def change_user_settings(username):
"""Handle user settings change."""
# Make sure the logged in user is the authorized user to view this page.
if "username" not in session or username != session['username']:
raise Unauthorized()
user = User.query.filter_by(username=username).first()
form = UserEditForm(obj=user)
if form.validate_on_submit():
user_auth = User.authenticate(form.username.data, form.password.data)
if user_auth:
user.username = form.username.data
user.email = form.email.data
user.first_name = form.first_name.data
user.last_name = form.last_name.data
user.img_url = form.img_url.data or None
db.session.commit()
flash("Update Successful.", "success")
return redirect(f'/users/{user.username}')
else:
flash("Incorrect password.", "danger")
return redirect(f'/users/{user.username}/settings')
return render_template('/user/settings.html', form=form)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
if not User.authenticate(g.user.username, form.password.data):
flash("Profile update unsuccessful.", "danger")
return render_template("users/edit.html", form=form)
g.user.username = form.username.data
g.user.email = form.email.data
g.user.image_url = (form.image_url.data or DEFAULT_IMAGE_URL)
g.user.header_image_url = (form.header_image_url.data
or DEFAULT_HEADER_IMAGE_URL)
g.user.bio = form.bio.data
g.user.location = form.location.data
db.session.commit()
flash(f"{g.user.username}'s information has been successfully updated",
"success")
return redirect(f"/users/{g.user.id}")
else:
return render_template("users/edit.html", form=form)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect('/')
user = g.user
update_user_form = UserEditForm(obj=user)
if update_user_form.validate_on_submit(): #if form okay (it's a POST)
if User.authenticate(
g.user.username,
update_user_form.password.data): #if user authenticated ok
user.username = update_user_form.username.data
user.email = update_user_form.email.data
user.image_url = update_user_form.image_url.data or "/static/images/default-pic.png"
user.header_image_url = update_user_form.header_image_url.data or "/static/images/warbler-hero.jpg"
user.bio = update_user_form.bio.data
db.session.commit()
return redirect(f'/users/{g.user.id}')
else:
flash("Incorrect password, please try again.", "danger")
return render_template('/users/edit.html',
form=update_user_form,
user_id=user.id) #this one actually shows the page
def signup():
"""Handle user signup.
Create new user and add to DB. Redirect to home page.
If form not valid, present form.
If there already is a user with that username: flash message
and re-present form.
"""
if CURR_USER_KEY in session:
del session[CURR_USER_KEY]
form = UserEditForm()
if form.validate_on_submit():
try:
user = User.signup(username=form.username.data,
password=form.password.data,
email=form.email.data,
country=form.country.data
or User.country.default.arg)
db.session.commit()
except IntegrityError as e:
flash("Username already taken", 'danger')
return render_template('users/signup.html', form=form)
do_login(user)
return redirect("/headlines")
else:
return render_template('users/signup.html', form=form)
def profile():
"""Update profile for current user."""
form = UserEditForm(obj=g.user)
user = User.query.get(g.user.id)
if form.validate_on_submit():
if User.authenticate(user.username, form.password.data):
edit_attrs = {
'email':
form.email.data,
'username':
form.username.data,
'image_url':
form.image_url.data or User.image_url.default.arg,
'header_image_url':
form.header_image_url.data
or User.header_image_url.default.arg,
'bio':
form.bio.data,
}
g.user.edit_profile(**edit_attrs)
db.session.commit()
flash("Profile edited!", "success")
return redirect(url_for('users_show', user_id=user.id))
else:
flash("Invalid password", "danger")
return redirect(url_for('homepage'))
else:
return render_template('users/edit.html', form=form, user=g.user)
def profile():
"""Update profile for current user."""
