153 lines
7.4 KiB
Python
153 lines
7.4 KiB
Python
import jwt, json
|
|
from django.contrib.auth import get_user_model
|
|
from rest_framework.decorators import api_view
|
|
from sqlalchemy import create_engine, insert
|
|
from sqlalchemy.sql import text
|
|
from django.http import JsonResponse
|
|
import ras.settings
|
|
|
|
@api_view(['POST'])
|
|
def login(request):
|
|
username = request.POST.get('username')
|
|
password = request.POST.get('password')
|
|
|
|
User = get_user_model()
|
|
|
|
try:
|
|
user = User.objects.get(username=username)
|
|
|
|
if user.check_password(password):
|
|
payload = {'id': user.id, 'username': user.username}
|
|
jwt_token = {'token': jwt.encode(payload, 'secret', algorithm='HS256')}
|
|
return JsonResponse(jwt_token)
|
|
else:
|
|
return JsonResponse({'error': 'Wrong credentials'})
|
|
except User.DoesNotExist:
|
|
return JsonResponse({'error': 'User does not exist'})
|
|
|
|
@api_view(['POST'])
|
|
def addChallenge(request):
|
|
if(request.headers.get('Authorization')):
|
|
token = request.headers.get('Authorization').split(' ')[1]
|
|
|
|
try:
|
|
User = get_user_model()
|
|
payload = jwt.decode(token, 'secret', algorithms=['HS256'])
|
|
user = User.objects.get(id=payload['id'])
|
|
|
|
if(user):
|
|
year = request.POST.get('year')
|
|
challenge = request.POST.get('challenge')
|
|
|
|
if(year and challenge):
|
|
engine = create_engine('mysql+mysqldb://' + ras.settings.DATABASES['default']['USER'] + ':' + ras.settings.DATABASES['default']['PASSWORD'] + '@' + ras.settings.DATABASES['default']['HOST'] + ':3306/' + ras.settings.DATABASES['default']['NAME'])
|
|
conn = engine.connect()
|
|
conn.execute(text("INSERT INTO book_challenge (year, nrofbooks) VALUES ('" + str(year) + "', '" + str(challenge) + "')"))
|
|
return JsonResponse("OK", safe=False)
|
|
else:
|
|
return JsonResponse({'error': 'No year and challenge detected'}, safe=False)
|
|
else:
|
|
return JsonResponse({'error': 'No user detected'}, safe=False)
|
|
except (jwt.DecodeError, User.DoesNotExist):
|
|
return JsonResponse({'error': 'Token invalid'}, safe=False)
|
|
|
|
@api_view(['DELETE'])
|
|
def deleteChallenge(request, id = None):
|
|
|
|
if(request.headers.get('Authorization')):
|
|
token = request.headers.get('Authorization').split(' ')[1]
|
|
|
|
try:
|
|
User = get_user_model()
|
|
payload = jwt.decode(token, 'secret', algorithms=['HS256'])
|
|
user = User.objects.get(id=payload['id'])
|
|
|
|
if(user):
|
|
|
|
if(id):
|
|
engine = create_engine('mysql+mysqldb://' + ras.settings.DATABASES['default']['USER'] + ':' + ras.settings.DATABASES['default']['PASSWORD'] + '@' + ras.settings.DATABASES['default']['HOST'] + ':3306/' + ras.settings.DATABASES['default']['NAME'])
|
|
conn = engine.connect()
|
|
conn.execute(text("DELETE FROM book_challenge WHERE id = " + str(id)))
|
|
return JsonResponse("OK", safe=False)
|
|
else:
|
|
return JsonResponse({'error': 'No challengeid detected'}, safe=False)
|
|
else:
|
|
return JsonResponse({'error': 'No user detected'}, safe=False)
|
|
except (jwt.DecodeError, User.DoesNotExist):
|
|
return JsonResponse({'error': 'Token invalid'}, safe=False)
|
|
|
|
@api_view(['POST'])
|
|
def addBook(request):
|
|
if(request.headers.get('Authorization')):
|
|
token = request.headers.get('Authorization').split(' ')[1]
|
|
book = request.POST.get('book')
|
|
book = json.loads(book)
|
|
|
|
try:
|
|
User = get_user_model()
|
|
payload = jwt.decode(token, 'secret', algorithms=['HS256'])
