def json_changepass(self):
'''
The first char of 'code' stands for the different field.
'1' for user_name
'2' for user_email
'3' for user_pass
'4' for user_role
The seconde char of 'code' stands for different status.
'1' for invalide
'2' for already exists.
'''
# user_create_status = {'success': False, 'code': '00'} # Not used currently.
post_data = self.get_post_data()
check_usr_status = MUser.check_user(self.userinfo.uid,
post_data['rawpass'])
if check_usr_status == 1:
user_create_status = self.__check_valid_pass(post_data)
if not user_create_status['success']:
return json.dump(user_create_status, self)
form_pass = SumFormPass(self.request.arguments)
if form_pass.validate():
MUser.update_pass(self.userinfo.uid, post_data['user_pass'])
return json.dump(user_create_status, self)
return json.dump(user_create_status, self)
return False
def changepassword(self):
post_data = self.get_post_data()
uu = MUser.check_user(self.userinfo.uid, post_data['rawpass'])
if uu == 1:
MUser.update_pass(self.userinfo.uid, post_data['user_pass'])
self.redirect('/user/info')
else:
return False
def p_changepassword(self):
post_data = self.get_post_data()
usercheck = MUser.check_user(self.userinfo.uid, post_data['rawpass'])
if usercheck == 1:
MUser.update_pass(self.userinfo.uid, post_data['user_pass'])
output = {'changepass ': usercheck}
else:
output = {'changepass ': 0}
return json.dump(output, self)
def p_changeinfo(self):
'''
Change Infor via Ajax.
:return:
'''
post_data = self.get_post_data()
usercheck = MUser.check_user(self.userinfo.uid, post_data['rawpass'])
if usercheck == 1:
MUser.update_info(self.userinfo.uid, post_data['user_email'])
output = {'changeinfo ': usercheck}
else:
output = {'changeinfo ': 0}
return json.dump(output, self)
def changepassword(self):
post_data = self.get_post_data()
uu = MUser.check_user(self.userinfo.uid, post_data['rawpass'])
if uu == 1:
MUser.update_pass(self.userinfo.uid, post_data['user_pass'])
self.redirect('/user/info')
else:
kwd = {
'info': '原密码输入错误，请重新输入',
'link': '/user/changepass',
}
self.render('misc/html/404.html', kwd=kwd, userinfo=self.userinfo)
def changeinfo(self):
post_data = self.get_post_data()
uu = MUser.check_user(self.userinfo.uid, post_data['rawpass'])
if uu == 1:
MUser.update_info(self.userinfo.uid, post_data['user_email'])
self.redirect(('/user/info'))
else:
kwd = {
'info': '密码输入错误。',
'link': '/user/changeinfo',
}
self.render('misc/html/404.html', kwd=kwd, userinfo=self.userinfo)
def __change_info__(self):
'''
Change the user info
'''
post_data, def_dic = self.fetch_post_data()
usercheck_num = MUser.check_user(self.userinfo.uid, post_data['rawpass'])
if usercheck_num == 1:
MUser.update_info(self.userinfo.uid, post_data['user_email'], extinfo=def_dic)
self.redirect(('/user/info'))
else:
kwd = {
'info': '密码输入错误。',
'link': '/user/changeinfo',
}
self.render('misc/html/404.html',
kwd=kwd,
userinfo=self.userinfo)
class UserHandler(BaseHandler):
def initialize(self):
self.init()
self.muser = MUser()
self.user_name = self.get_current_user()
self.tmpl_dir = 'user'
self.tmpl_router = 'info'
def get(self, url_str):
url_arr = self.parse_url(url_str)
if url_str == 'regist':
if self.get_current_user():
self.redirect('/')
else:
self.__to_register__()
elif url_str == 'login':
self.to_login()
elif url_str == 'info':
self.show_info()
elif url_str == 'logout':
self.logout()
elif url_str == 'reset-password':
self.to_reset_password()
elif url_str == 'changepass':
self.changepass()
elif url_str == 'changeinfo':
self.change_info()
elif url_str == 'reset-passwd':
if self.gen_passwd():
pass
else:
self.redirect(config.site_url)
elif url_arr[0] == 'changerole':
