Gal's_webprogramming_project.ipynb

<<<<<<< HEAD
<<<<<<< HEAD
{
 "cells": [
  {
   "cell_type": "code",
   "execution_count": 1,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      " * Serving Flask app \"__main__\" (lazy loading)\n",
      " * Environment: production\n",
      "   WARNING: Do not use the development server in a production environment.\n",
      "   Use a production WSGI server instead.\n",
      " * Debug mode: off\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      " * Running on https://127.0.0.1:5000/ (Press CTRL+C to quit)\n",
      "127.0.0.1 - - [17/Nov/2019 18:16:43] \"GET / HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:16:43] \"GET /static/style.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:16:48] \"GET /logout HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:16:48] \"GET / HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:16:50] \"GET /add_user HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:17:25] \"POST /add_user HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:17:25] \"GET / HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:17:39] \"GET /login HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:17:46] \"POST /login HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:17:46] \"GET / HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:17:50] \"GET /admin HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:01] \"POST /admin HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:01] \"GET / HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:01] \"GET /static/style.css HTTP/1.1\" 200 -\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "<Roles 5>\n",
      "hello\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "127.0.0.1 - - [17/Nov/2019 18:18:07] \"GET /users/1 HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:07] \"GET /static/forum.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:07] \"GET /static/forum.js HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:08] \"GET /users/2 HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:08] \"GET /static/forum.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:08] \"GET /static/forum.js HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:09] \"GET /users/2 HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:09] \"GET /static/forum.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:09] \"GET /static/forum.js HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:17] \"GET /moderate HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:23] \"GET /secret HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:25] \"GET /secret HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:36] \"GET /logout HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:36] \"GET / HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:36] \"GET /static/style.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:41] \"GET /secret HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:41] \"GET /login?next=%2Fsecret HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:41] \"GET /static/style.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:42] \"GET /secret HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:18:42] \"GET /login?next=%2Fsecret HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:19:24] \"GET /secret HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:19:24] \"GET /login?next=%2Fsecret HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:19:25] \"GET /static/style.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:19:26] \"GET /secret HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:19:26] \"GET /login?next=%2Fsecret HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:20:41] \"GET /login?next=%2Fsecret HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:20:45] \"GET /static/style.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:24:50] \"GET /admin HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:24:50] \"GET /login?next=%2Fadmin HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:24:50] \"GET /static/style.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:24:50] \"GET /admin HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:24:50] \"GET /login?next=%2Fadmin HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:25:23] \"POST /login?next=%2Fadmin HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:25:23] \"GET /admin HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:37:58] \"GET /login?next=%2Fadmin HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:37:58] \"GET /static/style.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 18:38:10] \"GET /login?next=%2Fadmin HTTP/1.1\" 200 -\n"
     ]
    }
   ],
   "source": [
    "import json\n",
    "import os\n",
    "from flask import Flask, render_template, abort,redirect,request,url_for,flash\n",
    "from flask_login import login_user,logout_user, UserMixin,AnonymousUserMixin, LoginManager, login_required, current_user\n",
    "from flask_sqlalchemy import SQLAlchemy\n",
    "from flask_wtf import FlaskForm\n",
    "import wtforms as wtf\n",
    "import wtforms.validators as valid\n",
    "from functools import wraps\n",
    "import base64\n",
    "from werkzeug import security\n",
    "from hashlib import sha512\n",
    "from cryptography.fernet import Fernet\n",
    "#google oauth\n",
    "\n",
    "app = Flask(__name__)\n",
    "app.config[\"SECRET_KEY\"] = \"oEHYBreJ2QSefBdUhD19PkxC\"\n",
    "login_manager = LoginManager()\n",
    "login_manager.login_view = \"login\"\n",
