mirror of
https://github.com/simple-login/app.git
synced 2024-11-14 08:01:13 +01:00
38 lines
1.3 KiB
Python
38 lines
1.3 KiB
Python
"""
|
|
Allow user to "unsubscribe", aka block an email alias
|
|
"""
|
|
|
|
from flask import redirect, url_for, flash, request, render_template
|
|
from flask_login import login_required, current_user
|
|
|
|
from app.dashboard.base import dashboard_bp
|
|
from app.email_utils import notify_admin
|
|
from app.extensions import db
|
|
from app.models import GenEmail
|
|
|
|
|
|
@dashboard_bp.route("/unsubscribe/<gen_email_id>", methods=["GET", "POST"])
|
|
@login_required
|
|
def unsubscribe(gen_email_id):
|
|
gen_email = GenEmail.get(gen_email_id)
|
|
if not gen_email:
|
|
flash("Incorrect link. Redirect you to the home page", "warning")
|
|
return redirect(url_for("dashboard.index"))
|
|
|
|
if gen_email.user_id != current_user.id:
|
|
flash(
|
|
"You don't have access to this page. Redirect you to the home page",
|
|
"warning",
|
|
)
|
|
return redirect(url_for("dashboard.index"))
|
|
|
|
# automatic unsubscribe, according to https://tools.ietf.org/html/rfc8058
|
|
if request.method == "POST":
|
|
gen_email.enabled = False
|
|
flash(f"Alias {gen_email.email} has been blocked", "success")
|
|
db.session.commit()
|
|
|
|
notify_admin(f"User {current_user.email} has unsubscribed an alias")
|
|
return redirect(url_for("dashboard.index"))
|
|
else: # ask user confirmation
|
|
return render_template("dashboard/unsubscribe.html", alias=gen_email.email)
|