ska-referee-test/ref-test/app/models/user.py

from ..modules import db
from ..tools.encryption import decrypt, encrypt
from ..tools.logs import write

from flask import flash, jsonify, session
from flask.helpers import url_for
from flask_login import current_user, login_user, logout_user, UserMixin
from werkzeug.security import check_password_hash, generate_password_hash

import secrets
from uuid import uuid4
class User(UserMixin, db.Model):
    id = db.Column(db.String(36), primary_key=True)
    username = db.Column(db.String(128), nullable=False)
    password = db.Column(db.String(128), nullable=False)
    email = db.Column(db.String(128), nullable=False)
    reset_token = db.Column(db.String(20), nullable=True)
    verification_token = db.Column(db.String(20), nullable=True)

    def __repr__(self):
        return f'<user {self.username}> was added with <id {self.id}>.'
    
    @property
    def generate_id(self): raise AttributeError('generate_id is not a readable attribute.')

    generate_id.setter
    def generate_id(self): self.id = uuid4.hex()

    @property
    def set_username(self): raise AttributeError('set_username is not a readable attribute.')
    
    set_username.setter
    def set_username(self, username:str): self.username = encrypt(username)
    
    def get_username(self): return decrypt(self.username)

    @property
    def set_password(self): raise AttributeError('set_password is not a readable attribute.')

    set_password.setter
    def set_password(self, password:str): self.password = generate_password_hash(password, method="sha256")

    def verify_password(self, password:str): return check_password_hash(self.password, password)

    @property
    def set_email(self): raise AttributeError('set_email is not a readable attribute.')
    
    set_email.setter
    def set_email(self, email:str): self.email = encrypt(email)
    
    def get_email(self): return decrypt(self.email)

    def register(self):
        users = User.query.all()
        for user in users:
            if user.get_username() == self.get_username():
                return False, f'Username {self.get_username()} already in use.'
            elif user.get_email() == self.get_email():
                return False, f'Email address {self.get_email()} already in use.'
        db.session.add(self)
        db.session.commit()
        write('users.log', f'User \'{self.get_username()}\' was created with id \'{self.id}\'.')
        return True, f'User {self.get_username()} was created successfully.'

    def login(self, remember:bool=False):
        login_user(self, remember = remember)
        write('users.log', f'User \'{self.get_username()}\' has logged in.')
        flash(message=f'Welcome {self.get_username()}', category='success')
    
    def logout(self):
        session['remembered_username'] = self.get_username()
        logout_user()
        write('users.log', f'User \'{self.get_username()}\' has logged out.')
        flash(message='You have successfully logged out.', category='success')
    
    def reset_password(self):
        new_password = secrets.token_hex(12)
        self.set_password(new_password)
        self.reset_token = secrets.token_urlsafe(16)
        self.verification_token = secrets.token_urlsafe(16)
        db.session.commit()
        print('Password', new_password)
        print('Reset Token', self.reset_token)
        print('Verification Token', self.verification_token)
        print('Reset Link', f'{url_for("auth._reset", token=self.reset_token, verification=self.verification_token, _external=True)}')
        return jsonify({'success': 'Your password reset link has been generated.'}), 200

    def clear_reset_tokens(self):
        self.reset_token = self.verification_token = None
        db.session.commit()
    
    def delete(self):
        username = self.get_username()
        db.session.delete(self)
        db.session.commit()
        write('users.log', f'User \'{username}\' was deleted by \'{current_user.get_username()}\'.')

    def update(self, password:str=None, email:str=None):
        if not password and not email: return False, jsonify({'error': 'There were no changes requested.'})
        if password: self.set_password(password)
        if email: self.set_email(email)
        db.session.commit()
        message = f'Information for user {self.get_username()} has been updated by {current_user.get_username()}.'
        write('system.log', message)
        return True, jsonify({'success': message})