372 lines
14 KiB
Python
372 lines
14 KiB
Python
import csv
|
|
import json
|
|
from io import BytesIO, StringIO
|
|
|
|
import arrow
|
|
from flask import (
|
|
render_template,
|
|
request,
|
|
redirect,
|
|
url_for,
|
|
flash,
|
|
Response,
|
|
make_response,
|
|
)
|
|
from flask_login import login_required, current_user, logout_user
|
|
from flask_wtf import FlaskForm
|
|
from flask_wtf.file import FileField
|
|
from wtforms import StringField, validators
|
|
from wtforms.fields.html5 import EmailField
|
|
|
|
from app import s3, email_utils
|
|
from app.config import URL, FIRST_ALIAS_DOMAIN
|
|
from app.dashboard.base import dashboard_bp
|
|
from app.email_utils import (
|
|
email_can_be_used_as_mailbox,
|
|
personal_email_already_used,
|
|
)
|
|
from app.extensions import db
|
|
from app.log import LOG
|
|
from app.models import (
|
|
PlanEnum,
|
|
File,
|
|
ResetPasswordCode,
|
|
EmailChange,
|
|
User,
|
|
Alias,
|
|
DeletedAlias,
|
|
CustomDomain,
|
|
Client,
|
|
AliasGeneratorEnum,
|
|
ManualSubscription,
|
|
SenderFormatEnum,
|
|
PublicDomain,
|
|
)
|
|
from app.utils import random_string
|
|
|
|
|
|
class SettingForm(FlaskForm):
|
|
name = StringField("Name")
|
|
profile_picture = FileField("Profile Picture")
|
|
|
|
|
|
class ChangeEmailForm(FlaskForm):
|
|
email = EmailField(
|
|
"email", validators=[validators.DataRequired(), validators.Email()]
|
|
)
|
|
|
|
|
|
class PromoCodeForm(FlaskForm):
|
|
code = StringField("Name", validators=[validators.DataRequired()])
|
|
|
|
|
|
@dashboard_bp.route("/setting", methods=["GET", "POST"])
|
|
@login_required
|
|
def setting():
|
|
form = SettingForm()
|
|
promo_form = PromoCodeForm()
|
|
change_email_form = ChangeEmailForm()
|
|
|
|
email_change = EmailChange.get_by(user_id=current_user.id)
|
|
if email_change:
|
|
pending_email = email_change.new_email
|
|
else:
|
|
pending_email = None
|
|
|
|
if request.method == "POST":
|
|
if request.form.get("form-name") == "update-email":
|
|
if change_email_form.validate():
|
|
# whether user can proceed with the email update
|
|
new_email_valid = True
|
|
if (
|
|
change_email_form.email.data.lower().strip() != current_user.email
|
|
and not pending_email
|
|
):
|
|
new_email = change_email_form.email.data.strip().lower()
|
|
|
|
# check if this email is not already used
|
|
if personal_email_already_used(new_email) or Alias.get_by(
|
|
email=new_email
|
|
):
|
|
flash(f"Email {new_email} already used", "error")
|
|
new_email_valid = False
|
|
elif not email_can_be_used_as_mailbox(new_email):
|
|
flash(
|
|
"You cannot use this email address as your personal inbox.",
|
|
"error",
|
|
)
|
|
new_email_valid = False
|
|
# a pending email change with the same email exists from another user
|
|
elif EmailChange.get_by(new_email=new_email):
|
|
other_email_change: EmailChange = EmailChange.get_by(
|
|
new_email=new_email
|
|
)
|
|
LOG.warning(
|
|
"Another user has a pending %s with the same email address. Current user:%s",
|
|
other_email_change,
|
|
current_user,
|
|
)
|
|
|
|
if other_email_change.is_expired():
|
|
LOG.d(
|
|
"delete the expired email change %s", other_email_change
|
|
)
|
|
EmailChange.delete(other_email_change.id)
|
|
db.session.commit()
|
|
else:
|
|
flash(
|
|
"You cannot use this email address as your personal inbox.",
|
|
"error",
|
|
)
|
|
new_email_valid = False
|
|
|
|
if new_email_valid:
|
|
email_change = EmailChange.create(
|
|
user_id=current_user.id,
|
|
code=random_string(
|
|
60
|
|
), # todo: make sure the code is unique
|
|
new_email=new_email,
|
|
)
|
|
db.session.commit()
|
|
send_change_email_confirmation(current_user, email_change)
|
|
flash(
|
|
"A confirmation email is on the way, please check your inbox",
|
|
"success",
|
|
)
|
|
return redirect(url_for("dashboard.setting"))
|
|
if request.form.get("form-name") == "update-profile":
|
|
if form.validate():
|
|
profile_updated = False
|
|
# update user info
|
|
if form.name.data != current_user.name:
|
|