|
|
user = User.objects.get(id=payload['id'])
|
|
|
|
if(user):
|
|
engine = create_engine('mysql+mysqldb://' + ras.settings.DATABASES['default']['USER'] + ':' + ras.settings.DATABASES['default']['PASSWORD'] + '@' + ras.settings.DATABASES['default']['HOST'] + ':3306/' + ras.settings.DATABASES['default']['NAME'])
|
|
conn = engine.connect()
|
|
conn.execute(text("INSERT INTO api_books (name, author, genre, country, country_code, pages, readed, rating) VALUES ('" + str(book['name']) + "', '" + str(book['author']) + "', '" + str(book['genre']) + "', '" + str(book['country']) + "', '" + str(book['country_code']) + "', " + str(book['pages']) + ", '" + str(book['readed']) + "', " + str(book['rating']) + ")"))
|
|
return JsonResponse("OK", safe=False)
|
|
else:
|
|
return JsonResponse({'error': 'No user detected'}, safe=False)
|
|
|
|
except (jwt.DecodeError, User.DoesNotExist):
|
|
return JsonResponse({'error': 'Token invalid'}, safe=False)
|
|
else:
|
|
return JsonResponse({'error': 'testing'}, safe=False)
|
|
|
|
@api_view(['PUT'])
|
|
def updateBook(request):
|
|
if(request.headers.get('Authorization')):
|
|
token = request.headers.get('Authorization').split(' ')[1]
|
|
book = request.POST.get('book')
|
|
book = json.loads(book)
|
|
bookid = request.headers.get('bookid')
|
|
|
|
try:
|
|
User = get_user_model()
|
|
payload = jwt.decode(token, 'secret', algorithms=['HS256'])
|
|
user = User.objects.get(id=payload['id'])
|
|
|
|
if(user):
|
|
engine = create_engine('mysql+mysqldb://' + ras.settings.DATABASES['default']['USER'] + ':' + ras.settings.DATABASES['default']['PASSWORD'] + '@' + ras.settings.DATABASES['default']['HOST'] + ':3306/' + ras.settings.DATABASES['default']['NAME'])
|
|
conn = engine.connect()
|
|
conn.execute(text("UPDATE api_books set name='" + str(book['name']) + "', author='" + str(book['author']) + "', genre='" + str(book['genre']) + "', country='" + str(book['country']) + "', country_code='" + str(book['country_code']) + "', pages='" + str(book['pages']) + "', readed='" + str(book['readed']) + "', rating='" + str(book['rating']) + "' WHERE id=" + str(bookid)))
|
|
|
|
return JsonResponse("OK", safe=False)
|
|
else:
|
|
return JsonResponse({'error': 'No user detected'}, safe=False)
|
|
|
|
except (jwt.DecodeError, User.DoesNotExist):
|
|
return JsonResponse({'error': 'Token invalid'}, safe=False)
|
|
else:
|
|
return JsonResponse({'error': 'No Token'}, safe=False)
|
|
|
|
@api_view(['DELETE'])
|
|
def deleteBook(request):
|
|
if(request.headers.get('Authorization')):
|
|
token = request.headers.get('Authorization').split(' ')[1]
|
|
bookid = request.headers.get('bookid')
|
|
|
|
try:
|
|
User = get_user_model()
|
|
payload = jwt.decode(token, 'secret', algorithms=['HS256'])
|
|
user = User.objects.get(id=payload['id'])
|
|
|
|
if(user):
|
|
engine = create_engine('mysql+mysqldb://' + ras.settings.DATABASES['default']['USER'] + ':' + ras.settings.DATABASES['default']['PASSWORD'] + '@' + ras.settings.DATABASES['default']['HOST'] + ':3306/' + ras.settings.DATABASES['default']['NAME'])
|
|
conn = engine.connect()
|
|
conn.execute(text("DELETE FROM api_books WHERE id = " + str(bookid)))
|
|
return JsonResponse("OK", safe=False)
|
|
else:
|
|
return JsonResponse({'error': 'No user detected'}, safe=False)
|
|
|
|
except (jwt.DecodeError, User.DoesNotExist):
|
|
return JsonResponse({'error': 'Token invalid'}, safe=False)
|
|
else:
|
|
return JsonResponse({'error': 'No Token'}, safe=False) |