NexusDashboard/app/accounts.py

from flask import render_template, Blueprint, redirect, url_for, request, current_app, flash
from flask_user import login_required, current_user
from datatables import ColumnDT, DataTables
import bcrypt
import datetime
import secrets
from app.models import (
    Account,
    CharacterInfo,
    ActivityLog,
    Leaderboard,
    Mail,
    Property,
    PropertyContent,
    UGC,
    AuditLog,
    BugReport,
    AccountInvitation,
    db,
    Friends
)
from app.schemas import AccountSchema
from app import gm_level, log_audit
from app.forms import EditGMLevelForm, EditEmailForm
from sqlalchemy import or_

accounts_blueprint = Blueprint('accounts', __name__)

account_schema = AccountSchema()


@accounts_blueprint.route('/', methods=['GET'])
@login_required
@gm_level(3)
def index():
    return render_template('accounts/index.html.j2')


@accounts_blueprint.route('/view/<id>', methods=['GET'])
@login_required
@gm_level(3)
def view(id):
    account_data = Account.query.filter(Account.id == id).first()
    if account_data:
        return render_template('accounts/view.html.j2', account_data=account_data)
    else:
        return redirect(url_for('main.index'))


@accounts_blueprint.route('/edit_gm_level/<id>', methods=('GET', 'POST'))
@login_required
@gm_level(8)
def edit_gm_level(id):
    if current_user.id == int(id):
        flash("You cannot your own GM Level", "danger")
        return redirect(request.referrer if request.referrer else url_for("main.index"))
    account_data = Account.query.filter(Account.id == id).first()
    if account_data.gm_level >= 8 and current_user.gm_level == 8:
        flash("You cannot edit this user's GM Level", "warning")
        return redirect(request.referrer if request.referrer else url_for("main.index"))

    form = EditGMLevelForm()

    if form.validate_on_submit():
        log_audit(f"Changed ({account_data.id}){account_data.username}'s GM Level from {account_data.gm_level} to {form.gm_level.data}")
        account_data.gm_level = form.gm_level.data
        account_data.save()

        return redirect(url_for('accounts.view', id=account_data.id))

    form.gm_level.data = account_data.gm_level

    return render_template('accounts/edit_gm_level.html.j2', form=form, username=account_data.username)


@accounts_blueprint.route('/edit_email/<id>', methods=('GET', 'POST'))
@login_required
@gm_level(8)
def edit_email(id):
    account_data = Account.query.filter(Account.id == id).first()
    form = EditEmailForm()
    if form.validate_on_submit():
        log_audit(f"Changed ({account_data.id}){account_data.username}'s Email from {account_data.email} to {form.email.data}")
        account_data.email = form.email.data
        account_data.save()
        return redirect(url_for('accounts.view', id=account_data.id))

    form.email.data = account_data.email
    return render_template('accounts/edit_email.html.j2', form=form, username=account_data.username)


@accounts_blueprint.route('/lock/<id>', methods=['GET'])
@login_required
@gm_level(3)
def lock(id):
    account = Account.query.filter(Account.id == id).first()
    if not account.locked:
        account.locked = True
        account.active = False
        log_audit(f"Locked ({account.id}){account.username}")
        flash("Locked Account", "danger")
    else:
        account.locked = False
        account.active = True
        log_audit(f"Unlocked ({account.id}){account.username}")
        flash("Unlocked account", "success")
    account.save()
    return redirect(request.referrer if request.referrer else url_for("main.index"))


@accounts_blueprint.route('/ban/<id>', methods=['GET'])
@login_required
@gm_level(3)
def ban(id):
    account = Account.query.filter(Account.id == id).first()
    if not account.banned:
        account.banned = True
        account.active = False
        log_audit(f"Banned ({account.id}){account.username}")
        flash("Banned Account", "danger")
    else:
        account.banned = False
        account.active = True
        log_audit(f"Unbanned ({account.id}){account.username}")
        flash("Unbanned account", "success")
    account.save()
    return redirect(request.referrer if request.referrer else url_for("main.index"))


@accounts_blueprint.route('/muted/<id>/<days>', methods=['GET'])
@login_required
@gm_level(3)
def mute(id, days=0):
    account = Account.query.filter(Account.id == id).first()
    if days == "0":
        account.mute_expire = 0
        log_audit(f"Unmuted ({account.id}){account.username}")
        flash("Unmuted Account", "success")
    else:
        muted_intil = datetime.datetime.now() + datetime.timedelta(days=int(days))
        account.mute_expire = muted_intil.timestamp()
        log_audit(f"Muted ({account.id}){account.username} for {days} days")
        flash(f"Muted account for {days} days", "danger")
    account.save()

    return redirect(request.referrer if request.referrer else url_for("main.index"))


