async def add(uid: int, uname: str, password: str, mail: str, regip: str='', realname: str=''):
"""Add a user."""
validator.check_uname(uname)
# TODO(iceboy): Filter uname by keywords.
validator.check_password(password)
validator.check_mail(mail)
uname_lower = uname.strip().lower()
mail_lower = mail.strip().lower()
for user in builtin.USERS:
if user['_id'] == uid or user['uname_lower'] == uname_lower or user['mail_lower'] == mail_lower:
raise error.UserAlreadyExistError(uname)
salt = pwhash.gen_salt()
coll = db.coll('user')
try:
await coll.insert_one({'_id': uid,
'uname': uname,
'uname_lower': uname_lower,
'realname': realname,
'mail': mail,
'mail_lower': mail_lower,
'salt': salt,
'hash': pwhash.hash_vj4(password, salt),
'regat': datetime.datetime.utcnow(),
'regip': regip,
'priv': builtin.DEFAULT_PRIV,
'loginat': datetime.datetime.utcnow(),
'loginip': regip,
'gravatar': mail})
except errors.DuplicateKeyError:
raise error.UserAlreadyExistError(uid, uname, mail) from None
async def post(self, *, mail: str):
validator.check_mail(mail)
if await user.get_by_mail(mail):
raise error.UserAlreadyExistError(mail)
rid, _ = await token.add(token.TYPE_REGISTRATION,
options.registration_token_expire_seconds,
mail=mail)
await self.send_mail(mail, 'Sign Up', 'user_register_mail.html',
url=self.reverse_url('user_register_with_code', code=rid))
self.render('user_register_mail_sent.html')
async def post(self, *, uname: str, password: str, verify_password: str):
mail = str(uuid.uuid4()) + '@vijos.test'
validator.check_mail(mail)
if await user.get_by_mail(mail):
raise error.UserAlreadyExistError(mail)
if password != verify_password:
raise error.VerifyPasswordError()
uid = await system.inc_user_counter()
await user.add(uid, uname, password, mail, self.remote_ip)
self.json_or_redirect('/private-user-list')
async def get(self, *, code: str):
tdoc = await token.get(code, token.TYPE_CHANGEMAIL)
if not tdoc or tdoc['uid'] != self.user['_id']:
raise error.InvalidTokenError(token.TYPE_CHANGEMAIL, code)
mail_holder_udoc = await user.get_by_mail(tdoc['mail'])
if mail_holder_udoc:
raise error.UserAlreadyExistError(tdoc['mail'])
# TODO(twd2): Ensure mail is unique.
await user.set_mail(self.user['_id'], tdoc['mail'])
await token.delete(code, token.TYPE_CHANGEMAIL)
self.json_or_redirect(self.reverse_url('home_security'))
async def post(self, *, mail: str):
validator.check_mail(mail)
if await user.get_by_mail(mail):
raise error.UserAlreadyExistError(mail)
# TODO(iceboy): rate limit.
rid, _ = await token.add(token.TYPE_REGISTRATION,
options.options.registration_token_expire_seconds,
mail=mail)
content = self.render_html('user_register_mail.html', url_prefix=options.options.url_prefix,
url=self.reverse_url('user_register_with_code', code=rid))
await mailer.send_mail(mail, 'Sign Up - Vijos', content)
self.render('user_register_mail_sent.html')
async def post_change_mail(self, *, current_password: str, mail: str):
validator.check_mail(mail)
udoc, mail_holder_udoc = await asyncio.gather(
user.check_password_by_uid(self.user['_id'], current_password),
user.get_by_mail(mail))
# TODO(twd2): raise other errors.
if not udoc:
raise error.CurrentPasswordError(self.user['uname'])
if mail_holder_udoc:
raise error.UserAlreadyExistError(mail)
rid, _ = await token.add(token.TYPE_CHANGEMAIL,
options.changemail_token_expire_seconds,
uid=udoc['_id'], mail=mail)
await self.send_mail(mail, 'Change Email', 'user_changemail_mail.html',
url=self.reverse_url('user_changemail_with_code', code=rid),
uname=udoc['uname'])
self.render('user_changemail_mail_sent.html')