    "login_manager.init_app(app)\n",
    "\n",
    "\n",
    "@login_manager.user_loader\n",
    "def load_user(user_id):\n",
    "    return Users.query.get(int(user_id))\n",
    "\n",
    "appdir = os.path.abspath(os.path.dirname(\"Gal's_webprogramming_project.ipynb\"))\n",
    "\n",
    "# configure app’s database access\n",
    "app.config[\"SQLALCHEMY_DATABASE_URI\"] = \\\n",
    "\tf\"sqlite:///{os.path.join(appdir, 'library.db')}\"\n",
    "app.config[\"SQLALCHEMY_TRACK_MODIFICATIONS\"] = False\n",
    "\n",
    "# initialize the SQLAlchemy database adaptor\n",
    "db = SQLAlchemy(app)\n",
    "\n",
    "\n",
    "#\n",
    "##\n",
    "### permission requirements\n",
    "##\n",
    "#\n",
    "\n",
    "class Permission(object):\n",
    "    FOLLOW = 1\n",
    "    COMMENT = 2\n",
    "    WRITE = 4\n",
    "    MODERATE = 8\n",
    "    ADMIN = 16\n",
    "\n",
    "def permission_required(perm):\n",
    "    def decorator(f):\n",
    "        @wraps(f)\n",
    "        def decorated_function(*args, **kwargs):\n",
    "            if not current_user.can(perm):\n",
    "                abort(403)\n",
    "            return f(*args, **kwargs)\n",
    "        return decorated_function\n",
    "    return decorator\n",
    "    \n",
    "def admin_required(f):\n",
    "    return permission_required(Permission.ADMIN)(f)\n",
    "\n",
    "#\n",
    "##\n",
    "###Database classes\n",
    "##\n",
    "#\n",
    "\n",
    "class Users(UserMixin, db.Model):\n",
    "    __tablename__ = \"Users\"\n",
    "    id = db.Column(db.Integer(), primary_key=True,\n",
    "    autoincrement=True)\n",
    "    first_name = db.Column(db.Unicode(64), nullable=False)\n",
    "    last_name = db.Column(db.Unicode(64), nullable=False)\n",
    "    email = db.Column(db.Unicode(256), nullable=False,unique=True)\n",
    "    password_hash = db.Column(db.String(128))\n",
    "    role_id = db.Column(db.Integer, db.ForeignKey(\"Roles.rid\"), default=1)\n",
    "    \n",
    "    def change_user_role(self, new_role):\n",
    "        role = Roles.query.filter_by(rid=new_role).first()\n",
    "        print(role)\n",
    "        print(\"hello\")\n",
    "        if role is not None:\n",
    "            self.role_id = new_role\n",
    "            db.session.add(self)\n",
    "            db.session.commit()\n",
    "        else:\n",
    "            print(\"there was an error \" + self.first_name + str(new_role))\n",
    "    \n",
    "    def can(self, perm):\n",
    "        return self.role is not None and self.role.has_permission(perm)\n",
    "    \n",
    "    def is_administrator(self):\n",
    "        return self.can(Permission.ADMIN)\n",
    "    \n",
    "    @property\n",
    "    def password(self):\n",
    "        raise AttributeError(\"password is write only\")\n",
    "\n",
    "    @password.setter\n",
    "    def password(self, password):\n",
    "        self.password_hash = security.generate_password_hash(password)\n",
    "    def verify_password(self, password):\n",
    "        return security.check_password_hash(self.password_hash, password)\n",
    "    \n",
    "class AnonymousUser(AnonymousUserMixin):\n",
    "    def can(self, perm):\n",
    "        return False\n",
    "    def is_administrator(self):\n",
    "        return False\n",
    "\n",
    "class Comments(db.Model):\n",
    "    __tablename__ = \"Comments\"\n",
    "    id = db.Column(db.Integer(), primary_key=True,\n",
    "    autoincrement=True)\n",
    "    user_id = db.Column(db.Integer(), db.ForeignKey('Users.id'))\n",
    "    comment = db.Column(db.Unicode(256), nullable=False)\n",
    "\n",
    "class Roles(db.Model):\n",
    "    __tablename__ = \"Roles\"\n",
    "    rid = db.Column(db.Integer(), primary_key=True,autoincrement=True)\n",
    "    name = db.Column(db.Unicode(64))\n",
    "    default = db.Column(db.Boolean, default=False, index=True)\n",
    "    permissions = db.Column(db.Integer,default=0,nullable=False)\n",
    "    users = db.relationship(\"Users\", backref=\"role\", lazy=\"dynamic\")\n",
    "    \n",
    "    def __init__(self, **kwargs):\n",
    "        super(Roles, self).__init__(**kwargs)\n",
    "        if self.permissions is None:\n",
    "            self.permissions = 0\n",
    "            \n",
    "    def add_permission(self, perm):\n",
    "        if not self.has_permission(perm):\n",
    "            self.permissions += perm\n",
    "    def remove_permission(self, perm):\n",
    "        if self.has_permission(perm):\n",
    "            self.permissions -= perm\n",
    "    def reset_permissions(self):\n",
    "        self.permissions = 0\n",
    "    def has_permission(self, perm):\n",
    "            return self.permissions & perm == perm\n",
    "    \n",
    "#\n",
    "##\n",
    "###WTForm classes\n",
    "##\n",
    "#\n",
    "\n",
    "class New_User_Form(FlaskForm):\n",
    "    first_name = wtf.StringField(\"first_name\", validators=[valid.DataRequired()])\n",
    "    last_name = wtf.StringField(\"last_name\", validators=[valid.DataRequired()])\n",
    "    email = wtf.StringField(\"Email\",validators=[valid.DataRequired(), valid.Email()])\n",
    "    password = wtf.PasswordField(\"Password\",validators=[valid.DataRequired()])\n",
    "    submit = wtf.SubmitField(\"Submit\")\n",
    "    comments = wtf.TextAreaField(\"Comment\", validators=[])\n",
    "\n",
    "class LoginForm(FlaskForm):\n",
    "    email = wtf.StringField(\"Email\", validators=[valid.DataRequired(),valid.Length(1,64), valid.Email()])\n",
