mirror of
https://github.com/pds-nest/nest.git
synced 2024-11-23 13:34:19 +00:00
73 lines
2.4 KiB
Python
73 lines
2.4 KiB
Python
from flask import render_template, abort, jsonify, request
|
|
from nest_backend.database import *
|
|
from flask_jwt_extended import jwt_required
|
|
from nest_backend.gestione import *
|
|
from flask_cors import cross_origin
|
|
|
|
|
|
@cross_origin()
|
|
@jwt_required()
|
|
def page_users():
|
|
"""
|
|
---
|
|
get:
|
|
summary: Get a list of users.
|
|
security:
|
|
- jwt: []
|
|
responses:
|
|
'200':
|
|
description: A list of User schemas, incapsulated in Success.
|
|
'403':
|
|
description: The user is not authorized.
|
|
content:
|
|
application/json:
|
|
schema: Error
|
|
'401':
|
|
description: The user is not logged in.
|
|
content:
|
|
application/json:
|
|
schema: Error
|
|
tags:
|
|
- admin-only
|
|
post:
|
|
summary: Creates a user.
|
|
security:
|
|
- jwt: []
|
|
requestBody:
|
|
required: true
|
|
content:
|
|
application/json:
|
|
schema: CreateUser
|
|
responses:
|
|
'200':
|
|
description: The user has been created successfully.
|
|
content:
|
|
application/json:
|
|
schema: User
|
|
'403':
|
|
description: The user is not authorized.
|
|
content:
|
|
application/json:
|
|
schema: Error
|
|
'401':
|
|
description: The user is not logged in.
|
|
content:
|
|
application/json:
|
|
schema: Error
|
|
tags:
|
|
- user-related
|
|
"""
|
|
user = find_user(get_jwt_identity())
|
|
if request.method == "GET":
|
|
if not user.isAdmin:
|
|
return json_error("User is not admin. Thou art not authorized"), 403
|
|
users = User.query.all()
|
|
return json_success([user.to_json() for user in users])
|
|
if request.method == "POST":
|
|
if not user.isAdmin:
|
|
return json_error("User is not admin. Thou art not authorized."), 403
|
|
new_user = User(email=request.json.get("email"), password=gen_password(request.json.get("password")),
|
|
username=request.json.get("username"))
|
|
Base.session.add(new_user)
|
|
Base.session.commit()
|
|
return json_success(new_user.to_json())
|