Files
snikket-web-portal/snikket_web/user/__init__.py
2020-03-07 12:38:17 +01:00

116 lines
3.2 KiB
Python

import quart.flask_patch
from quart import Blueprint, render_template, request, redirect, url_for
import quart.exceptions
from flask_wtf import FlaskForm
import wtforms
from snikket_web.prosodyclient import client
user_bp = Blueprint('user', __name__, url_prefix="/user")
@user_bp.context_processor
async def proc():
return {"user_info": await client.get_user_info()}
class ChangePasswordForm(FlaskForm):
current_password = wtforms.PasswordField(
# TODO(i18n)
"Current password",
validators=[wtforms.validators.InputRequired()]
)
new_password = wtforms.PasswordField(
# TODO(i18n)
"New password",
validators=[wtforms.validators.InputRequired()]
)
new_password_confirm = wtforms.PasswordField(
# TODO(i18n)
"Confirm new password",
validators=[wtforms.validators.InputRequired(),
wtforms.validators.EqualTo(
"new_password",
# TODO(i18n)
"The new passwords must match."
)]
)
class LogoutForm(FlaskForm):
pass
class ProfileForm(FlaskForm):
nickname = wtforms.TextField(
"Display name",
)
avatar = wtforms.FileField(
"Avatar"
)
@user_bp.route("/")
async def index():
user_info = await client.get_user_info()
return await render_template("user_home.html", user_info=user_info)
@user_bp.route('/passwd', methods=["GET", "POST"])
async def change_pw():
form = ChangePasswordForm()
if form.validate_on_submit():
try:
await client.change_password(
form.current_password.data,
form.new_password.data,
)
except quart.exceptions.Unauthorized:
# server refused current password, set an appropriate error
form.errors.setdefault(form.current_password.name, []).append(
# TODO(i18n)
"Incorrect password",
)
else:
return redirect(url_for("user.change_pw"))
return await render_template("user_passwd.html", form=form)
@user_bp.route("/profile", methods=["GET", "POST"])
async def profile():
form = ProfileForm()
if request.method != "POST":
user_info = await client.get_user_info()
form.nickname.data = user_info.get("nickname", "")
if form.validate_on_submit():
user_info = await client.get_user_info()
file_info = (await request.files).get(form.avatar.name)
if file_info is not None:
mimetype = file_info.mimetype
data = file_info.stream.read()
if len(data) > 0:
await client.set_user_avatar(data, mimetype)
if user_info.get("nickname") != form.nickname.data:
await client.set_user_nickname(form.nickname.data)
return redirect(url_for(".profile"))
return await render_template("user_profile.html", form=form)
@user_bp.route("/logout", methods=["GET", "POST"])
async def logout():
form = LogoutForm()
if form.validate_on_submit():
await client.logout()
return redirect(url_for("home"))
return await render_template("user_logout.html", form=form)