    "    password = wtf.PasswordField(\"Password\", validators=[valid.DataRequired()])\n",
    "    remember_me = wtf.BooleanField(\"Keep me logged in\")\n",
    "    submit = wtf.SubmitField(\"Log In\")\n",
    "    \n",
    "class RoleForm(FlaskForm):\n",
    "    email = wtf.StringField(\"Email\", validators=[valid.DataRequired(),valid.Length(1,64), valid.Email()])\n",
    "    role_name = wtf.StringField(\"Role\", validators=[valid.DataRequired()])\n",
    "    submit = wtf.SubmitField(\"change_role\")\n",
    "        \n",
    "#clearing the database\n",
    "db.drop_all()\n",
    "db.create_all()\n",
    "\n",
    "#\n",
    "##\n",
    "###app route functions    \n",
    "##\n",
    "#\n",
    "\n",
    "@app.route('/')\n",
    "def index():\n",
    "\treturn render_template('homePage.html')\n",
    "\n",
    "@app.route(\"/login\", methods=[\"GET\",\"POST\"])\n",
    "def login():\n",
    "    form = LoginForm()\n",
    "    if form.validate_on_submit():\n",
    "        user = Users.query.filter_by(email=form.email.data).first()\n",
    "        if user is not None and Users.verify_password(user,password=form.password.data):\n",
    "            login_user(user, form.remember_me.data)\n",
    "            next = request.args.get(\"next\")\n",
    "            if next is None or not next.startswith(\"/\"):\n",
    "                next = url_for(\"index\")\n",
    "            return redirect(next)\n",
    "        flash(\"Invalid Username or password.\")\n",
    "    return render_template(\"login.html\", form=form)\n",
    "\n",
    "\n",
    "@app.route(\"/admin\", methods=[\"GET\",\"POST\"])\n",
    "@login_required\n",
    "#@admin_required\n",
    "@permission_required(Permission.ADMIN)\n",
    "def for_admins_only():\n",
    "    role_form = RoleForm()\n",
    "    if role_form.validate_on_submit():\n",
    "        user = Users.query.filter_by(email=role_form.email.data).first()\n",
    "        role = Roles.query.filter_by(name=role_form.role_name.data).first()\n",
    "        if user is not None and role is not None:\n",
    "            user.change_user_role(role.rid)\n",
    "            next = request.args.get(\"next\")\n",
    "            if next is None or not next.startswith(\"/\"):\n",
    "                next = url_for(\"index\")\n",
    "            return redirect(next)\n",
    "        flash(\"Invalid Username or role\")\n",
    "        print(\"Invalid Username or role\")\n",
    "    return render_template(\"admin.html\", form=role_form)\n",
    "\n",
    "\n",
    "\n",
    "@app.route(\"/moderate\")\n",
    "@login_required\n",
    "@permission_required(Permission.MODERATE)\n",
    "def for_moderators_only():\n",
    "    return \"Congratulations on Moderator Privileges!\"\n",
    "\n",
    "@app.route(\"/secret\")\n",
    "@login_required\n",
    "def secret():\n",
    "    return \"Congratulations on being logged in!\"\n",
    "\n",
    "@app.route(\"/logout\")\n",
    "@login_required\n",
    "def logout():\n",
    "    logout_user()\n",
    "    flash(\"You have been logged out\")\n",
    "    return redirect(url_for(\"index\"))\n",
    "\n",
    "@app.route(\"/login_logout\")\n",
    "def login_logout():\n",
    "    return render_template(\"login_logout.html\"), 200\n",
    "\n",
    "@app.route(\"/raw/<int:uid>\")\n",
    "def raw(uid):\n",
    "\treturn str(users[str(uid)])\n",
    "\n",
    "@app.route(\"/add_user\", methods=[\"GET\",\"POST\"])\n",
    "def add_user():\n",
    "    User = None\n",
    "    fname,lname,email,password = None, None, None, None\n",
    "    form = New_User_Form()\n",
    "    if form.validate_on_submit():\n",
    "        fname = form.first_name.data\n",
    "        form.first_name.data = None\n",
    "        lname = form.last_name.data\n",
    "        form.last_name.data = None\n",
    "        email = form.email.data\n",
    "        form.email.data = None\n",
    "        password = form.password.data\n",
    "        form.password.data = None\n",
    "        user = Users(first_name=fname, last_name=lname, email=email,password=password)\n",
    "        db.session.add_all([user])\n",
    "        db.session.commit()\n",
    "        next = request.args.get(\"next\")\n",
    "        if next is None or not next.startswith(\"/\"):\n",
    "            next = url_for(\"index\")\n",
    "        return redirect(next)\n",
    "    return render_template(\"add_user.html\", form=form)\n",
    "\n",
    "@app.route(\"/users/<int:uid>\")\n",
    "def users(uid):\n",
    "    user = Users.query.filter_by(id=uid).first()\n",
    "    #print(help(user))\n",
    "    if (user != None):\n",
    "        return render_template(\"forum.html\",user=user), 200\n",
    "    else:\n",
    "        print(\"oops\")\n",
    "        abort(404)\n",
    "\n",
    "@app.before_first_request\n",
    "def intitialize_app():\n",
    "    newt = Roles(name=\"newt\",default=True,permissions=0)\n",
    "    follow = Roles(name=\"follow\",permissions=1)\n",
    "    comment = Roles(name=\"comment\",permissions=3)\n",
    "    write = Roles(name=\"write\",permissions=7)\n",
    "    mod = Roles(name=\"moderator\",permissions=15)\n",
    "    admin = Roles(name=\"admin\",permissions=31)\n",
    "    db.session.add_all([newt,follow,comment,write,mod,admin])\n",
    "    gal_user = Users(first_name=\"Gal\", last_name=\"Cherki\", email=\"gal.cherki@hotmail.com\",password=\"math\",role_id=6)\n",
    "    db.session.add_all([gal_user])\n",
    "    db.session.commit()\n",
    "    \n",
    "    \n",
    "        \n",
    "if __name__ == \"__main__\":\n",