# IMPLEMENT THIS
if not g.user:
flash('Access unauthorized.', 'danger')
return redirect('/')
else:
user = User.query.get_or_404(session[CURR_USER_KEY])
form = UserEditForm(obj=user)
if form.validate_on_submit():
if User.authenticate(user.username, form.password.data):
User.update(user, form)
return redirect(f'/users/{user.id}')
else:
form.password.errors = ['Incorrect Password']
return render_template('users/edit.html', form=form)
return render_template('users/edit.html', form=form)
def profile_edit():
""" Renders form to edit the profile or process the information """
if not 'CURR_USER_KEY' in session:
flash("Unauthorized access. Account needed to edit profile.", "danger")
if 'GUEST_GEOCODE' in session:
return redirect("/search")
else:
return redirect("/")
form = UserEditForm(obj=g.user, prefix='form-user-edit-')
if form.validate_on_submit():
user = User.login(form.email.data, form.password.data)
if (user.id == g.user.id):
user.first_name = form.first_name.data
user.display_name = form.display_name.data
user.profile_pic = form.profile_pic.data
user.lat = form.lat.data
user.long = form.long.data
user.privacy = form.privacy.data
user.seeking_project = form.seeking_project.data
user.seeking_help = form.seeking_help.data
db.session.commit()
flash("Profile edited successfully.", "success")
return redirect("/search")
else:
flash("Incorrect password. Profile changes not made", "danger")
return redirect("/profile/edit")
return render_template("profile-edit.html", form=form)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect(url_for('homepage'))
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
if User.authenticate(g.user.username, form.password.data):
g.user.username = form.username.data
g.user.email = form.email.data
g.user.image_url = form.image_url.data
g.user.header_image_url = form.header_image_url.data
g.user.bio = form.bio.data
g.user.location = form.location.data
db.session.add(g.user)
db.session.commit()
flash(f"{g.user.username} successfully edited")
return redirect(url_for('homepage'))
else:
flash("Incorrect Password", "danger")
return render_template("/users/edit.html",
form=form,
user_id=g.user.id)
else:
return render_template("/users/edit.html",
form=form,
user_id=g.user.id)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
user = User.authenticate(form.username.data, form.password.data)
if not user:
flash('Incorrect password provided. Profile update unsuccessful.', 'danger')
return redirect('/')
else:
user.username = form.username.data
user.email = form.email.data
user.image_url = form.image_url.data
user.header_image_url = form.header_image_url.data
user.bio = form.bio.data
db.session.add(user)
db.session.commit()
flash('Successfully updated your profile!', 'success')
return redirect(f'/users/{user.id}')
else:
return render_template('users/edit.html', form=form)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
if not User.authenticate(g.user.username, form.data["password"]):
flash("Invalid password.", "danger")
return render_template('/users/edit.html', form=form)
# data = {k:v for k,v in form.data.items() if k != "csrf_token"}
# data["image_url"] = data["image_url"] or None
# data["header_image_url"] = data["header_image_url"] or None
g.user.username = form.data["username"]
g.user.email = form.data["email"]
g.user.image_url = form.data["image_url"] or None
g.user.header_image_url = form.data["header_image_url"] or None
g.user.bio = form.data["bio"]
db.session.commit()
flash("Profile edited!", "success")
return redirect(f'/users/{g.user.id}')
return render_template('/users/edit.html', form=form)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
else:
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
user = User.authenticate(form.username.data, form.password.data)
if user:
flash(f"Hello, {user.username}!",
"you have updated your profile!")
user.username = form.username.data,
user.email = form.email.data,
user.image_url = form.image_url.data
user.header_image_url = form.header_image_url.data
user.location = form.location.data
user.bio = form.bio.data
db.session.commit()
return redirect(f"/users/{user.id}")
else:
flash("Invalid credentials.", 'danger')
return redirect("/")
return render_template('users/edit.html', form=form)
def profile():
"""Update profile for current user."""
# if user is logged in
if g.user:
# if they subbmited the form
# user = User.query.get_or_404(session[CURR_USER_KEY])
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
# validate password
if User.authenticate(g.user.username, request.form["password"]):
g.user.username = request.form["username"]
g.user.email = request.form["email"]
g.user.image_url = request.form["image_url"] or None
g.user.header_image_url = request.form[
"header_image_url"] or None
g.user.bio = request.form["bio"] or None
db.session.commit()
flash("Sucessfully updated", "success")
return redirect(f"users/{g.user.id}")
else:
flash("Wrong password!", "danger")
return redirect("/users/profile")
else:
return render_template("/users/edit.html",
form=form,
user_id=g.user.id)
else:
flash('Please login', "info")
redirect("/login")
def profile():
"""Update profile for current user."""
