1
Fork 0
mirror of https://github.com/pds-nest/nest.git synced 2024-12-24 12:04:19 +00:00
pds-2021-g2-nest/nest_backend/routes/users/users.py
2021-05-28 19:51:12 +02:00

81 lines
2.9 KiB
Python

from flask import render_template, abort, jsonify, request
from nest_backend.database import *
from flask_jwt_extended import jwt_required, get_jwt_identity
from nest_backend.gestione import *
from flask_cors import cross_origin
import nest_backend.errors as errors
@cross_origin()
@jwt_required()
def page_users():
"""
---
get:
summary: Get a list of users.
security:
- jwt: []
responses:
'200':
description: A list of User schemas, incapsulated in Success.
'403':
description: The user is not authorized.
content:
application/json:
schema: Error
'401':
description: The user is not logged in.
content:
application/json:
schema: Error
tags:
- user-related
post:
summary: Creates a user.
security:
- jwt: []
requestBody:
required: true
content:
application/json:
schema: CreateUser
responses:
'201':
description: The user has been created successfully.
content:
application/json:
schema: User
'403':
description: The user is not authorized.
content:
application/json:
schema: Error
'406':
description: The user already exists.
content:
application/json:
schema: Error
'401':
description: The user is not logged in.
content:
application/json:
schema: Error
tags:
- admin-only
"""
user = find_user(get_jwt_identity())
if request.method == "GET":
users = User.query.all()
return json_success([user.to_json() for user in users]), 200
if request.method == "POST":
if not user.isAdmin:
return json_error("User is not admin. Thou art not authorized.", errors.USER_NOT_ADMIN), 403
if not request.json.get("email") or not request.json.get("password") or not request.json.get("username"):
return json_error("Missing required fields.", errors.GENERIC_MISSING_FIELDS), 400
if User.query.filter_by(email=request.json.get("email")).first():
return json_error("User already exists.", errors.GENERIC_ALREADY_EXISTS), 406
new_user = User(email=request.json.get("email"), password=gen_password(request.json.get("password")),
username=request.json.get("username"))
ext.session.add(new_user)
ext.session.commit()
return json_success(new_user.to_json()), 201