    "    app.run(ssl_context=(\"cert.pem\", \"key.pem\"))"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": []
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": []
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.7.3"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 2
}
=======
{
 "cells": [
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      " * Serving Flask app \"__main__\" (lazy loading)\n",
      " * Environment: production\n",
      "   WARNING: Do not use the development server in a production environment.\n",
      "   Use a production WSGI server instead.\n",
      " * Debug mode: off\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      " * Running on https://127.0.0.1:5000/ (Press CTRL+C to quit)\n",
      "127.0.0.1 - - [17/Nov/2019 17:41:16] \"GET / HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:41:21] \"GET /admin HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:41:25] \"POST /admin HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:41:25] \"GET / HTTP/1.1\" 200 -\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "<Roles 5>\n",
      "hello\n",
      "there was an error Gal5\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "127.0.0.1 - - [17/Nov/2019 17:42:28] \"GET /users/1 HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:42:29] \"GET /static/forum.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:42:29] \"GET /static/forum.js HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:44:29] \"GET /admin HTTP/1.1\" 403 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:44:38] \"GET /moderate HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:44:38] \"GET /moderate HTTP/1.1\" 200 -\n"
     ]
    }
   ],
   "source": [
    "import json\n",
    "import os\n",
    "from flask import Flask, render_template, abort,redirect,request,url_for,flash\n",
    "from flask_login import login_user,logout_user, UserMixin,AnonymousUserMixin, LoginManager, login_required, current_user\n",
    "from flask_sqlalchemy import SQLAlchemy\n",
    "from flask_wtf import FlaskForm\n",
    "import wtforms as wtf\n",
    "import wtforms.validators as valid\n",
    "from functools import wraps\n",
    "import base64\n",
    "from werkzeug import security\n",
    "from hashlib import sha512\n",
    "from cryptography.fernet import Fernet\n",
    "#google oauth\n",
    "\n",
    "app = Flask(__name__)\n",
    "app.config[\"SECRET_KEY\"] = \"oEHYBreJ2QSefBdUhD19PkxC\"\n",
    "login_manager = LoginManager()\n",
    "login_manager.login_view = \"login\"\n",
    "login_manager.init_app(app)\n",
    "\n",
    "\n",
    "@login_manager.user_loader\n",
    "def load_user(user_id):\n",
    "    return Users.query.get(int(user_id))\n",
    "\n",
    "appdir = os.path.abspath(os.path.dirname(\"Gal's_webprogramming_project.ipynb\"))\n",
    "\n",
    "# configure app’s database access\n",
    "app.config[\"SQLALCHEMY_DATABASE_URI\"] = \\\n",
    "\tf\"sqlite:///{os.path.join(appdir, 'library.db')}\"\n",
    "app.config[\"SQLALCHEMY_TRACK_MODIFICATIONS\"] = False\n",
    "\n",
    "# initialize the SQLAlchemy database adaptor\n",
    "db = SQLAlchemy(app)\n",
    "\n",
    "\n",
    "#\n",
    "##\n",
    "### permission requirements\n",
    "##\n",
    "#\n",
    "\n",
    "class Permission(object):\n",
    "    FOLLOW = 1\n",
    "    COMMENT = 2\n",
    "    WRITE = 4\n",
    "    MODERATE = 8\n",
    "    ADMIN = 16\n",
    "\n",
    "def permission_required(perm):\n",
    "    def decorator(f):\n",
    "        @wraps(f)\n",
    "        def decorated_function(*args, **kwargs):\n",
    "            if not current_user.can(perm):\n",
    "                abort(403)\n",
    "            return f(*args, **kwargs)\n",
    "        return decorated_function\n",
    "    return decorator\n",
    "    \n",
    "def admin_required(f):\n",
    "    return permission_required(Permission.ADMIN)(f)\n",
    "\n",
    "#\n",
    "##\n",
    "###Database classes\n",
    "##\n",
    "#\n",
    "\n",
    "class Users(UserMixin, db.Model):\n",
    "    __tablename__ = \"Users\"\n",
    "    id = db.Column(db.Integer(), primary_key=True,\n",
    "    autoincrement=True)\n",
    "    first_name = db.Column(db.Unicode(64), nullable=False)\n",
    "    last_name = db.Column(db.Unicode(64), nullable=False)\n",
    "    email = db.Column(db.Unicode(256), nullable=False,unique=True)\n",
    "    password_hash = db.Column(db.String(128))\n",
    "    role_id = db.Column(db.Integer, db.ForeignKey(\"Roles.rid\"), default=1)\n",
    "    \n",
    "    def change_user_role(self, new_role):\n",
    "        role = Roles.query.filter_by(rid=new_role).first()\n",
    "        print(role)\n",
    "        print(\"hello\")\n",
    "        if role is not None:\n",
    "            self.role_id = new_role\n",
    "            db.session.add(self)\n",
    "            db.session.commit()\n",
    "        else:\n",
    "            print(\"there was an error \" + self.first_name + str(new_role))\n",
    "    \n",
    "    def can(self, perm):\n",
    "        return self.role is not None and self.role.has_permission(perm)\n",
    "    \n",
    "    def is_administrator(self):\n",
    "        return self.can(Permission.ADMIN)\n",
    "    \n",
    "    @property\n",
    "    def password(self):\n",
    "        raise AttributeError(\"password is write only\")\n",
    "\n",
    "    @password.setter\n",
    "    def password(self, password):\n",
    "        self.password_hash = security.generate_password_hash(password)\n",
