": "User picture updated.", "status": "success" } :form file: image file (allowed extensions: .jpg, .png, .gif) :reqheader Authorization: OAuth 2.0 Bearer Token :statuscode 200: User picture updated. :statuscode 400: - Invalid payload. - No file part. - No selected file. - File extension not allowed. :statuscode 401: - Provide a valid auth token. - Signature expired. Please log in again. - Invalid token. Please log in again. :statuscode 413: Error during picture update: file size exceeds 1.0MB. :statuscode 500: Error during picture update. """ try: response_object = verify_extension_and_size('picture', request) except RequestEntityTooLarge as e: appLog.error(e) max_file_size = current_app.config['MAX_CONTENT_LENGTH'] return PayloadTooLargeErrorResponse( 'Error during picture update, file size exceeds ' f'{display_readable_file_size(max_file_size)}.' ) if response_object: return response_object file = request.files['file'] filename = secure_filename(file.filename) dirpath = os.path.join( current_app.config['UPLOAD_FOLDER'], 'pictures', str(auth_user_id) ) if not os.path.exists(dirpath): os.makedirs(dirpath) absolute_picture_path = os.path.join(dirpath, filename) relative_picture_path = os.path.join( 'pictures', str(auth_user_id), filename ) try: user = User.query.filter_by(id=auth_user_id).first() if user.picture is not None: old_picture_path = get_absolute_file_path(user.picture) if os.path.isfile(get_absolute_file_path(old_picture_path)): os.remove(old_picture_path) file.save(absolute_picture_path) user.picture = relative_picture_path db.session.commit() return { 'status': 'success', 'message': 'User picture updated.', } except (exc.IntegrityError, ValueError) as e: return handle_error_and_return_response( e, message='Error during picture update.', status='fail', db=db ) @auth_blueprint.route('/auth/picture', methods=['DELETE']) @authenticate def del_picture(auth_user_id: int) -> Union[Tuple[Dict, int], HttpResponse]: """ delete authenticated user picture **Example request**: .. sourcecode:: http DELETE /api/auth/picture HTTP/1.1 Content-Type: application/json **Example response**: .. sourcecode:: http HTTP/1.1 204 NO CONTENT Content-Type: application/json :reqheader Authorization: OAuth 2.0 Bearer Token :statuscode 204: picture deleted :statuscode 401: - Provide a valid auth token. - Signature expired. Please log in again. - Invalid token. Please log in again. :statuscode 500: Error during picture deletion. """ try: user = User.query.filter_by(id=auth_user_id).first() picture_path = get_absolute_file_path(user.picture) if os.path.isfile(picture_path): os.remove(picture_path) user.picture = None db.session.commit() return {'status': 'no content'}, 204 except (exc.IntegrityError, ValueError) as e: return handle_error_and_return_response( e, message='Error during picture deletion.', status='fail', db=db ) @auth_blueprint.route('/auth/password/reset-request', methods=['POST']) def request_password_reset() -> Union[Dict, HttpResponse]: """ handle password reset request **Example request**: .. sourcecode:: http POST /api/auth/password/reset-request HTTP/1.1 Content-Type: application/json **Example response**: .. sourcecode:: http HTTP/1.1 200 OK Content-Type: application/json { "message": "Password reset request processed.", "status": "success" } : Union[Dict, HttpResponse]: """ update user password **Example request**: .. sourcecode:: http POST /api/auth/password/update HTTP/1.1 Content-Type: application/json **Example response**: .. sourcecode:: http HTTP/1.1 200 OK Content-Type: application/json { "message": "Password updated.", "status": "success" } :