self.change_role(url_arr[1])
elif url_str == 'find':
if self.tmpl_router == "user":
self.to_find()
else:
self.p_to_find()
elif url_arr[0] == 'find':
self.find(url_arr[1])
elif url_arr[0] == 'delete_user':
self.delete(url_arr[1])
def post(self, url_str):
url_arr = self.parse_url(url_str)
if url_str == 'regist':
self.register()
elif url_str == 'j_regist':
self.json_register()
elif url_str == 'j_changeinfo':
self.json_changeinfo()
elif url_str == 'j_changepass':
self.json_changepass()
elif url_str == 'login':
self.login()
elif url_str == 'changepass':
self.changepassword()
elif url_arr[0] == 'changepass':
self.p_changepassword()
elif url_str == 'changeinfo':
self.changeinfo()
elif url_arr[0] == 'changeinfo':
self.p_changeinfo()
elif url_str == 'find':
self.post_find()
elif url_arr[0] == 'find':
self.find(url_arr[1])
elif url_str == 'reset-password':
self.reset_password()
elif url_arr[0] == 'changerole':
self.changerole(url_arr[1])
@tornado.web.authenticated
def p_changepassword(self):
post_data = self.get_post_data()
uu = self.muser.check_user(self.user_name, post_data['rawpass'])
if uu == 1:
self.muser.update_pass(self.user_name, post_data['user_pass'])
output = {
'changepass ': uu,
}
else:
output = {
'changepass ': 0,
}
return json.dump(output, self)
@tornado.web.authenticated
def p_changeinfo(self):
post_data = self.get_post_data()
uu = self.muser.check_user(self.user_name, post_data['rawpass'])
if uu == 1:
self.muser.update_info(self.user_name, post_data['user_email'])
output = {
'changeinfo ': uu,
}
else:
output = {
'changeinfo ': 0,
}
return json.dump(output, self)
@tornado.web.authenticated
def changepassword(self):
post_data = self.get_post_data()
uu = self.muser.check_user(self.user_name, post_data['rawpass'])
if uu == 1:
self.muser.update_pass(self.user_name, post_data['user_pass'])
self.redirect('/user/info')
else:
return False
@tornado.web.authenticated
def changeinfo(self):
post_data = self.get_post_data()
uu = self.muser.check_user(self.user_name, post_data['rawpass'])
if uu == 1:
self.muser.update_info(self.user_name, post_data['user_email'])
self.redirect(('/user/info'))
else:
return False
@tornado.web.authenticated
def changerole(self, xg_username):
post_data = self.get_post_data()
if self.tmpl_router == "user":
self.muser.update_role(xg_username, post_data['role'])
self.redirect(('/user/info'))
else:
if self.muser.update_role(xg_username, post_data['role']):
output = {
'del_category ': 1,
}
else:
output = {
'del_category ': 0,
}
return json.dump(output, self)
@tornado.web.authenticated
def logout(self):
self.clear_all_cookies()
self.redirect('/')
@tornado.web.authenticated
def changepass(self):
self.render(
'{1}/{0}/changepass.html'.format(self.tmpl_router, self.tmpl_dir),
userinfo=self.userinfo,
)
@tornado.web.authenticated
def change_info(self):
self.render(
'{1}/{0}/changeinfo.html'.format(self.tmpl_router, self.tmpl_dir),
userinfo=self.userinfo,
)
@tornado.web.authenticated
def change_role(self, xg_username):
self.render('{1}/{0}/changerole.html'.format(self.tmpl_router,
self.tmpl_dir),
userinfo=self.muser.get_by_name(xg_username))
@tornado.web.authenticated
def show_info(self):
self.render(
'{1}/{0}/info.html'.format(self.tmpl_router, self.tmpl_dir),
userinfo=self.userinfo,
)
def to_reset_password(self):
self.render(
'user/{0}/reset_password.html'.format(self.tmpl_router),
userinfo=self.userinfo,
)
def to_login(self):
if self.get_current_user():
self.redirect('/')
else:
kwd = {
'pager': '',
}
self.render(
'user/{0}/login.html'.format(self.tmpl_router),
kwd=kwd,
userinfo=None,
)
def __check_valid(self, post_data):