    "    def verify_password(self, password):\n",
    "        return security.check_password_hash(self.password_hash, password)\n",
    "    \n",
    "class AnonymousUser(AnonymousUserMixin):\n",
    "    def can(self, perm):\n",
    "        return False\n",
    "    def is_administrator(self):\n",
    "        return False\n",
    "\n",
    "class Comments(db.Model):\n",
    "    __tablename__ = \"Comments\"\n",
    "    id = db.Column(db.Integer(), primary_key=True,\n",
    "    autoincrement=True)\n",
    "    user_id = db.Column(db.Integer(), db.ForeignKey('Users.id'))\n",
    "    comment = db.Column(db.Unicode(256), nullable=False)\n",
    "\n",
    "class Roles(db.Model):\n",
    "    __tablename__ = \"Roles\"\n",
    "    rid = db.Column(db.Integer(), primary_key=True,autoincrement=True)\n",
    "    name = db.Column(db.Unicode(64))\n",
    "    default = db.Column(db.Boolean, default=False, index=True)\n",
    "    permissions = db.Column(db.Integer,default=0,nullable=False)\n",
    "    users = db.relationship(\"Users\", backref=\"role\", lazy=\"dynamic\")\n",
    "    \n",
    "    def __init__(self, **kwargs):\n",
    "        super(Roles, self).__init__(**kwargs)\n",
    "        if self.permissions is None:\n",
    "            self.permissions = 0\n",
    "            \n",
    "    def add_permission(self, perm):\n",
    "        if not self.has_permission(perm):\n",
    "            self.permissions += perm\n",
    "    def remove_permission(self, perm):\n",
    "        if self.has_permission(perm):\n",
    "            self.permissions -= perm\n",
    "    def reset_permissions(self):\n",
    "        self.permissions = 0\n",
    "    def has_permission(self, perm):\n",
    "            return self.permissions & perm == perm\n",
    "    \n",
    "#\n",
    "##\n",
    "###WTForm classes\n",
    "##\n",
    "#\n",
    "\n",
    "class New_User_Form(FlaskForm):\n",
    "    first_name = wtf.StringField(\"first_name\", validators=[valid.DataRequired()])\n",
    "    last_name = wtf.StringField(\"last_name\", validators=[valid.DataRequired()])\n",
    "    email = wtf.StringField(\"Email\",validators=[valid.DataRequired(), valid.Email()])\n",
    "    password = wtf.PasswordField(\"Password\",validators=[valid.DataRequired()])\n",
    "    submit = wtf.SubmitField(\"Submit\")\n",
    "    comments = wtf.TextAreaField(\"Comment\", validators=[])\n",
    "\n",
    "class LoginForm(FlaskForm):\n",
    "    email = wtf.StringField(\"Email\", validators=[valid.DataRequired(),valid.Length(1,64), valid.Email()])\n",
    "    password = wtf.PasswordField(\"Password\", validators=[valid.DataRequired()])\n",
    "    remember_me = wtf.BooleanField(\"Keep me logged in\")\n",
    "    submit = wtf.SubmitField(\"Log In\")\n",
    "    \n",
    "class RoleForm(FlaskForm):\n",
    "    email = wtf.StringField(\"Email\", validators=[valid.DataRequired(),valid.Length(1,64), valid.Email()])\n",
    "    role_name = wtf.StringField(\"Role\", validators=[valid.DataRequired()])\n",
    "    submit = wtf.SubmitField(\"change_role\")\n",
    "        \n",
    "#clearing the database\n",
    "db.drop_all()\n",
    "db.create_all()\n",
    "\n",
    "#\n",
    "##\n",
    "###app route functions    \n",
    "##\n",
    "#\n",
    "\n",
    "@app.route('/')\n",
    "def index():\n",
    "\treturn render_template('homePage.html')\n",
    "\n",
    "@app.route(\"/login\", methods=[\"GET\",\"POST\"])\n",
    "def login():\n",
    "    form = LoginForm()\n",
    "    if form.validate_on_submit():\n",
    "        user = Users.query.filter_by(email=form.email.data).first()\n",
    "        if user is not None and Users.verify_password(user,password=form.password.data):\n",
    "            login_user(user, form.remember_me.data)\n",
    "            next = request.args.get(\"next\")\n",
    "            if next is None or not next.startswith(\"/\"):\n",
    "                next = url_for(\"index\")\n",
    "            return redirect(next)\n",
    "        flash(\"Invalid Username or password.\")\n",
    "    return render_template(\"login.html\", form=form)\n",
    "\n",
    "\n",
    "@app.route(\"/admin\", methods=[\"GET\",\"POST\"])\n",
    "@login_required\n",
    "#@admin_required\n",
    "@permission_required(Permission.ADMIN)\n",
    "def for_admins_only():\n",
    "    role_form = RoleForm()\n",
    "    if role_form.validate_on_submit():\n",
    "        user = Users.query.filter_by(email=role_form.email.data).first()\n",
    "        role = Roles.query.filter_by(name=role_form.role_name.data).first()\n",
    "        if user is not None and role is not None:\n",
    "            user.change_user_role(role.rid)\n",
    "            next = request.args.get(\"next\")\n",
    "            if next is None or not next.startswith(\"/\"):\n",
    "                next = url_for(\"index\")\n",
    "            return redirect(next)\n",
    "        flash(\"Invalid Username or role\")\n",
    "        print(\"Invalid Username or role\")\n",
    "    return render_template(\"admin.html\", form=role_form)\n",
    "\n",
    "\n",
    "\n",
    "@app.route(\"/moderate\")\n",
    "@login_required\n",
    "@permission_required(Permission.MODERATE)\n",
    "def for_moderators_only():\n",
    "    return \"Congratulations on Moderator Privileges!\"\n",
    "\n",
    "@app.route(\"/secret\")\n",
    "@login_required\n",
    "def secret():\n",
    "    return \"Congratulations on being logged in!\"\n",
    "\n",
    "@app.route(\"/logout\")\n",
    "@login_required\n",
    "def logout():\n",
