Esempio n. 1
0
                    'is_successful': True
                }
        return '', 204

    def post(self, action=None):
        parser.add_argument('token', location='args')
        args = parser.parse_args()
        data = request.values
        s = Serializer(Config.SECRET_KEY)
        try:
            email = s.loads(args.get('token'),
                            salt="recover-key",
                            max_age=3600)
        except:
            return {'message': 'Invalid token', 'is_successful': False}
        user = User.query.filter_by(email=email).first()
        if user:
            user.set_password(data.get('password', None))
            user.save()
            return {
                'message': 'User updated successfully',
                'is_successful': True
            }
        else:
            return {'message': 'No user found', 'is_successful': False}


api.add_resource(AuthApi, '/auth', '/auth/<action>')

api.add_resource(PublicAuthApi, '/public-auth', '/public-auth/<action>')
Esempio n. 2
0
    @auth.login_required
    def delete(self, user_scope_mapping_id=None):
        if not g.user.can.delete.user_scope_mapping_id(user_scope_mapping_id):
            return abort(401)
        user_scope_mapping = UserScopeMapping.query.filter_by(
            id=user_scope_mapping_id).first()
        if not user_scope_mapping:
            return {
                'message': 'User scope mapping does not exist',
                'is_successful': False
            }
        if len(user_scope_mapping.users) > 1 and user_scope_mapping:
            return {
                'message':
                'Cannot delete user_scope_mapping. Remove other users first.',
                'is_successful': False
            }
        else:
            user_scope_mapping.delete()
            return {
                'message': 'Scope deleted successfully.',
                'is_successful': True
            }


api.add_resource(UserScopeMappingApi, '/userScopeMappings',
                 '/userScopeMappings/<int:user_scope_mapping_id>',
                 '/userScopeMappings/byScopeId/<int:scope_id>',
                 '/userScopeMappings/byCategoryId/<int:category_id>',
                 '/userScopeMappings/byUserId/<int:user_id>')
Esempio n. 3
0
        return {
            'message': 'Scope added successfully.',
            'scope_id': scope.id
        }

    @auth.login_required
    def delete(self, scope_id=None):
        if not g.user.can.delete.scope_id(scope_id):
            return abort(401)
        scope = Scope.query.filter_by(id=scope_id).first()
        if not scope:
            return {
                'message': 'Scope does not exist',
                'is_successful': False
            }
        if scope.children or scope.user_scope_mappings:
            return {
                'message': ('Cannot delete scope. Please remove all attached roles and ', 
                            'children scopes first.')
            }
        else:
            scope.delete()
            return {
                'message': 'Scope deleted successfully.'
            }

api.add_resource(ScopesApi,
                 '/scopes',
                 '/scopes/<int:scope_id>')
Esempio n. 4
0
            'message': 'Category added successfully.',
            'category_id': category.id,
            'is_successful': True
        }

    @auth.login_required
    def delete(self, category_id=None):
        if not g.user.can.delete.category_id(category_id):
            return abort(401)
        category = Category.query.filter_by(id=category_id).first()
        if not category:
            return {
                'message': 'Category does not exist',
                'is_successful': False
            }
        if category.scopes:
            return {
                'message':
                'Cannot delete category. Please remove all attached scopes first.',
                'is_successful': False
            }
        else:
            category.delete()
            return {
                'message': 'Category deleted successfully.',
                'is_successful': True
            }


api.add_resource(CategoryApi, '/categories', '/categories/<int:category_id>')
Esempio n. 5
0
        send_email('*****@*****.**', 'Please Verify Your Email', user.email, email_body)

        return {     
            'message': 'User added successfully.',
            'user_id': user.id,
            'is_successful': True
        }

    @auth.login_required
    def delete(self, user_id):
        if not g.user.can.delete.user_id(user_id):
            return abort(401)
        user = User.query.filter_by(id=user_id).first()
        if user and not user.is_deleted:
            user.roles = []
            user.is_deleted = True
            db.session.commit()
            return {
                'message': 'User deleted successfully.',
                'is_successful': True
            }
        else:
            return {
                'message': 'User id: {} is not found'.format(user_id)
            }


api.add_resource(UserApi,
                 '/users',
                 '/user/<int:user_id>')
Esempio n. 6
0
            }
        app_context.application_id = data.get('application_id', None)
        db.session.add(app_context)
        db.session.commit()

        return {
            'message': 'AppContext added successfully.',
            'app_context_id': app_context.id,
            'is_successful': True
        }

    @auth.login_required
    def delete(self, app_context_id=None):
        if not g.user.is_root_admin:
            return abort(401)
        app_context = AppContext.query.filter_by(id=app_context_id).first()
        if not app_context:
            return {
                'message': 'App context does not exist',
                'is_successful': False
            }
        app_context.delete()
        return {
            'message': 'AppContext deleted successfully.',
            'is_successful': True
        }


api.add_resource(AppContextApi, '/appContexts',
                 '/appContexts/<int:app_context_id>')