user_create_status = {'success': False, 'code': '00'}
if tools.check_username_valid(post_data['user_name']) == False:
user_create_status['code'] = '11'
return user_create_status
elif tools.check_email_valid(post_data['user_email']) == False:
user_create_status['code'] = '21'
return user_create_status
elif self.muser.get_by_name(post_data['user_name']):
user_create_status['code'] = '12'
return user_create_status
elif self.muser.get_by_email(post_data['user_email']):
user_create_status['code'] = '22'
return user_create_status
user_create_status['success'] = True
print(user_create_status)
return user_create_status
def __check_valid_info(self, post_data):
user_create_status = {'success': False, 'code': '00'}
if tools.check_email_valid(post_data['user_email']) == False:
user_create_status['code'] = '21'
return user_create_status
elif self.muser.get_by_email(post_data['user_email']):
user_create_status['code'] = '22'
return user_create_status
user_create_status['success'] = True
return user_create_status
def __check_valid_pass(self, post_data):
user_create_status = {'success': False, 'code': '00'}
#if self.muser.check_user(self.user_name,post_data['user_pass'][0]) ==0:
# user_create_status['code'] = '31'
# return user_create_status
user_create_status['success'] = True
return user_create_status
def register(self):
post_data = self.get_post_data()
form = SumForm(self.request.arguments)
if form.validate():
res_dic = self.muser.insert_data(post_data)
if res_dic['success']:
self.redirect('/user/login')
else:
kwd = {
'info': '注册不成功',
}
self.set_status(400)
self.render(
'html/404.html',
cfg=config.cfg,
kwd=kwd,
userinfo=None,
)
else:
kwd = {
'info': '注册不成功',
}
self.set_status(400)
self.render(
'html/404.html',
cfg=config.cfg,
kwd=kwd,
userinfo=None,
)
def json_register(self):
'''
The first char of 'code' stands for the different field.
'1' for user_name
'2' for user_email
'3' for user_pass
'4' for user_role
The seconde char of 'code' stands for different status.
'1' for invalide
'2' for already exists.
'''
user_create_status = {'success': False, 'code': '00'}
post_data = self.get_post_data()
user_create_status = self.__check_valid(post_data)
if user_create_status['success'] == False:
return json.dump(user_create_status, self)
print('user_register_status:', user_create_status)
form = SumForm(self.request.arguments)
if form.validate():
user_create_status = self.muser.insert_data(post_data)
print('user_register_status:', user_create_status)
return json.dump(user_create_status, self)
else:
return json.dump(user_create_status, self)
def json_changeinfo(self):
'''
The first char of 'code' stands for the different field.
'1' for user_name
'2' for user_email
'3' for user_pass
'4' for user_role
The seconde char of 'code' stands for different status.
'1' for invalide
'2' for already exists.
'''
user_create_status = {'success': False, 'code': '00'}
post_data = self.get_post_data()
uu = self.muser.check_user(self.user_name, post_data['rawpass'])
if uu == 1:
user_create_status = self.__check_valid_info(post_data)
if user_create_status['success'] == False:
return json.dump(user_create_status, self)
form_info = SumForm_info(self.request.arguments)
if form_info.validate():
user_create_status = self.muser.update_info(
self.user_name, post_data['user_email'])
return json.dump(user_create_status, self)
else:
return json.dump(user_create_status, self)
else:
return False
def json_changepass(self):
'''
The first char of 'code' stands for the different field.
'1' for user_name
'2' for user_email
'3' for user_pass
'4' for user_role
The seconde char of 'code' stands for different status.
'1' for invalide
'2' for already exists.