    "    logout_user()\n",
    "    flash(\"You have been logged out\")\n",
    "    return redirect(url_for(\"index\"))\n",
    "\n",
    "@app.route(\"/login_logout\")\n",
    "def login_logout():\n",
    "    return render_template(\"login_logout.html\"), 200\n",
    "\n",
    "@app.route(\"/raw/<int:uid>\")\n",
    "def raw(uid):\n",
    "\treturn str(users[str(uid)])\n",
    "\n",
    "@app.route(\"/add_user\", methods=[\"GET\",\"POST\"])\n",
    "def add_user():\n",
    "    User = None\n",
    "    fname,lname,email,password = None, None, None, None\n",
    "    form = New_User_Form()\n",
    "    if form.validate_on_submit():\n",
    "        fname = form.first_name.data\n",
    "        form.first_name.data = None\n",
    "        lname = form.last_name.data\n",
    "        form.last_name.data = None\n",
    "        email = form.email.data\n",
    "        form.email.data = None\n",
    "        password = form.password.data\n",
    "        form.password.data = None\n",
    "        user = Users(first_name=fname, last_name=lname, email=email,password=password)\n",
    "        db.session.add_all([user])\n",
    "        db.session.commit()\n",
    "        next = request.args.get(\"next\")\n",
    "        if next is None or not next.startswith(\"/\"):\n",
    "            next = url_for(\"index\")\n",
    "        return redirect(next)\n",
    "    return render_template(\"add_user.html\", form=form)\n",
    "\n",
    "@app.route(\"/users/<int:uid>\")\n",
    "def users(uid):\n",
    "    user = Users.query.filter_by(id=uid).first()\n",
    "    #print(help(user))\n",
    "    if (user != None):\n",
    "        return render_template(\"forum.html\",user=user), 200\n",
    "    else:\n",
    "        print(\"oops\")\n",
    "        abort(404)\n",
    "\n",
    "@app.before_first_request\n",
    "def intitialize_app():\n",
    "    newt = Roles(name=\"newt\",default=True,permissions=0)\n",
    "    follow = Roles(name=\"follow\",permissions=1)\n",
    "    comment = Roles(name=\"comment\",permissions=3)\n",
    "    write = Roles(name=\"write\",permissions=7)\n",
    "    mod = Roles(name=\"moderator\",permissions=15)\n",
    "    admin = Roles(name=\"admin\",permissions=31)\n",
    "    db.session.add_all([newt,follow,comment,write,mod,admin])\n",
    "    gal_user = Users(first_name=\"Gal\", last_name=\"Cherki\", email=\"gal.cherki@hotmail.com\",password=\"math\",role_id=6)\n",
    "    db.session.add_all([gal_user])\n",
    "    db.session.commit()\n",
    "    \n",
    "    \n",
    "        \n",
    "if __name__ == \"__main__\":\n",
    "    app.run(ssl_context=(\"cert.pem\", \"key.pem\"))"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": []
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": []
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.7.3"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 2
}
>>>>>>> fcceeb2ca596bbe985301fa9d790a2dd4135eb6b
=======
{
 "cells": [
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      " * Serving Flask app \"__main__\" (lazy loading)\n",
      " * Environment: production\n",
      "   WARNING: Do not use the development server in a production environment.\n",
      "   Use a production WSGI server instead.\n",
      " * Debug mode: off\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      " * Running on https://127.0.0.1:5000/ (Press CTRL+C to quit)\n",
      "127.0.0.1 - - [17/Nov/2019 17:41:16] \"GET / HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:41:21] \"GET /admin HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:41:25] \"POST /admin HTTP/1.1\" 302 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:41:25] \"GET / HTTP/1.1\" 200 -\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "<Roles 5>\n",
      "hello\n",
      "there was an error Gal5\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "127.0.0.1 - - [17/Nov/2019 17:42:28] \"GET /users/1 HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:42:29] \"GET /static/forum.css HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:42:29] \"GET /static/forum.js HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:44:29] \"GET /admin HTTP/1.1\" 403 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:44:38] \"GET /moderate HTTP/1.1\" 200 -\n",
      "127.0.0.1 - - [17/Nov/2019 17:44:38] \"GET /moderate HTTP/1.1\" 200 -\n"
     ]
    }
   ],
   "source": [
    "import json\n",
    "import os\n",
    "from flask import Flask, render_template, abort,redirect,request,url_for,flash\n",
    "from flask_login import login_user,logout_user, UserMixin,AnonymousUserMixin, LoginManager, login_required, current_user\n",
    "from flask_sqlalchemy import SQLAlchemy\n",
    "from flask_wtf import FlaskForm\n",
    "import wtforms as wtf\n",
    "import wtforms.validators as valid\n",
    "from functools import wraps\n",
    "import base64\n",
    "from werkzeug import security\n",
    "from hashlib import sha512\n",
    "from cryptography.fernet import Fernet\n",
    "#google oauth\n",
    "\n",
    "app = Flask(__name__)\n",
    "app.config[\"SECRET_KEY\"] = \"oEHYBreJ2QSefBdUhD19PkxC\"\n",
    "login_manager = LoginManager()\n",
    "login_manager.login_view = \"login\"\n",
    "login_manager.init_app(app)\n",
    "\n",
    "\n",
    "@login_manager.user_loader\n",
    "def load_user(user_id):\n",
    "    return Users.query.get(int(user_id))\n",
    "\n",
    "appdir = os.path.abspath(os.path.dirname(\"Gal's_webprogramming_project.ipynb\"))\n",
    "\n",
    "# configure app’s database access\n",
