feat: add cron urls for user verification

.gitignore

@@ -25,7 +25,7 @@ example_project/static/
 codeforlife_portal.egg-info
 *.egg-info/
 build/
-.vscode/
+# .vscode/
 dist/
 node_modules
 

.vscode/launch.json

@@ -0,0 +1,20 @@
+{
+  // Use IntelliSense to learn about possible attributes.
+  // Hover to view descriptions of existing attributes.
+  // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Django Server",
+      "type": "python",
+      "request": "launch",
+      "django": true,
+      "justMyCode": false,
+      "program": "${workspaceFolder}/example_project/manage.py",
+      "args": [
+        "runserver",
+        "localhost:8000"
+      ]
+    }
+  ]
+}

cfl_common/common/helpers/emails.py

@@ -76,9 +76,12 @@ def generate_token(user, new_email="", preverified=False):
         user.userprofile.is_verified = preverified
         user.userprofile.save()
 
+    return generate_token_for_email(user.email, new_email)
+
+def generate_token_for_email(email: str, new_email: str = ""):
     return jwt.encode(
         {
-            "email": user.email,
+            "email": email,
             "new_email": new_email,
             "email_verification_token": uuid4().hex[:30],
             "expires": (timezone.now() + datetime.timedelta(hours=1)).timestamp(),

portal/mixins/__init__.py

@@ -0,0 +1 @@
+from .cron_mixin import CronMixin

portal/mixins/cron_mixin.py

@@ -0,0 +1,12 @@
+from rest_framework.request import Request
+from rest_framework.response import Response
+
+from ..permissions import IsCronRequestFromGoogle
+
+
+class CronMixin:
+    http_method_names = ["get"]
+    permission_classes = [IsCronRequestFromGoogle]
+
+    def get(self, request: Request) -> Response:
+        raise NotImplementedError()

portal/permissions/__init__.py

@@ -0,0 +1 @@
+from .is_cron_request_from_google import IsCronRequestFromGoogle

portal/permissions/is_cron_request_from_google.py

@@ -0,0 +1,14 @@
+from django.conf import settings
+from rest_framework.permissions import BasePermission
+from rest_framework.request import Request
+from rest_framework.views import View
+
+
+class IsCronRequestFromGoogle(BasePermission):
+    """
+    Validate that requests to your cron URLs are coming from App Engine and not from another source.
+    https://cloud.google.com/appengine/docs/flexible/scheduling-jobs-with-cron-yaml#securing_urls_for_cron
+    """
+
+    def has_permission(self, request: Request, view: View):
+        return settings.DEBUG or request.META.get("HTTP_X_APPENGINE_CRON") == "true"

portal/tests/test_views.py

@@ -2,11 +2,12 @@
 import io
 import json
 from datetime import timedelta, date
+from unittest.mock import patch, Mock, ANY
 
 import PyPDF2
 import pytest
 from aimmo.models import Game
-from common.models import Teacher, UserSession, Student, Class, DailyActivity, School
+from common.models import Teacher, UserSession, Student, Class, DailyActivity, School, UserProfile
 from common.tests.utils.classes import create_class_directly
 from common.tests.utils.organisation import create_organisation_directly, join_teacher_to_organisation
 from common.tests.utils.student import (
@@ -15,13 +16,15 @@
     create_independent_student_directly,
 )
 from common.tests.utils.teacher import signup_teacher_directly
+from cfl_common.common.helpers.emails import NOTIFICATION_EMAIL
 from django.contrib.auth.models import User
 from django.test import Client, TestCase
 from django.urls import reverse
 from django.utils import timezone
 from game.models import Level
 from game.tests.utils.attempt import create_attempt
 from game.tests.utils.level import create_save_level
+from rest_framework.test import APIClient, APITestCase
 
 from portal.templatetags.app_tags import is_logged_in_as_admin_teacher
 
@@ -706,3 +709,166 @@ def test_logged_in_as_admin_check(self):
         assert not is_logged_in_as_admin_teacher(teacher2.new_user)
 