'''
user_create_status = {'success': False, 'code': '00'}
post_data = self.get_post_data()
uu = self.muser.check_user(self.user_name, post_data['rawpass'])
if uu == 1:
user_create_status = self.__check_valid_pass(post_data)
if user_create_status['success'] == False:
return json.dump(user_create_status, self)
form_pass = SumForm_pass(self.request.arguments)
if form_pass.validate():
self.muser.update_pass(self.user_name, post_data['user_pass'])
return json.dump(user_create_status, self)
else:
return json.dump(user_create_status, self)
else:
return False
def __to_register__(self):
kwd = {
'pager': '',
}
self.render('user/{0}/regist.html'.format(self.tmpl_router),
cfg=config.cfg,
userinfo=None,
kwd=kwd)
def login(self):
post_data = self.get_post_data()
if 'next' in post_data:
next_url = post_data['next']
else:
next_url = '/'
u_name = post_data['user_name']
u_pass = post_data['user_pass']
kwd = {
'pager': '',
}
result = self.muser.check_user(u_name, u_pass)
if result == 1:
self.set_secure_cookie("user", u_name)
self.muser.update_time_login(u_name)
self.redirect("{0}".format(next_url))
elif result == 0:
self.set_status(401)
kwd = {'info': '密码验证出错，请<a href="/user/login">重新登陆</a>。'}
self.render(
'html/404.html',
cfg=config.cfg,
kwd=kwd,
userinfo=self.userinfo,
)
elif result == -1:
self.set_status(401)
kwd = {'info': '没有这个用户'}
self.render(
'html/404.html',
cfg=config.cfg,
kwd=kwd,
userinfo=self.userinfo,
)
else:
self.set_status(305)
self.redirect("{0}".format(next_url))
def to_find(self, ):
kwd = {
'pager': '',
}
self.render(
'user/{0}/find.html'.format(self.tmpl_router),
cfg=config.cfg,
kwd=kwd,
userinfo=self.userinfo,
)
def p_to_find(self, ):
kwd = {
'pager': '',
}
self.render(
'{1}/{0}/find_list.html'.format(self.tmpl_router, self.tmpl_dir),
kwd=kwd,
view=self.muser.get_by_keyword(""),
cfg=config.cfg,
userinfo=self.userinfo,
)
def find(self, keyword):
kwd = {
'pager': '',
'unescape': tornado.escape.xhtml_unescape,
'title': '查找结果',
}
if self.tmpl_router == "user":
self.render(
'user/{0}/find_list.html'.format(self.tmpl_router),
kwd=kwd,
view=self.muser.get_by_keyword(keyword),
cfg=config.cfg,
userinfo=self.userinfo,
)
else:
result = self.muser.get_by_keyword(keyword)
if result:
output = {'find': result}
else:
output = {
'find': 0,
}
return json.dump(output, self)
def delete(self, del_id):
if self.tmpl_router == "user":
is_deleted = self.muser.delete(del_id)
if is_deleted:
self.redirect('/user/find')
else:
return False
else:
if self.muser.delete(del_id):
output = {'del_category': 1}
else:
output = {
'del_category': 0,
}
return json.dump(output, self)
def post_find(self):
keyword = self.get_argument('keyword')
self.find(keyword)
def reset_password(self):
post_data = self.get_post_data()
if 'email' in post_data:
userinfo = self.muser.get_by_email(post_data['email'])
if tools.timestamp() - userinfo.time_reset_passwd < 70:
self.set_status(400)
kwd = {
'info': '两次重置密码时间应该大于1分钟',
}
self.render('html/404.html', kwd=kwd, userinfo=self.userinfo)
return False
if userinfo:
timestamp = tools.timestamp()
passwd = userinfo.user_pass
username = userinfo.user_name
hash_str = tools.md5(username + str(timestamp) + passwd)
url_reset = '{0}/user/reset-passwd?u={1}&t={2}&p={3}'.format(
config.site_url, username, timestamp, hash_str)
email_cnt = '''
<div>请查看下面的信息，并<span style="color:red">谨慎操作</span>：</div>
<div>您在"{0}"网站（{1}）申请了密码重置，如果确定要进行密码重置，请打开下面链接：</div>
<div><a href={2}>{2}</a></div>
<div>如果无法确定本信息的有效性，请忽略本邮件。</div>
'''.format(config.smtp_cfg['name'], config.site_url, url_reset)
if send_mail([userinfo.user_email],