    "app.config[\"SQLALCHEMY_DATABASE_URI\"] = \\\n",
    "\tf\"sqlite:///{os.path.join(appdir, 'library.db')}\"\n",
    "app.config[\"SQLALCHEMY_TRACK_MODIFICATIONS\"] = False\n",
    "\n",
    "# initialize the SQLAlchemy database adaptor\n",
    "db = SQLAlchemy(app)\n",
    "\n",
    "\n",
    "#\n",
    "##\n",
    "### permission requirements\n",
    "##\n",
    "#\n",
    "\n",
    "class Permission(object):\n",
    "    FOLLOW = 1\n",
    "    COMMENT = 2\n",
    "    WRITE = 4\n",
    "    MODERATE = 8\n",
    "    ADMIN = 16\n",
    "\n",
    "def permission_required(perm):\n",
    "    def decorator(f):\n",
    "        @wraps(f)\n",
    "        def decorated_function(*args, **kwargs):\n",
    "            if not current_user.can(perm):\n",
    "                abort(403)\n",
    "            return f(*args, **kwargs)\n",
    "        return decorated_function\n",
    "    return decorator\n",
    "    \n",
    "def admin_required(f):\n",
    "    return permission_required(Permission.ADMIN)(f)\n",
    "\n",
    "#\n",
    "##\n",
    "###Database classes\n",
    "##\n",
    "#\n",
    "\n",
    "class Users(UserMixin, db.Model):\n",
    "    __tablename__ = \"Users\"\n",
    "    id = db.Column(db.Integer(), primary_key=True,\n",
    "    autoincrement=True)\n",
    "    first_name = db.Column(db.Unicode(64), nullable=False)\n",
    "    last_name = db.Column(db.Unicode(64), nullable=False)\n",
    "    email = db.Column(db.Unicode(256), nullable=False,unique=True)\n",
    "    password_hash = db.Column(db.String(128))\n",
    "    role_id = db.Column(db.Integer, db.ForeignKey(\"Roles.rid\"), default=1)\n",
    "    \n",
    "    def change_user_role(self, new_role):\n",
    "        role = Roles.query.filter_by(rid=new_role).first()\n",
    "        print(role)\n",
    "        print(\"hello\")\n",
    "        if role is not None:\n",
    "            self.role_id = new_role\n",
    "            db.session.add(self)\n",
    "            db.session.commit()\n",
    "        else:\n",
    "            print(\"there was an error \" + self.first_name + str(new_role))\n",
    "    \n",
    "    def can(self, perm):\n",
    "        return self.role is not None and self.role.has_permission(perm)\n",
    "    \n",
    "    def is_administrator(self):\n",
    "        return self.can(Permission.ADMIN)\n",
    "    \n",
    "    @property\n",
    "    def password(self):\n",
    "        raise AttributeError(\"password is write only\")\n",
    "\n",
    "    @password.setter\n",
    "    def password(self, password):\n",
    "        self.password_hash = security.generate_password_hash(password)\n",
    "    def verify_password(self, password):\n",
    "        return security.check_password_hash(self.password_hash, password)\n",
    "    \n",
    "class AnonymousUser(AnonymousUserMixin):\n",
    "    def can(self, perm):\n",
    "        return False\n",
    "    def is_administrator(self):\n",
    "        return False\n",
    "\n",
    "class Comments(db.Model):\n",
    "    __tablename__ = \"Comments\"\n",
    "    id = db.Column(db.Integer(), primary_key=True,\n",
    "    autoincrement=True)\n",
    "    user_id = db.Column(db.Integer(), db.ForeignKey('Users.id'))\n",
    "    comment = db.Column(db.Unicode(256), nullable=False)\n",
    "\n",
    "class Roles(db.Model):\n",
    "    __tablename__ = \"Roles\"\n",
    "    rid = db.Column(db.Integer(), primary_key=True,autoincrement=True)\n",
    "    name = db.Column(db.Unicode(64))\n",
    "    default = db.Column(db.Boolean, default=False, index=True)\n",
    "    permissions = db.Column(db.Integer,default=0,nullable=False)\n",
    "    users = db.relationship(\"Users\", backref=\"role\", lazy=\"dynamic\")\n",
    "    \n",
    "    def __init__(self, **kwargs):\n",
    "        super(Roles, self).__init__(**kwargs)\n",
    "        if self.permissions is None:\n",
    "            self.permissions = 0\n",
    "            \n",
    "    def add_permission(self, perm):\n",
    "        if not self.has_permission(perm):\n",
    "            self.permissions += perm\n",
    "    def remove_permission(self, perm):\n",
    "        if self.has_permission(perm):\n",
    "            self.permissions -= perm\n",
    "    def reset_permissions(self):\n",
    "        self.permissions = 0\n",
    "    def has_permission(self, perm):\n",
    "            return self.permissions & perm == perm\n",
    "    \n",
    "#\n",
    "##\n",
    "###WTForm classes\n",
    "##\n",
    "#\n",
    "\n",
    "class New_User_Form(FlaskForm):\n",
    "    first_name = wtf.StringField(\"first_name\", validators=[valid.DataRequired()])\n",
    "    last_name = wtf.StringField(\"last_name\", validators=[valid.DataRequired()])\n",
    "    email = wtf.StringField(\"Email\",validators=[valid.DataRequired(), valid.Email()])\n",
    "    password = wtf.PasswordField(\"Password\",validators=[valid.DataRequired()])\n",
    "    submit = wtf.SubmitField(\"Submit\")\n",
    "    comments = wtf.TextAreaField(\"Comment\", validators=[])\n",
    "\n",
    "class LoginForm(FlaskForm):\n",
    "    email = wtf.StringField(\"Email\", validators=[valid.DataRequired(),valid.Length(1,64), valid.Email()])\n",
    "    password = wtf.PasswordField(\"Password\", validators=[valid.DataRequired()])\n",
    "    remember_me = wtf.BooleanField(\"Keep me logged in\")\n",
    "    submit = wtf.SubmitField(\"Log In\")\n",
    "    \n",
    "class RoleForm(FlaskForm):\n",
    "    email = wtf.StringField(\"Email\", validators=[valid.DataRequired(),valid.Length(1,64), valid.Email()])\n",