# IMPLEMENT THIS
if CURR_USER_KEY not in session:
raise Unauthorized()
user = g.user
form = UserEditForm(obj=user)
if form.validate_on_submit():
if User.authenticate(user.username, form.password.data):
user.username = form.username.data
user.email = form.email.data
user.image_url = form.image_url.data
user.header_image_url = form.header_image_url.data or "/static/images/warbler-hero.jpg"
user.bio = form.bio.data
db.session.commit()
return redirect(f"/users/{user.id}")
flash("Wrong password.", 'danger')
return render_template('users/edit.html', form=form, user_id=user.id)
def edit_profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
if User.authenticate(g.user.username, form.password.data):
try:
g.user.username = form.username.data
g.user.email = form.email.data
g.user.image_url = form.image_url.data
g.user.header_image_url = form.header_image_url.data
g.user.bio = form.bio.data
db.session.commit()
return redirect(f"/users/{g.user.id}")
except IntegrityError:
flash('Invalid form field', "danger")
else:
flash('Invalid password.', "danger")
return render_template('users/edit.html', form=form, user=g.user)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
user = User.check_hashed_pw_match(g.user.password, form.password.data)
if not user:
flash("Invalid username/password.", "danger")
return render_template('users/edit.html', form=form)
g.user.username = form.username.data
g.user.email = form.email.data
g.user.image_url = form.image_url.data or User.image_url.default.arg
g.user.header_image_url = form.header_image_url.data
g.user.bio = form.bio.data
g.user.location = form.location.data
try:
db.session.commit()
except IntegrityError:
db.session.rollback()
flash("Username/Email already taken", 'danger')
return render_template('users/edit.html', form=form)
return redirect(f"/users/{g.user.id}")
return render_template("/users/edit.html", form=form)
def edit_profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
form = UserEditForm()
if form.validate_on_submit():
if not User.authenticate(g.user.username, form.password.data):
flash('Password Incorrect Try Again', 'warning')
return redirect(url_for('homepage'))
form = user_form_defaults_logic(form)
form.populate_obj(g.user)
try:
db.session.add(g.user)
db.session.commit()
except IntegrityError as e:
db.session.rollback()
flash(e.message)
return redirect(url_for('edit_profile'))
flash('Profile Updated', 'success')
return redirect(url_for('users_show', user_id=g.user.id))
form = populate_user_edit_form(form, g.user)
return render_template('users/edit.html', form=form)
def edit_user_details():
"""This view function allows a user to edit their information."""
if not g.user:
flash("Access Unauthorized", "danger")
return redirect("/")
user = g.user
form = UserEditForm(obj=user)
if form.validate_on_submit():
# Make sure the user editing the profile has the right credentials
authenticated = User.authenticate(form.username.data,
form.password.data)
if authenticated:
user.first_name = form.first_name.data
user.last_name = form.last_name.data
user.username = form.username.data
user.email = form.email.data
user.image_url = form.image_url.data
user.header_url = form.header_url.data
user.bio = form.bio.data
db.session.commit()
flash("Profile succesfully updated!", "success")
return redirect(f"/users/{user.id}")
flash("Wrong password, try again", "danger")
return render_template("/users/user_edit.html", form=form, user_id=user.id)
def edit_user(user_id):
"""Shows user profile page"""
form = UserEditForm()
user = User.query.get_or_404(user_id)
if g.user != user:
flash("Not authorized to view this page.", "danger")
return redirect(url_for("homepage"))
if form.validate_on_submit():
user = User.authenticate(user.username, form.password.data)
if user:
try:
user.edit(
form.username.data,
form.email.data,
form.image_url.data,
)
except (IntegrityError, InvalidRequestError) as e:
db.session.rollback()
flash("Username already taken", "danger")
return redirect(url_for("edit_user", user_id=g.user.id))
flash("Profile updates successful.", "success")
return redirect(url_for("user_profile", user_id=user.id))
else:
flash("Password incorrect.", "danger")
return redirect(url_for("edit_user", user_id=g.user.id))
return render_template("users/edit.html", form=form, user=user)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
# return redirect("/")
return redirect(url_for('homepage'))
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
user = User.authenticate(g.user.username, form.password.data)
if not user:
flash(f"Incorrect Password!", "danger")
# return redirect("/")
return redirect(url_for('homepage'))
user.username = form.username.data
user.email = form.email.data
user.image_url = form.image_url.data