"{0}|密码重置".format(config.smtp_cfg['name']),
email_cnt):
self.muser.update_time_reset_passwd(username, timestamp)
self.set_status(200)
return True
else:
self.set_status(400)
return False
else:
self.set_status(400)
return False
else:
self.set_status(400)
return False
def gen_passwd(self):
post_data = self.get_post_data()
userinfo = self.muser.get_by_name(post_data['u'])
sub_timestamp = int(post_data['t'])
cur_timestamp = tools.timestamp()
if cur_timestamp - sub_timestamp < 600 and cur_timestamp > sub_timestamp:
pass
else:
kwd = {
'info': '密码重置已超时！',
}
self.set_status(400)
self.render('html/404.html', kwd=kwd, userinfo=self.userinfo)
hash_str = tools.md5(userinfo.user_name + post_data['t'] +
userinfo.user_pass)
if hash_str == post_data['p']:
pass
else:
kwd = {
'info': '密码重置验证出错！',
}
self.set_status(400)
self.render(
'html/404.html',
kwd=kwd,
userinfo=self.userinfo,
)
new_passwd = tools.get_uu8d()
self.muser.update_pass(userinfo.user_name, new_passwd)
kwd = {
'user_name': userinfo.user_name,
'new_pass': new_passwd,
}
self.render(
'user/{0}/show_pass.html'.format(self.tmpl_router),
cfg=config.cfg,
kwd=kwd,
userinfo=self.userinfo,
)
class TestMUser():
def setup(self):
print('setup 方法执行于本类中每条用例之前')
self.uu = MUser()
self.username = '******'
self.uid = ''
def test_create_user(self):
post_data = {
'user_name': self.username,
'user_pass': '******',
'user_email': '*****@*****.**',
}
tt = self.uu.create_user(post_data)
assert tt['success'] == True
self.tearDown()
def add_mess(self, **kwargs):
name = kwargs.get('user_name', self.username)
post_data = {
'user_name':
name,
'user_pass':
kwargs.get('user_pass', 'g131322'),
'user_email':
kwargs.get('user_email',
'{}@kljhqq.com'.format(random.randint(1, 1000000))),
}
self.uu.create_user(post_data)
aa = self.uu.get_by_name(name)
self.uid = aa.uid
def test_create_user2(self):
post_data = {
'user_name': '',
'user_pass': '******',
'user_email': '*****@*****.**',
}
tt = self.uu.create_user(post_data)
assert tt['success'] == False
post_data = {
'user_name': '天',
'user_pass': '******',
'user_email': '*****@*****.**',
}
tt = self.uu.create_user(post_data)
assert tt['success'] == False
post_data = {
'user_name': '/sdfadf',
'user_pass': '******',
'user_email': '*****@*****.**',
}
tt = self.uu.create_user(post_data)
assert tt['success'] == False
self.tearDown()
def test_update_info(self):
post_data = {'user_email': '*****@*****.**'}
self.add_mess()
user_info = self.uu.get_by_name(self.username)
tt = self.uu.update_info(user_info.uid, post_data['user_email'])
assert tt['success'] == True
self.tearDown()
def test_update_pass(self):
self.add_mess()
post_data = {'user_pass': '******'}
self.uu.update_pass(self.uid, post_data['user_pass'])
tt = self.uu.get_by_uid(self.uid)
assert tt.user_pass == tools.md5(post_data['user_pass'])
self.tearDown()
def test_update_role(self):
self.add_mess()
post_data = {'role': '1111'}
self.uu.update_role(self.username, post_data['role'])
tt = self.uu.get_by_uid(self.uid)
assert tt.role == post_data['role']
self.tearDown()
def test_total_number(self):
a = self.uu.total_number()
self.add_mess()
b = self.uu.total_number()
assert a + 1 <= b
self.tearDown()
def test_query_pager_by_slug(self):
self.add_mess()
a = self.uu.total_number()
x = int(a / 10)
tf = False
for i in range(x + 2):
aa = self.uu.query_pager_by_slug(current_page_num=i)
for y in aa:
if y.uid == self.uid:
tf = True
self.tearDown()
assert tf
def test_count_of_certain(self):
a = self.uu.count_of_certain()
self.add_mess()
b = self.uu.count_of_certain()