    "    role_name = wtf.StringField(\"Role\", validators=[valid.DataRequired()])\n",
    "    submit = wtf.SubmitField(\"change_role\")\n",
    "        \n",
    "#clearing the database\n",
    "db.drop_all()\n",
    "db.create_all()\n",
    "\n",
    "#\n",
    "##\n",
    "###app route functions    \n",
    "##\n",
    "#\n",
    "\n",
    "@app.route('/')\n",
    "def index():\n",
    "\treturn render_template('home.html')\n",
    "\n",
    "@app.route(\"/login\", methods=[\"GET\",\"POST\"])\n",
    "def login():\n",
    "    form = LoginForm()\n",
    "    if form.validate_on_submit():\n",
    "        user = Users.query.filter_by(email=form.email.data).first()\n",
    "        if user is not None and Users.verify_password(user,password=form.password.data):\n",
    "            login_user(user, form.remember_me.data)\n",
    "            next = request.args.get(\"next\")\n",
    "            if next is None or not next.startswith(\"/\"):\n",
    "                next = url_for(\"index\")\n",
    "            return redirect(next)\n",
    "        flash(\"Invalid Username or password.\")\n",
    "    return render_template(\"login.html\", form=form)\n",
    "\n",
    "\n",
    "@app.route(\"/admin\", methods=[\"GET\",\"POST\"])\n",
    "@login_required\n",
    "#@admin_required\n",
    "@permission_required(Permission.ADMIN)\n",
    "def for_admins_only():\n",
    "    role_form = RoleForm()\n",
    "    if role_form.validate_on_submit():\n",
    "        user = Users.query.filter_by(email=role_form.email.data).first()\n",
    "        role = Roles.query.filter_by(name=role_form.role_name.data).first()\n",
    "        if user is not None and role is not None:\n",
    "            user.change_user_role(role.rid)\n",
    "            next = request.args.get(\"next\")\n",
    "            if next is None or not next.startswith(\"/\"):\n",
    "                next = url_for(\"index\")\n",
    "            return redirect(next)\n",
    "        flash(\"Invalid Username or role\")\n",
    "        print(\"Invalid Username or role\")\n",
    "    return render_template(\"admin.html\", form=role_form)\n",
    "\n",
    "\n",
    "\n",
    "@app.route(\"/moderate\")\n",
    "@login_required\n",
    "@permission_required(Permission.MODERATE)\n",
    "def for_moderators_only():\n",
    "    return \"Congratulations on Moderator Privileges!\"\n",
    "\n",
    "@app.route(\"/secret\")\n",
    "@login_required\n",
    "def secret():\n",
    "    return \"Congratulations on being logged in!\"\n",
    "\n",
    "@app.route(\"/logout\")\n",
    "@login_required\n",
    "def logout():\n",
    "    logout_user()\n",
    "    flash(\"You have been logged out\")\n",
    "    return redirect(url_for(\"index\"))\n",
    "\n",
    "@app.route(\"/login_logout\")\n",
    "def login_logout():\n",
    "    return render_template(\"login_logout.html\"), 200\n",
    "\n",
    "@app.route(\"/raw/<int:uid>\")\n",
    "def raw(uid):\n",
    "\treturn str(users[str(uid)])\n",
    "\n",
    "@app.route(\"/add_user\", methods=[\"GET\",\"POST\"])\n",
    "def add_user():\n",
    "    User = None\n",
    "    fname,lname,email,password = None, None, None, None\n",
    "    form = New_User_Form()\n",
    "    if form.validate_on_submit():\n",
    "        fname = form.first_name.data\n",
    "        form.first_name.data = None\n",
    "        lname = form.last_name.data\n",
    "        form.last_name.data = None\n",
    "        email = form.email.data\n",
    "        form.email.data = None\n",
    "        password = form.password.data\n",
    "        form.password.data = None\n",
    "        user = Users(first_name=fname, last_name=lname, email=email,password=password)\n",
    "        db.session.add_all([user])\n",
    "        db.session.commit()\n",
    "        next = request.args.get(\"next\")\n",
    "        if next is None or not next.startswith(\"/\"):\n",
    "            next = url_for(\"index\")\n",
    "        return redirect(next)\n",
    "    return render_template(\"add_user.html\", form=form)\n",
    "\n",
    "@app.route(\"/users/<int:uid>\")\n",
    "def users(uid):\n",
    "    user = Users.query.filter_by(id=uid).first()\n",
    "    #print(help(user))\n",
    "    if (user != None):\n",
    "        return render_template(\"forum.html\",user=user), 200\n",
    "    else:\n",
    "        print(\"oops\")\n",
    "        abort(404)\n",
    "\n",
    "@app.before_first_request\n",
    "def intitialize_app():\n",
    "    newt = Roles(name=\"newt\",default=True,permissions=0)\n",
    "    follow = Roles(name=\"follow\",permissions=1)\n",
    "    comment = Roles(name=\"comment\",permissions=3)\n",
    "    write = Roles(name=\"write\",permissions=7)\n",
    "    mod = Roles(name=\"moderator\",permissions=15)\n",
    "    admin = Roles(name=\"admin\",permissions=31)\n",
    "    db.session.add_all([newt,follow,comment,write,mod,admin])\n",
    "    gal_user = Users(first_name=\"Gal\", last_name=\"Cherki\", email=\"gal.cherki@hotmail.com\",password=\"math\",role_id=6)\n",
    "    db.session.add_all([gal_user])\n",
    "    db.session.commit()\n",
    "    \n",
    "    \n",
    "        \n",
    "if __name__ == \"__main__\":\n",
    "    app.run(ssl_context=(\"cert.pem\", \"key.pem\"))"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": []
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": []
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.7.3"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 2
}
>>>>>>> 5df15a29749471322f8b5bd330d9d3f4203dc4f5