run_server.py

#!/usr/bin/env python
# -*- coding: utf-8 -*-
import os, sys
from datetime import datetime

# flask
from flask import Flask, render_template, url_for, request, redirect, abort, send_from_directory
app = Flask(__name__)

# jinja2
import jinja2

# ConfigParser
import ConfigParser, os
# load config file
config = ConfigParser.ConfigParser()
config.read('site.cfg')
dbhost = config.get('Database', 'host', 0)
dbuser = config.get('Database', 'user', 0)
dbpass = config.get('Database', 'password', 0)
dbname = config.get('Database', 'dbname', 0)
secret_key = config.get('Session', 'secret_key', '')
hash = config.get('Session', 'hash', '')

# set secret key for session
if secret_key=='':
    sys.exit("Empty secrey_key in site.cfg")
if hash=='':
    sys.exit("Empty hash in site.cfg")
# directly into flask-login
#app.secret_key = secret_key
# through flask-security
app.config['SECRET_KEY'] = secret_key

# connect to db
connstr = 'postgresql://{0}:{1}@{2}/{3}'.format(dbuser, dbpass, dbhost, dbname)
app.config['DEBUG'] = True
app.config['SQLALCHEMY_DATABASE_URI'] = connstr
app.config['SECURITY_LOGIN_USER_TEMPLATE'] = 'login.min.html'
app.config['SECURITY_MSG_USER_DOES_NOT_EXIST'] = (u"אין חשבון משוייך לכתובת דואר אלקטרוני זו", 'error')
app.config['SECURITY_MSG_INVALID_PASSWORD'] = (u"כתובת דואר אלקטרוני וססמה אינם תואמים", 'error')
# loading db and model
import model
model.app = app
model.init()
model.inithash(hash)
from model import decodehash, events, users
model.create_db()
users.init(app)

# Flask-Login
from flask.ext.login import LoginManager, login_user, logout_user
# Flask-Security
from flask.ext.security import Security, current_user, login_required


# Flask-WTF
from flask_wtf import Form
from wtforms import TextField, StringField, PasswordField, validators
from wtforms.validators import Required, DataRequired

from datetime import datetime

# home view
@app.route("/")
def home():
    e = events.Event.query.filter(events.Event.date>datetime.now().replace(hour=0, minute=0, second=0, microsecond=0)).order_by(events.Event.date)
    return render_template('index.min.html', active='home', events=e)

# admin view
@app.route("/admin/")
def admin_home():
    if not current_user.has_role("admin"):
	abort(403)
    u = users.User.query.filter_by()
    e = events.Event.query.filter_by()
    p = events.Place.query.filter_by()
    return render_template('admin.min.html', active='home', users=u, events=e, places=p)

# About view
@app.route("/about")
def about():
    return render_template('about.min.html', active='about')

class LoginForm(Form):
    email = TextField('email', [validators.Required()])
    password = PasswordField('password', [validators.Required()])

    def __init__(self, *args, **kwargs):
        Form.__init__(self, *args, **kwargs)
        self.user = None

    def validate(self):
        rv = Form.validate(self)
        if not rv:
            return False
        user = users.User.get(email=self.email.data)
        if user is None:
            self.email.errors.append(u'משתמש לא קיים')
            return False
        #if not user.check_password(self.password.data):
        #    self.password.errors.append('משתמש וססמה לא מתאימים')
        #    return False
        self.user = user
        return True

#@users.login_manager.user_loader
@app.route("/user/create/", methods=['GET', 'POST'])
def user_create():
    # redirect home if already authenticated
    if current_user.is_authenticated():
	return redirect(url_for('home'))
    if request.method == 'GET':
        # return user_create.html page
	return render_template('user_create.min.html')
    if request.method == 'POST':
	email    = request.form['email']
	password    = request.form['password']
	# check if user exist
	user = users.User.query.filter_by(email=email).first()
	if not user is None:
	    url = url_for("login")
	    next = request.args.get("next") or ''
	    if next!='':
	        url = url + u"?next="+next
	    error = u"כתובת דואר אלקטרוני זו כבר בשימוש. <a href='"+url+u"'>התחבר</a>"
	    return render_template('user_create.min.html', error=error)
	# create user and fetch it
	users.create(email, password)
	user = users.User.query.filter_by(email=email).first()
    	# login and validate the user...
    	login_user(user)
        return redirect(request.args.get("next") or url_for("home"))