@accounts_blueprint.route('/delete/<id>/', methods=['GET', 'POST'])
@login_required
@gm_level(9)
def delete(id):
    account = Account.query.filter(Account.id == id).first()
    message = f"Deleted Account ({account.id}){account.username}"
    chars = CharacterInfo.query.filter(CharacterInfo.account_id == id).all()
    for char in chars:
        activities = ActivityLog.query.filter(
            ActivityLog.character_id == char.id
        ).all()
        for activity in activities:
            activity.delete()
        lb_entries = Leaderboard.query.filter(
            Leaderboard.character_id == char.id
        ).all()
        for lb_entry in lb_entries:
            lb_entry.delete()
        mails = Mail.query.filter(Mail.receiver_id == char.id).all()
        for mail in mails:
            mail.delete()
        props = Property.query.filter(Property.owner_id == char.id).all()
        for prop in props:
            prop_contents = PropertyContent.query.filter(
                PropertyContent.property_id == prop.id
            ).all()
            for prop_content in prop_contents:
                if prop_content.lot == "14":
                    UGC.query.filter(UGC.id == prop.ugc_id).first().delete()
                prop_content.delete()
            prop.delete()
        friends = Friends.query.filter(
            or_(Friends.player_id == char.id, Friends.friend_id == char.id)
        ).all()
        for friend in friends:
            friend.delete()
        char.delete()
    # This is for GM stuff, it will be permnently delete logs
    bugs = BugReport.query.filter(BugReport.resoleved_by_id == id).all()
    for bug in bugs:
        bug.delete()
    audits = AuditLog.query.filter(AuditLog.account_id == id).all()
    for audit in audits:
        audit.delete()
    invites = AccountInvitation.query.filter(
        AccountInvitation.invited_by_user_id == id).all()
    for invite in invites:
        invite.delete()
    account.delete()
    flash(message, "danger")
    log_audit(message)
    return redirect(url_for("main.index"))


@accounts_blueprint.route('/pass_reset/<id>', methods=['GET', 'POST'])
@login_required
@gm_level(9)
def pass_reset(id):
    # get the account
    account = Account.query.filter(Account.id == id).first()
    # make a random pass of length 12 using secrets
    raw_pass = secrets.token_urlsafe(12)
    # generate the hash
    salt = bcrypt.gensalt()
    hashed = bcrypt.hashpw(str.encode(raw_pass), salt)
    # save the has
    account.password = hashed
    account.save()
    # display for the admin to get and log that the action was done
    flash(f"Set password for account {account.username} to {raw_pass}", "success")
    log_audit(f"Reset password for {account.username}")

    return redirect(request.referrer if request.referrer else url_for("main.index"))


@accounts_blueprint.route('/get', methods=['GET'])
@login_required
@gm_level(3)
def get():
    columns = [
        ColumnDT(Account.id),                   # 0
        ColumnDT(Account.username),             # 1
        ColumnDT(Account.email),                # 2
        ColumnDT(Account.gm_level),             # 3
        ColumnDT(Account.locked),               # 4
        ColumnDT(Account.banned),               # 5
        ColumnDT(Account.mute_expire),          # 6
        ColumnDT(Account.created_at),           # 7
        ColumnDT(Account.email_confirmed_at)    # 8
    ]

    query = db.session.query().select_from(Account)

    params = request.args.to_dict()

    rowTable = DataTables(params, query, columns)

    data = rowTable.output_result()
    for account in data["data"]:
        account["0"] = f"""
            <a role="button" class="btn btn-primary btn btn-block"
            href='{url_for('accounts.view', id=account["0"])}'>
            View
            </a>
        """
        #        <a role="button" class="btn btn-danger btn btn-block"
        # href='{url_for('acounts.delete', id=account["0"])}'>
        # Delete
        # </a>

        if account["4"]:
            account["4"] = '''<h2 class="far fa-times-circle text-danger"></h2>'''
        else:
            account["4"] = '''<h2 class="far fa-check-square text-success"></h2>'''

        if account["5"]:
            account["5"] = '''<h2 class="far fa-times-circle text-danger"></h2>'''
        else:
            account["5"] = '''<h2 class="far fa-check-square text-success"></h2>'''

        if account["6"]:
            account["6"] = '''<h2 class="far fa-times-circle text-danger"></h2>'''
        else:
            account["6"] = '''<h2 class="far fa-check-square text-success"></h2>'''

        if current_app.config["USER_ENABLE_EMAIL"]:
            if account["8"]:
                account["8"] = '''<h2 class="far fa-check-square text-success"></h2>'''
            else:
                account["8"] = '''<h2 class="far fa-times-circle text-danger"></h2>'''
        else:
            # shift columns to fill in gap of 2
            account["2"] = account["3"]
            account["3"] = account["4"]
            account["4"] = account["5"]
            account["5"] = account["6"]
            account["6"] = account["7"]
            # remove last two columns
            del account["7"]
            del account["8"]

    return data