1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
|
from flask import Flask, Response, render_template, request, session, redirect, url_for
import functools
import re
from scripts.database.mongo import mongo_database
from scripts.scraping.scraper import scrape
from scripts.recipes.handle_recipes import recipe_exists, add_single_recipe, get_all_recipes, get_single_recipe, get_facets, delete_single_recipe, search_recipes
from scripts.users.handle_users import user_exists, authenticate_user, add_user
from flask_bcrypt import Bcrypt
# Bcrypt.check_password_hash(hashed_password, "eligible password")
app = Flask(__name__)
bcrypt = Bcrypt(app)
app.config["TEMPLATES_AUTO_RELOAD"] = True
app.secret_key = 'wdkbahjfbqb'
# Decorator function to check for username in session to protect routes
def login_required(func):
@functools.wraps(func)
def secure_function(*args, **kwargs):
if "username" not in session:
return redirect(url_for("login"))
return func(*args, **kwargs)
return secure_function
# Pages
@app.route("/home")
@login_required
def home_page():
tags = get_facets(session["username"])
all_recipes = get_all_recipes(session["username"])
return render_template("/pages/home.html",recipes=all_recipes, facets=tags)
@app.route("/")
def landing_page():
return render_template("/pages/landing.html")
@app.route("/recipe/<recipe_id>")
@login_required
def single_recipe_page(recipe_id):
recipe_details = get_single_recipe(recipe_id)
return render_template("/pages/single-recipe.html", single_recipe=recipe_details)
@app.route("/login")
def login():
return render_template("/pages/login.html")
@app.route("/signup")
def signup():
return render_template("/pages/signup.html")
@app.route("/account")
def account():
if "username" not in session:
return redirect(url_for("login"))
else:
return render_template("/pages/account.html")
@app.route("/about")
def about():
return render_template("/pages/about.html")
# API routes
@app.post("/recipes/add")
def add_recipe():
req_data = request.form.to_dict()
submitted_url = req_data["url"]
if submitted_url == '':
return "<span class='text-red-500'>No recipe supplied!</span>"
does_recipe_exist = recipe_exists(session["username"], submitted_url)
if does_recipe_exist:
return "<h1>Recipe already exists</h1>"
else:
recipe_json = scrape(submitted_url, session["username"])
add_single_recipe(recipe_json)
all_recipes = get_all_recipes(session["username"])
all_facets = get_facets(session["username"])
return render_template("/components/app.html", recipes=all_recipes, facets=all_facets)
@app.post("/recipes/search")
def search():
req_data = request.form.to_dict()
all_recipes = search_recipes(req_data, session["username"])
all_facets = get_facets(session["username"], req_data)
return render_template("/components/app.html", recipes=all_recipes, facets=all_facets)
@app.delete("/recipes/delete/<recipe_id>")
def delete_recipe(recipe_id):
res = delete_single_recipe(recipe_id)
if res["success"]:
return f'<p class="success">Recipe {recipe_id} successfully deleted, <a href="/home">Go home</a>'
else:
error_html = f'<p class="error">Error deleting {recipe_id}</p>'
return error_html
@app.post("/login")
def login_user():
req_data = request.form.to_dict()
user = req_data["username"]
pw = req_data["password"]
res = user_exists(user)
if res["success"] and res["user"] is None:
return "<p class='error'>User doesn't exist, <a href='/signup'>signup instead</a></p>"
elif res["success"] and res["user"] is not None:
pw_matches = bcrypt.check_password_hash(res["password"], pw)
if pw_matches:
session["username"] = user
return Response(headers={"HX-Redirect": "/home"})
else:
return "Incorrect password, try again"
else:
return "<p class='error'>Something went wrong with the login</p>"
@app.post("/signup")
def signup_user():
req_data = request.form.to_dict()
user = req_data["username"]
pw = req_data["password"]
if user == "" or pw == "":
return "<p class='error'>You must fill in both username and password</p>"
res = user_exists(user)
if res["success"] and res["user"] is not None:
return "<p class='error'>User already exists, <a href='/login'>Login instead</a></p>"
elif res["success"] and res["user"] is None:
pattern = r'^(?=.*[A-Za-z])(?=.*\d)[A-Za-z\d]{8,}$'
is_strong = bool(re.match(pattern, pw))
if is_strong:
pw_hash = bcrypt.generate_password_hash(pw)
res = add_user(user, pw_hash)
if res["success"]:
session["username"] = user
return Response(headers={"HX-Redirect": "/home"})
else:
return "<p class='error'>Something went wrong</p>"
else:
return "<p class='error'>Password must be at least 8 characters long and contain at least 1 digit and 1 number</p>"
@app.post("/logout")
def logout_user():
session.pop('username', None)
return Response(headers={"HX-Redirect": "/"})
|