@app.route('/login', methods=['GET', 'POST'])
def login():
    if request.method == 'GET':
	return render_template('login.min.html', next=request.args.get("next") or '', active="login")
    email    = request.form['email']
    password    = request.form['password']
    next = request.form['next'] or ''
    with db_session:
        # check if user exist
        user = users.User.get(email=email)
        if user is None:
            return render_template('login.min.html', error=u"כתובת דואר זו אינה רשומה במערכת", next=next)
	if user.password == password:
	    # everything ok
	    login_user(user)
    	    return redirect(next or url_for("home"))
    return render_template('login.min.html', error=u"ההתחברות נכשלה", next=next)


@app.route("/logout")
def logout():
    logout_user()
    return redirect(url_for('home'))

# event view (missing seoname) just redirect
@app.route("/event/<id>/")
def event_missing_seoname(id):
    e = events.Event.query.filter_by(id=decodehash(id)).first()
    return redirect(e.url())

# event view
@app.route("/event/<id>/<seoname>/")
def event(id, seoname):
    id = decodehash(id)
    if not id:
	abort(404)
    e = events.Event.query.filter_by(id=id).first()
    if e is None:
	abort(404)
    if e.seoname() != seoname:
	return redirect(e.url())
    return render_template('event.min.html', active='event', event=e)

# place view
@app.route("/place/<id>/<seoname>/")
def place(id, seoname):
    id = decodehash(id)
    if not id:
	abort(404)
    p = events.Place.query.filter_by(id=id).first()
    if p is None:
	abort(404)
    if p.seoname != seoname:
	return redirect(p.url())
    return render_template('place.min.html', active='search', place=p)


class EventForm(Form):
    name = StringField('name', validators=[DataRequired()])
    seoname = StringField('seoname', validators=[DataRequired()])

# place edit view
@app.route("/place/<id>/<seoname>/edit", methods=['GET', 'POST'])
def place_edit(id, seoname):
    if not current_user.has_role("admin"):
	abort(403)
    id = decodehash(id)
    if not id:
	abort(404)
    p = events.Place.query.filter_by(id=id).first()
    if p is None:
	abort(404)
    if p.seoname != seoname:
	return redirect(p.url())
    form = EventForm(obj=p)
    if form.validate_on_submit():
        form.populate_obj(p)
        p.save()
        return redirect(p.url())
    return render_template('place-edit.min.html', active='place edit', place=p, form=form)

# search events view
@app.route("/search/events/date/<year>/<month>/<day>/")
def search_events_by_date(year, month, day):
    s = datetime(int(year), int(month), int(day), 0, 0)
    e = datetime(int(year), int(month), int(day), 23, 59)
    ev = events.Event.query.filter(events.Event.date.between(s, e))
    return render_template('search.min.html', active='search', events=ev)

# search events view
@app.route("/search/events/place/<place>/")
def search_events_by_place(place):
    e = events.Event.query.filter(events.Event.place.any(events.Place.seoname == place))
    return render_template('search.min.html', active='search', events=e)

# Submit event view
#@users.login_manager.user_loader
@app.route("/event/submit/", methods=['GET', 'POST'])
def submit_event():
    if request.method == 'GET':
	if not current_user.is_authenticated():
	    return redirect(url_for('user_create')+"?next="+url_for('submit_event'))
    	return render_template('submit_event.min.html')
    if request.method == 'POST':
	name        = request.form['event_name']
	description = request.form['event_description']
	place = request.form['event_place']
	date = request.form['event_date']
	e = events.insert(name, description, place, date)
	return redirect(e.url())
	#e.place   = request.form['event_place']
	#e.datestr    = request.form['event_date']
	#e.date    = datetime.strptime(request.form['event_date'], '%d/%m/%Y %H:%M')
	return '<html><body>thank you! <strong style="color:red;">' + name + '</strong> had been added and waiting for approval. click <a href="/">here</a> to return to the kipod site.</body></html>'

@app.errorhandler(404)
def page_not_found(error):
    return render_template('404.min.html')

@app.errorhandler(403)
def page_forbidden(error):
    return render_template('403.min.html')

@app.route('/favicon.ico')
@app.route('/humans.txt')
@app.route('/robots.txt')
@app.route('/sitemap.xml')
def static_from_root():
    return send_from_directory(app.static_folder, request.path[1:])

# main
if __name__ == "__main__":
    hhfolder = os.path.dirname(os.path.abspath(__file__))
    # Custom jinja2 folder (Default - templates)
    my_loader = jinja2.ChoiceLoader([
	app.jinja_loader,
	jinja2.FileSystemLoader([hhfolder+'/build',]),
    ])
    app.jinja_loader = my_loader
    # If you enable debug support the server will reload itself on code changes, 
    # and it will also provide you with a helpful debugger if things go wrong.
    app.debug = True
    # start server
    app.run(host='0.0.0.0')