d0863325a5
But for real, it's a real shitstorm in there.
- Added context by making the init go through a function
and not implicitly happen via imports
- Fixup all context and contextless function mixups
- splitup the models in sensible different files
- give the dump of view functions in views/__init__.py their own file
- add all routes via blueprints, not half of them
- move the slack notifications function and class to its own file,
no idea what it was doing in a views file in the first place.
70 lines
2.1 KiB
Python
70 lines
2.1 KiB
Python
from flask import (current_app, flash, redirect, request, session,
|
|
url_for, Blueprint)
|
|
from flask_login import login_user
|
|
from flask_oauthlib.client import OAuthException, OAuth
|
|
|
|
from models import User, db
|
|
|
|
oauth_bp = Blueprint("oauth_bp", __name__)
|
|
|
|
|
|
def zeus_login():
|
|
return current_app.zeus.authorize(
|
|
callback=url_for('oauth_bp.authorized', _external=True))
|
|
|
|
|
|
@oauth_bp.route('/login/zeus/authorized')
|
|
def authorized():
|
|
resp = current_app.zeus.authorized_response()
|
|
if resp is None:
|
|
return 'Access denied: reason=%s error=%s' % (
|
|
request.args['error'], request.args['error_description'])
|
|
if isinstance(resp, OAuthException):
|
|
return 'Access denied: %s' % resp.message + '<br>' + str(resp.data)
|
|
|
|
session['zeus_token'] = (resp['access_token'], '')
|
|
me = current_app.zeus.get('current_user/')
|
|
username = me.data.get('username', '').lower()
|
|
|
|
user = User.query.filter_by(username=username).first()
|
|
if len(username) > 0 and user:
|
|
return login_and_redirect_user(user)
|
|
elif len(username) > 0:
|
|
user = create_user(username)
|
|
return login_and_redirect_user(user)
|
|
|
|
flash("You're not allowed to enter, please contact a system administrator")
|
|
return redirect(url_for("general_bp.home"))
|
|
|
|
def init_oauth(app):
|
|
oauth = OAuth(app)
|
|
|
|
zeus = oauth.remote_app(
|
|
'zeus',
|
|
consumer_key=app.config['ZEUS_KEY'],
|
|
consumer_secret=app.config['ZEUS_SECRET'],
|
|
request_token_params={},
|
|
base_url='https://adams.ugent.be/oauth/api/',
|
|
access_token_method='POST',
|
|
access_token_url='https://adams.ugent.be/oauth/oauth2/token/',
|
|
authorize_url='https://adams.ugent.be/oauth/oauth2/authorize/')
|
|
|
|
@zeus.tokengetter
|
|
def get_zeus_oauth_token():
|
|
return session.get('zeus_token')
|
|
|
|
return zeus
|
|
|
|
|
|
def login_and_redirect_user(user):
|
|
login_user(user)
|
|
return redirect(url_for("general_bp.home"))
|
|
|
|
|
|
def create_user(username):
|
|
user = User()
|
|
user.configure(username, False, 1)
|
|
db.session.add(user)
|
|
db.session.commit()
|
|
return user
|