user.header_image_url = form.header_image_url.data
user.bio = form.bio.data
user.location = form.location.data
db.session.add(user)
db.session.commit()
# return redirect(f'/users/{user.id}')
return redirect(url_for('show_user', user_id=user.id))
else:
return render_template('/users/edit.html', form=form)
def user_profile_view():
"""
User profile page:
-Shows user information
-form for updating user info; could consider patch request via ajax
-list of articles user has saved/bookmarked with keywords extracted
(These article keywords are used for recommendation)
"""
form = UserEditForm(username=g.user.username)
if form.validate_on_submit():
user = User.update(g.user.username, form.username.data,
form.password.data)
if user:
flash("Username updated.", "success")
return redirect(url_for('user_profile_view'))
bookmarks = g.user.articles
categories = Category.query.all()
bookmark_map = newsmart.get_bookmark_url_to_id()
return render_template(
"user_profile.html",
form=form,
submit_button="Update User",
bookmarks=bookmarks,
bookmark_map=bookmark_map,
category_objs=categories,
categories=NEWS_CATEGORIES,
)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
user = g.user
form = UserEditForm(obj=user)
if form.validate_on_submit():
authenticated = User.authenticate(form.username.data,
form.password.data)
if authenticated:
user.username = form.username.data
user.email = form.email.data
user.image_url = form.image_url.data
user.header_image_url = form.header_image_url.data
user.bio = form.bio.data
db.session.commit()
return redirect(f"/users/{user.id}")
flash("Wrong password, try again!", 'danger')
return render_template('users/edit.html', form=form, user_id=user.id)
def profile():
"""Update profile for current user."""
# if not same user, deny access
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
user = User.authenticate(g.user.username, form.password.data)
if user:
user.username = form.username.data
user.email = form.email.data
user.image_url = form.image_url.data
user.header_image_url = form.header_image_url.data
user.bio = form.bio.data
db.session.commit()
return redirect(f'/users/{g.user.id}')
else:
flash("Invalid credentials.", 'danger')
return redirect("/")
return render_template('users/edit.html', form=form)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
curr_username = g.user.username
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
if User.authenticate(curr_username, form.password.data):
g.user.username = form.username.data
g.user.email = form.email.data
g.user.image_url = (
form.image_url.data or
DEFAULT_IMAGE_URL
)
g.user.header_image_url = (
form.header_image_url.data or
DEFAULT_HEADER_IMAGE_URL
)
g.user.bio = form.bio.data
g.user.location = form.location.data
db.session.commit()
flash("User has been edited!", "success")
return redirect(f"/users/{g.user.id}")
else:
flash("Incorrect password", "danger")
return redirect("/")
return render_template('users/edit.html', form=form)
def edit_user(user_id):
"""handle form submission for updating user"""
if not g.user:
flash("Please login.", "error")
return redirect("/")
form = UserEditForm()
username = form.username.data
db.session.commit()
user = g.user
if form.validate_on_submit():
if User.authenticate(user.username, form.password.data):
user.username = form.username.data
db.session.commit()
flash(f"Your new username is {user.username}.")
return redirect(f"/users/{user.id}")
else:
flash("Wrong password, please try again.", 'danger')
return redirect(f'/users/{user.id}/edit')
def edit_profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
if User.authenticate(g.user.username, form.static_password.data):
form.populate_obj(g.user)
try:
db.session.commit()
return redirect(f"/users/{g.user.id}")
except IntegrityError:
db.session.rollback()
flash("That username or email is already taken")
return render_template('users/edit.html', form=form,
user_id=g.user.id)
flash("Wrong password, please try again.", 'danger')
return render_template('users/edit.html', form=form, user_id=g.user.id)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
form = UserEditForm(obj=g.user)
if form.validate_on_submit():
g.user.email = form.email.data
g.user.image_url = form.image_url.data
g.user.location = form.location.data
g.user.bio = form.bio.data
g.user.header_image_url = form.header_image_url.data
user = User.authenticate(g.user.username, form.password.data)
g.user.username = form.username.data
if not user:
flash("Please enter correct user password", "danger")
return redirect('/users/profile')
db.session.commit()
return redirect(f"/users/{g.user.id}")
return render_template('users/edit.html', form=form)
def profile():
"""Update profile for current user."""