current_user.name = form.name.data
|
|
db.session.commit()
|
|
profile_updated = True
|
|
|
|
if form.profile_picture.data:
|
|
file_path = random_string(30)
|
|
file = File.create(user_id=current_user.id, path=file_path)
|
|
|
|
s3.upload_from_bytesio(
|
|
file_path, BytesIO(form.profile_picture.data.read())
|
|
)
|
|
|
|
db.session.flush()
|
|
LOG.d("upload file %s to s3", file)
|
|
|
|
current_user.profile_picture_id = file.id
|
|
db.session.commit()
|
|
profile_updated = True
|
|
|
|
if profile_updated:
|
|
flash(f"Your profile has been updated", "success")
|
|
return redirect(url_for("dashboard.setting"))
|
|
|
|
elif request.form.get("form-name") == "change-password":
|
|
flash(
|
|
"You are going to receive an email containing instructions to change your password",
|
|
"success",
|
|
)
|
|
send_reset_password_email(current_user)
|
|
return redirect(url_for("dashboard.setting"))
|
|
|
|
elif request.form.get("form-name") == "notification-preference":
|
|
choose = request.form.get("notification")
|
|
if choose == "on":
|
|
current_user.notification = True
|
|
else:
|
|
current_user.notification = False
|
|
db.session.commit()
|
|
flash("Your notification preference has been updated", "success")
|
|
return redirect(url_for("dashboard.setting"))
|
|
|
|
elif request.form.get("form-name") == "delete-account":
|
|
LOG.warning("Delete account %s", current_user)
|
|
User.delete(current_user.id)
|
|
db.session.commit()
|
|
flash("Your account has been deleted", "success")
|
|
logout_user()
|
|
return redirect(url_for("auth.register"))
|
|
|
|
elif request.form.get("form-name") == "change-alias-generator":
|
|
scheme = int(request.form.get("alias-generator-scheme"))
|
|
if AliasGeneratorEnum.has_value(scheme):
|
|
current_user.alias_generator = scheme
|
|
db.session.commit()
|
|
flash("Your preference has been updated", "success")
|
|
return redirect(url_for("dashboard.setting"))
|
|
|
|
elif request.form.get("form-name") == "change-random-alias-default-domain":
|
|
default_domain = request.form.get("random-alias-default-domain")
|
|
|
|
if default_domain:
|
|
public_domain: PublicDomain = PublicDomain.get_by(domain=default_domain)
|
|
if public_domain:
|
|
if public_domain.premium_only and not current_user.is_premium():
|
|
flash("You cannot use this domain", "error")
|
|
return redirect(url_for("dashboard.setting"))
|
|
|
|
# make sure only default_random_alias_domain_id or default_random_alias_public_domain_id is set
|
|
current_user.default_random_alias_public_domain_id = (
|
|
public_domain.id
|
|
)
|
|
current_user.default_random_alias_domain_id = None
|
|
else:
|
|
custom_domain = CustomDomain.get_by(domain=default_domain)
|
|
if custom_domain:
|
|
# sanity check
|
|
if (
|
|
custom_domain.user_id != current_user.id
|
|
or not custom_domain.verified
|
|
):
|
|
LOG.exception(
|
|
"%s cannot use domain %s", current_user, default_domain
|
|
)
|
|
else:
|
|
# make sure only default_random_alias_domain_id or
|
|
# default_random_alias_public_domain_id is set
|
|
current_user.default_random_alias_domain_id = (
|
|
custom_domain.id
|
|
)
|
|
current_user.default_random_alias_public_domain_id = None
|
|
|
|
else:
|
|
current_user.default_random_alias_domain_id = None
|
|
current_user.default_random_alias_public_domain_id = None
|
|
|
|
db.session.commit()
|
|
flash("Your preference has been updated", "success")
|
|
return redirect(url_for("dashboard.setting"))
|
|
|
|
elif request.form.get("form-name") == "change-sender-format":
|
|
sender_format = int(request.form.get("sender-format"))
|
|
if SenderFormatEnum.has_value(sender_format):
|
|
current_user.sender_format = sender_format
|
|
db.session.commit()
|
|
flash("Your sender format preference has been updated", "success")
|
|
db.session.commit()
|
|
return redirect(url_for("dashboard.setting"))
|
|
|
|
elif request.form.get("form-name") == "replace-ra":
|
|
choose = request.form.get("replace-ra")
|
|
if choose == "on":
|
|
current_user.replace_reverse_alias = True