         c.logout()
+
+
+# CRON view tests
+
+
+class CronTestClient(APIClient):
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs, HTTP_X_APPENGINE_CRON="true")
+
+    def generic(
+        self,
+        method,
+        path,
+        data="",
+        content_type="application/octet-stream",
+        secure=False,
+        **extra,
+    ):
+        wsgi_response = super().generic(method, path, data, content_type, secure, **extra)
+        assert 200 <= wsgi_response.status_code < 300, f"Response has error status code: {wsgi_response.status_code}"
+
+        return wsgi_response
+
+
+class CronTestCase(APITestCase):
+    client_class = CronTestClient
+
+
+class TestUser(CronTestCase):
+    # TODO: use fixtures
+    def setUp(self):
+        self.user = User.objects.create_user(
+            username="johndoe",
+            email="[email protected]",
+            password="password",
+            first_name="John",
+            last_name="Doe",
+        )
+        self.user_profile = UserProfile.objects.create(user=self.user)
+
+    def send_verify_email_reminder(
+        self,
+        days: int,
+        is_verified: bool,
+        view_name: str,
+        send_email: Mock,
+        assert_called: bool,
+    ):
+        self.user.date_joined = timezone.now() - timedelta(days=days, hours=12)
+        self.user.save()
+        self.user_profile.is_verified = is_verified
+        self.user_profile.save()
+
+        self.client.get(reverse(view_name))
+
+        if assert_called:
+            send_email.assert_called_once_with(
+                sender=NOTIFICATION_EMAIL,
+                recipients=[self.user.email],
+                subject=ANY,
+                title=ANY,
+                text_content=ANY,
+            )
+        else:
+            send_email.assert_not_called()
+        send_email.reset_mock()
+
+    @patch("cfl_common.common.helpers.emails.send_email")
+    def test_first_verify_email_reminder_view(self, send_email: Mock):
+        self.send_verify_email_reminder(
+            days=6,
+            is_verified=False,
+            view_name="first-verify-email-reminder",
+            send_email=send_email,
+            assert_called=False,
+        )
+        self.send_verify_email_reminder(
+            days=7,
+            is_verified=False,
+            view_name="first-verify-email-reminder",
+            send_email=send_email,
+            assert_called=True,
+        )
+        self.send_verify_email_reminder(
+            days=7,
+            is_verified=True,
+            view_name="first-verify-email-reminder",
+            send_email=send_email,
+            assert_called=False,
+        )
+        self.send_verify_email_reminder(
+            days=8,
+            is_verified=False,
+            view_name="first-verify-email-reminder",
+            send_email=send_email,
+            assert_called=False,
+        )
+
+    @patch("cfl_common.common.helpers.emails.send_email")
+    def test_second_verify_email_reminder_view(self, send_email: Mock):
+        self.send_verify_email_reminder(
+            days=13,
+            is_verified=False,
+            view_name="second-verify-email-reminder",
+            send_email=send_email,
+            assert_called=False,
+        )
+        self.send_verify_email_reminder(
+            days=14,
+            is_verified=False,
+            view_name="second-verify-email-reminder",
+            send_email=send_email,
+            assert_called=True,
+        )
+        self.send_verify_email_reminder(
+            days=14,
+            is_verified=True,
+            view_name="second-verify-email-reminder",
+            send_email=send_email,
+            assert_called=False,
+        )
+        self.send_verify_email_reminder(
+            days=15,
+            is_verified=False,
+            view_name="second-verify-email-reminder",
+            send_email=send_email,
+            assert_called=False,
+        )
+
+    def test_delete_unverified_accounts_view(self):
+        def delete_unverified_users(
+            days: int,
+            is_verified: bool,
+            assert_exists: bool,
+        ):
+            self.user.date_joined = timezone.now() - timedelta(days=days, hours=12)
+            self.user.save()
+            self.user_profile.is_verified = is_verified
+
+            self.client.get(reverse("delete-unverified-accounts"))
+
+            (self.assertTrue if assert_exists else self.assertFalse)(User.objects.filter(id=self.user.id).exists())
+
+        delete_unverified_users(
+            days=18,
+            is_verified=False,
+            assert_exists=True,
+        )
+        delete_unverified_users(
+            days=19,
+            is_verified=False,
+            assert_exists=False,
+        )
+        delete_unverified_users(
+            days=19,
+            is_verified=True,
+            assert_exists=True,
+        )
+        delete_unverified_users(
+            days=20,
+            is_verified=False,
+            assert_exists=True,
+        )

portal/urls.py

@@ -1,6 +1,7 @@
 from aimmo.urls import HOMEPAGE_REGEX
 from common.permissions import teacher_verified
 from django.conf.urls import include, url
+from django.urls import path
 from django.http import HttpResponse
 from django.views.generic import RedirectView
 from django.views.generic.base import TemplateView
@@ -88,6 +89,7 @@
     teacher_download_csv,
     teacher_view_class,
 )
+from portal.views import cron
 
 from portal.views.two_factor.core import CustomSetupView
 from portal.views.two_factor.profile import CustomDisableView
@@ -105,6 +107,35 @@
 
 
 urlpatterns = [
+    path(
+        "cron/",
+        include(
+            [
+                path(
+                    "user/",
+                    include(
+                        [
+                            path(
+                                "unverified/send-first-reminder/",
+                                cron.user.FirstVerifyEmailReminderView.as_view(),
+                                name="first-verify-email-reminder",
+                            ),
+                            path(
+                                "unverified/send-second-reminder/",
+                                cron.user.SecondVerifyEmailReminderView.as_view(),
+                                name="second-verify-email-reminder",
+                            ),
+                            path(
+                                "unverified/delete/",
+                                cron.user.DeleteUnverifiedAccounts.as_view(),
+                                name="delete-unverified-accounts",
+                            ),
+                        ]
+                    ),
+                ),
+            ]
+        ),
+    ),
     url(HOMEPAGE_REGEX, include("aimmo.urls")),
     url(r"^teach/kurono/dashboard/$", TeacherAimmoDashboard.as_view(), name="teacher_aimmo_dashboard"),
     url(r"^play/kurono/dashboard/$", StudentAimmoDashboard.as_view(), name="student_aimmo_dashboard"),

portal/views/cron/__init__.py

@@ -0,0 +1 @@
+from .user import *