assert a + 1 <= b
self.tearDown()
def test_delete(self):
user_info = self.uu.get_by_name(self.username)
self.add_mess()
user_info2 = self.uu.get_by_name(self.username)
aa = self.uu.delete(self.uid)
user_info3 = self.uu.get_by_name(self.username)
assert aa == True
assert user_info == user_info3
assert user_info == None
assert user_info2.uid == self.uid
self.tearDown()
def test_delete_by_user_name(self):
user_info = self.uu.get_by_name(self.username)
self.add_mess()
user_info2 = self.uu.get_by_name(self.username)
aa = self.uu.delete_by_user_name(self.username)
user_info3 = self.uu.get_by_name(self.username)
assert aa == True
assert user_info == user_info3
assert user_info == None
assert user_info2.uid == self.uid
self.tearDown()
def test_get_by_keyword(self):
self.add_mess()
aa = self.uu.get_by_keyword('me')
tf = False
for i in aa:
if i.uid == self.uid:
tf = True
self.tearDown()
assert tf
def test_update_time_login(self):
self.add_mess()
user_info = self.uu.get_by_name(self.username)
time.sleep(2)
self.uu.update_time_login(self.username)
aa = self.uu.get_by_name(self.username)
assert user_info.time_login != aa.time_login
self.tearDown()
def test_update_time_reset_passwd(self):
self.add_mess()
time_r = 11111111
aa = self.uu.update_time_reset_passwd(self.username, time_r)
assert aa == True
aa = self.uu.get_by_name(self.username)
assert aa.time_reset_passwd == time_r
self.tearDown()
def test_query_nologin(self):
aa = self.uu.query_nologin()
self.add_mess()
bb = self.uu.query_nologin()
assert aa.count() == bb.count()
self.tearDown()
def test_check_user_by_email(self):
post_data = {'user_email': '*****@*****.**', 'user_pass': '******'}
self.add_mess(**post_data)
aa = self.uu.check_user_by_email(post_data['user_email'],
post_data['user_pass'])
assert aa == 1
self.tearDown()
def test_check_user_by_name(self):
post_data = {'user_pass': '******'}
self.add_mess(**post_data)
aa = self.uu.check_user_by_name(self.username, post_data['user_pass'])
assert aa == 1
self.tearDown()
def test_check_user(self):
post_data = {'user_pass': '******'}
self.add_mess(**post_data)
aa = self.uu.check_user(self.uid, post_data['user_pass'])
assert aa == 1
self.tearDown()
def test_get_by_email(self):
post_data = {'user_email': '*****@*****.**'}
self.add_mess(**post_data)
aa = self.uu.get_by_email(post_data['user_email'])
assert aa.uid == self.uid
self.tearDown()
def test_set_sendemail_time(self):
self.add_mess()
bb = self.uu.get_by_uid(self.uid)
time.sleep(2)
self.uu.set_sendemail_time(self.uid)
aa = self.uu.get_by_uid(self.uid)
assert bb.time_email <= aa.time_email
self.tearDown()
def test_get_by_name(self):
self.add_mess()
aa = self.uu.get_by_name(self.username)
assert aa.uid == self.uid
self.tearDown()
def test_get_by_uid(self):
self.add_mess()
aa = self.uu.get_by_uid(self.uid)
assert aa.user_name == self.username
self.tearDown()
def test_query_all(self):
aa = self.uu.query_all()
tf = True
for i in aa:
if i.user_name == self.username:
tf = False
assert tf
self.add_mess()
aa = self.uu.query_all()
tf = False
for i in aa:
if i.user_name == self.username:
tf = True
assert tf
self.tearDown()
def test_db_email(self):
self.tearDown()
pdata = {
'user_name': 'asdfdsf',
'user_pass': '******',
'user_email': '*****@*****.**',
}
MUser.create_user(pdata)
bb = MUser.create_user(pdata)
assert bb == {'code': '31', 'success': False}
self.uu.delete_by_user_name(pdata['user_name'])
def tearDown(self):
print("function teardown")
tt = self.uu.get_by_uid(self.uid)
if tt:
self.uu.delete(tt.uid)
self.uu.delete_by_user_name(self.username)