# IMPLEMENT THIS
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
user = User.query.get_or_404(session[CURR_USER_KEY])
form = UserEditForm(obj=user)
if form.validate_on_submit():
# check password valid
auth_user = User.authenticate(form.username.data, form.password.data)
if not auth_user:
# if password not valid flash message
flash("Invalid Password", "danger")
return redirect("/")
user.email = form.email.data
user.image_url = form.image_url.data
user.header_image_url = form.header_image_url.data
user.bio = form.bio.data
user.location = form.location.data
# update user in db
db.session.add(user)
db.session.commit()
flash("User Profile Updated", "success")
return redirect(f"/users/{user.id}")
return render_template("users/edit.html",
form=form) # templates/users/edit.html
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
edit_user = User.query.get_or_404(g.user.id)
form = UserEditForm(obj=edit_user)
if form.validate_on_submit():
user = User.authenticate(username=g.user.username,
password=form.password.data)
if user:
edit_user.username = form.username.data
edit_user.username = form.username.data
edit_user.email = form.email.data
edit_user.img_url = form.image_url.data
edit_user.header_url = form.image_url.data
edit_user.bio = form.bio.data
sess.commit()
else:
flash("Incorrect Password to Edit Profile.")
return render_template("users/edit.html", form=form)
return redirect(f'/users/{g.user.id}')
else:
return render_template("users/edit.html", form=form)
def profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
user_key = session['curr_user']
user = User.query.get_or_404(user_key)
form = UserEditForm(obj=user)
if form.validate_on_submit():
user.username = form.username.data
user.email = form.email.data
user.image_url = form.image_url.data
user.header_image_url = form.header_image_url.data
user.bio = form.bio.data
user = User.authenticate(user.username, form.password.data)
if user:
db.session.commit()
return redirect(f'/users/{g.user.id}')
flash('password does not match', 'danger')
return render_template("/users/edit.html", form=form, user=user)
def edit_profile():
"""Update profile for current user."""
if not g.user:
flash("Access unauthorized.", "danger")
return redirect("/")
user = g.user
form = UserEditForm(obj=user)
if form.validate_on_submit():
if User.authenticate(user.username, form.password.data):
user.username = form.username.data
user.email = form.email.data
user.image_url = form.image_url.data or "/static/images/default-pic.png"
user.header_image_url = form.header_image_url.data or "/static/images/warbler-hero.jpg"
user.bio = form.bio.data
user.location = form.location.data
db.session.commit()
return redirect(f"/users/{user.id}")
flash("Wrong password, please try again.", 'danger')
return render_template('users/edit.html', form=form, user_id=user.id)
def me_edit():
form = UserEditForm(obj=current_user.profile)
if form.validate_on_submit():
current_user.profile.name = form.name.data
current_user.profile.bio = form.bio.data
db.session.commit()
return redirect(url_for('.me'))
return render_template('users/me_edit.html', user=current_user, form=form)
def user_add():
form = UserEditForm(request.form)
form.team_id.choices = [(1, u'管理'), (2, u'运维监控'), (3, u'信号采集'), (4, u'网络存储'), \
(5, u'机房运维'), (6, u'直播流运营')]
form.team_id.choices.insert(0, (0, u'- 指定团队 -'))
if form.validate_on_submit():
user = User(form.name.data, form.email.data, form.qq.data, form.mobile.data, form.password.data, \
form.team_id.data, form.active.data)
db.session.add(user)
db.session.commit()
return redirect(url_for('user_list'))
return render_template('user_edit.html', form=form)
def user_edit(id):
user = User.query.filter(User.id==id).first()
form = UserEditForm(request.form, user)
form.team_id.choices = [(1, u'管理'), (2, u'运维监控'), (3, u'信号采集'), (4, u'网络存储'), \
(5, u'机房运维'), (6, u'直播流运营')]
form.team_id.choices.insert(0, (0, u'- 指定团队 -'))
if form.validate_on_submit():
form.populate_obj(user)
if form.password.data != '':
user.set_password(form.password.data)
db.session.commit()
return redirect(url_for('user_list'))
return render_template('user_edit.html', form=form)