|
|
else:
|
|
current_user.replace_reverse_alias = False
|
|
db.session.commit()
|
|
flash("Your preference has been updated", "success")
|
|
return redirect(url_for("dashboard.setting"))
|
|
|
|
elif request.form.get("form-name") == "export-data":
|
|
data = {
|
|
"email": current_user.email,
|
|
"name": current_user.name,
|
|
"aliases": [],
|
|
"apps": [],
|
|
"custom_domains": [],
|
|
}
|
|
|
|
for alias in Alias.filter_by(user_id=current_user.id).all(): # type: Alias
|
|
data["aliases"].append(dict(email=alias.email, enabled=alias.enabled))
|
|
|
|
for custom_domain in CustomDomain.filter_by(user_id=current_user.id).all():
|
|
data["custom_domains"].append(custom_domain.domain)
|
|
|
|
for app in Client.filter_by(user_id=current_user.id): # type: Client
|
|
data["apps"].append(
|
|
dict(name=app.name, home_url=app.home_url, published=app.published)
|
|
)
|
|
|
|
return Response(
|
|
json.dumps(data),
|
|
mimetype="text/json",
|
|
headers={"Content-Disposition": "attachment;filename=data.json"},
|
|
)
|
|
elif request.form.get("form-name") == "export-alias":
|
|
data = [["alias", "note", "enabled"]]
|
|
for alias in Alias.filter_by(user_id=current_user.id).all(): # type: Alias
|
|
data.append([alias.email, alias.note, alias.enabled])
|
|
|
|
si = StringIO()
|
|
cw = csv.writer(si)
|
|
cw.writerows(data)
|
|
output = make_response(si.getvalue())
|
|
output.headers["Content-Disposition"] = "attachment; filename=aliases.csv"
|
|
output.headers["Content-type"] = "text/csv"
|
|
return output
|
|
|
|
manual_sub = ManualSubscription.get_by(user_id=current_user.id)
|
|
return render_template(
|
|
"dashboard/setting.html",
|
|
form=form,
|
|
PlanEnum=PlanEnum,
|
|
SenderFormatEnum=SenderFormatEnum,
|
|
promo_form=promo_form,
|
|
change_email_form=change_email_form,
|
|
pending_email=pending_email,
|
|
AliasGeneratorEnum=AliasGeneratorEnum,
|
|
manual_sub=manual_sub,
|
|
FIRST_ALIAS_DOMAIN=FIRST_ALIAS_DOMAIN,
|
|
)
|
|
|
|
|
|
def send_reset_password_email(user):
|
|
"""
|
|
generate a new ResetPasswordCode and send it over email to user
|
|
"""
|
|
# the activation code is valid for 1h
|
|
reset_password_code = ResetPasswordCode.create(
|
|
user_id=user.id, code=random_string(60)
|
|
)
|
|
db.session.commit()
|
|
|
|
reset_password_link = f"{URL}/auth/reset_password?code={reset_password_code.code}"
|
|
|
|
email_utils.send_reset_password_email(user.email, user.name, reset_password_link)
|
|
|
|
|
|
def send_change_email_confirmation(user: User, email_change: EmailChange):
|
|
"""
|
|
send confirmation email to the new email address
|
|
"""
|
|
|
|
link = f"{URL}/auth/change_email?code={email_change.code}"
|
|
|
|
email_utils.send_change_email(email_change.new_email, user.email, user.name, link)
|
|
|
|
|
|
@dashboard_bp.route("/resend_email_change", methods=["GET", "POST"])
|
|
@login_required
|
|
def resend_email_change():
|
|
email_change = EmailChange.get_by(user_id=current_user.id)
|
|
if email_change:
|
|
# extend email change expiration
|
|
email_change.expired = arrow.now().shift(hours=12)
|
|
db.session.commit()
|
|
|
|
send_change_email_confirmation(current_user, email_change)
|
|
flash("A confirmation email is on the way, please check your inbox", "success")
|
|
return redirect(url_for("dashboard.setting"))
|
|
else:
|
|
flash(
|
|
"You have no pending email change. Redirect back to Setting page", "warning"
|
|
)
|
|
return redirect(url_for("dashboard.setting"))
|
|
|
|
|
|
@dashboard_bp.route("/cancel_email_change", methods=["GET", "POST"])
|
|
@login_required
|
|
def cancel_email_change():
|
|
email_change = EmailChange.get_by(user_id=current_user.id)
|
|
if email_change:
|
|
EmailChange.delete(email_change.id)
|
|
db.session.commit()
|
|
flash("Your email change is cancelled", "success")
|
|
return redirect(url_for("dashboard.setting"))
|
|
else:
|
|
flash(
|
|
"You have no pending email change. Redirect back to Setting page", "warning"
|
|
)
|
|
return redirect(url_for("dashboard.setting"))
|