hometab/app/logic.py

# Site Back-End Logic
from hmac import new
from unicodedata import category
from flask import Blueprint, render_template, request, flash, redirect, url_for
from flask_login import login_user, login_required, logout_user, current_user
from werkzeug.security import generate_password_hash, check_password_hash
from .models import User
from . import db
import string, secrets

logic = Blueprint('logic', __name__)

@logic.route('/', methods=['GET', 'POST'])
@login_required
def home():
    if request.method == "POST":
        passwd = request.form.get('password')
        passwdc = request.form.get('password_confirm')
        new_pic = request.files.get('profile_image')

        if passwd and passwdc:
            if passwd == passwdc:
                npasswd_dbcall = User.query.filter_by(id=current_user.id).first()
                npasswd_dbcall.password = generate_password_hash(passwdc, method='sha256')
                db.session.commit()
                flash('Password successfully updated', category='success')
            else:
                flash('Passwords must match!', category='error')
        elif new_pic:
            # generate random filename for uploaded file 
            alphanumeric = string.ascii_letters + string.digits
            ralphanum = ''.join(secrets.choice(alphanumeric) for i in range(16))
            new_pic_dbcall = User.query.filter_by(id=current_user.id).first()
            if '.png' in new_pic.filename:
                new_pic.save(f'app/static/uploads/{ralphanum}.png')
                new_pic_dbcall.profile_image = f'{ralphanum}.png'
            elif '.jpg' in new_pic.filename or 'jpeg' in new_pic.filename:
                new_pic.save(f'app/static/uploads/{ralphanum}.jpeg')
                new_pic_dbcall.profile_image = f'{ralphanum}.jpeg'
            db.session.commit()
            flash('Profile Pic updated!', category='success')


    return render_template('home.html', user=current_user)

@logic.route('/login', methods=['GET', 'POST'])
def login():
    if request.method == 'POST':
        email = request.form.get('email')
        challenge_passwd = request.form.get('passwd_login')

        user = User.query.filter_by(email=email).first()
        if user:
            if check_password_hash(user.password, challenge_passwd):
                flash('Successful Login!', category='success')
                login_user(user, remember=True)
                return redirect(url_for('logic.home'))
            else:
                flash('Unsucessful Login!', category='error')
        else:
            flash('Unsucessful Login!', category='error')
    
    return render_template("login.html", user=current_user)

@logic.route('/logout')
@login_required
def logout():
    logout_user()
    return redirect(url_for('logic.login'))

@logic.route('/register', methods=['GET', 'POST'])
def register():
    pass_list = list()
    if request.method == 'POST':
        email = request.form.get('email') 
        username = request.form.get('username')
        passwd_1 = request.form.get('passwd_1')
        passwd_2 = request.form.get('passwd_2')

        # Basic User Input Checks
        email_check = User.query.filter_by(email=email).first()
        if len(email) < 1:
            flash('Your Email must be longer than 0 characters.', category='error')
        elif email_check:
            flash('This Email is already taken', category='error')
        else:
            pass_list.append('p')
    
        if len(username) < 1:
            flash('Username must be something', category='error')
        else:
            pass_list.append('p')

        if len(passwd_1) < 8 or len(passwd_2) < 8:
            flash('Your Password must be longer than or equal to 8 characters.', category='error')
        else:
            if passwd_1 != passwd_2:
                flash('Your Passwords must match!', category='error')
            else:
                if len(pass_list) == 2:
                    new_user = User(email=email, username=username, password=generate_password_hash(passwd_2, method='sha256'))
                    db.session.add(new_user)
                    db.session.commit()
                    flash('Account Registration Successful!', category='success')
                    return redirect(url_for('logic.home'))
                else:
                    flash('Registration Failed', category='error')
    return render_template("register.html", user=current_user)