Enhanced dashboard, bot adding handeling, list members, embed settings, etc

titanembeds/blueprints/user/user.py

@@ -2,7 +2,8 @@ from flask import Blueprint, request, redirect, jsonify, abort, session, url_for
 from requests_oauthlib import OAuth2Session
 from config import config
 from titanembeds.decorators import discord_users_only
-from titanembeds.utils import discord_api
+from titanembeds.utils import discord_api, cache, make_cache_key, make_guilds_cache_key
+from titanembeds.database import db, Guilds, UnauthenticatedUsers, UnauthenticatedBans
 
 user = Blueprint("user", __name__)
 redirect_url = config['app-base-url'] + "/user/callback"
@@ -11,6 +12,9 @@ token_url = "https://discordapp.com/api/oauth2/token"
 avatar_base_url = "https://cdn.discordapp.com/avatars/"
 guild_icon_url = "https://cdn.discordapp.com/icons/"
 
+def update_user_token(discord_token):
+    session['user_keys'] = discord_token
+
 def make_authenticated_session(token=None, state=None, scope=None):
     return OAuth2Session(
         client_id=config['client-id'],
@@ -18,6 +22,12 @@ def make_authenticated_session(token=None, state=None, scope=None):
         state=state,
         scope=scope,
         redirect_uri=url_for("user.callback", _external=True),
+        auto_refresh_kwargs={
+            'client_id': config['client-id'],
+            'client_secret': config['client-secret'],
+        },
+        auto_refresh_url=token_url,
+        token_updater=update_user_token,
     )
 
 def discordrest_from_user(endpoint):
@@ -36,19 +46,50 @@ def get_current_authenticated_user():
 def user_has_permission(permission, index):
     return bool((int(permission) >> index) & 1)
 
+@cache.cached(timeout=120, key_prefix=make_guilds_cache_key)
 def get_user_guilds():
     req = discordrest_from_user("/users/@me/guilds")
     return req
 
 def get_user_managed_servers():
-    guilds = get_user_guilds().json()
+    guilds = get_user_guilds()
+    if guilds.status_code != 200:
+        print(guilds.text)
+        print(guilds.headers)
+        abort(guilds.status_code)
+    guilds = guilds.json()
     filtered = []
     for guild in guilds:
         permission = guild['permissions'] # Manage Server, Ban Members, Kick Members
         if guild['owner'] or user_has_permission(permission, 5) or user_has_permission(permission, 2) or user_has_permission(permission, 1):
             filtered.append(guild)
+    filtered = sorted(filtered, key=lambda guild: guild['name'])
     return filtered
 
+def get_user_managed_servers_safe():
+    guilds = get_user_managed_servers()
+    if guilds:
+        return guilds
+    return []
+
+def get_user_managed_servers_id():
+    guilds = get_user_managed_servers_safe()
+    ids=[]
+    for guild in guilds:
+        ids.append(guild['id'])
+    return ids
+
+def check_user_can_administrate_guild(guild_id):
+    guilds = get_user_managed_servers_id()
+    return guild_id in guilds
+
+def check_user_permission(guild_id, id):
+    guilds = get_user_managed_servers_safe()
+    for guild in guilds:
+        if guild['id'] == guild_id:
+            return user_has_permission(guild['permissions'], id)
+    return False
+
 def generate_avatar_url(id, av):
     return avatar_base_url + str(id) + '/' + str(av) + '.jpg'
 
@@ -90,28 +131,83 @@ def callback():
     session['username'] = user['username']
     session['avatar'] = generate_avatar_url(user['id'], user['avatar'])
     if session["redirect"]:
-        return redirect(session["redirect"])
+        redir = session["redirect"]
+        session.pop('redirect', None)
+        return redirect(redir)
     return redirect(url_for("user.dashboard"))
 
 @user.route('/logout', methods=["GET"])
 def logout():
+    redir = session.get("redirect", None)
     session.clear()
+    if redir:
+        session['redirect'] = redir
+        return redirect(session['redirect'])
     return redirect(url_for("index"))
 
 @user.route("/dashboard")
 @discord_users_only()
 def dashboard():
-    return render_template("dashboard.html.jinja2", servers=get_user_managed_servers(), icon_generate=generate_guild_icon_url)
+    guilds = get_user_managed_servers()
+    if not guilds:
+        session["redirect"] = url_for("user.dashboard")
+        return redirect(url_for("user.logout"))
+    return render_template("dashboard.html.j2", servers=guilds, icon_generate=generate_guild_icon_url)
 
-@user.route("/administrate_guild/<guild_id>")
+@user.route("/administrate_guild/<guild_id>", methods=["GET"])
 @discord_users_only()
 def administrate_guild(guild_id):
+    if not check_user_can_administrate_guild(guild_id):
+        return redirect(url_for("user.dashboard"))
     guild = discord_api.get_guild(guild_id)
-    if guild['code'] == 403:
+    if guild['code'] != 200:
         return redirect(generate_bot_invite_url(guild_id))
-    return str(guild)
+    db_guild = Guilds.query.filter_by(guild_id=guild_id).first()
+    if not db_guild:
+        db_guild = Guilds(guild_id)
+        db.session.add(db_guild)
+        db.session.commit()
+    permissions=[]
+    if check_user_permission(guild_id, 5):
+        permissions.append("Manage Embed Settings")
+    if check_user_permission(guild_id, 2):
+        permissions.append("Ban Members")
+    if check_user_permission(guild_id, 1):
+        permissions.append("Kick Members")
+    all_members = db.session.query(UnauthenticatedUsers).filter(UnauthenticatedUsers.guild_id == guild_id).all()
+    all_bans = db.session.query(UnauthenticatedBans).filter(UnauthenticatedBans.guild_id == guild_id).all()
+    users = prepare_guild_members_list(all_members, all_bans)
+    return render_template("administrate_guild.html.j2", guild=guild['content'], members=users, permissions=permissions)
 
 @user.route('/me')
 @discord_users_only()
 def me():
     return jsonify(user=get_current_authenticated_user())
+
+def prepare_guild_members_list(members, bans):
+    all_users = []
+    for member in members:
+        user = {
+            "id": member.id,
+            "username": member.username,
+            "discrim": member.discriminator,
+            "ip": member.ip_address,
+            "last_visit": member.last_timestamp,
+            "kicked": member.revoked,
+            "banned": False,
+            "banned_timestamp": None,
+            "banned_by": None,
+            "banned_reason": None,
+            "ban_lifted_by": None,
+        }
+        for banned in bans:
+            if banned.ip_address == member.ip_address:
+                if banned.lifter_id is None:
+                    user['banned'] = True
+                user["banned_timestamp"] = banned.timestamp
+                user['banned_by'] = banned.placer_id
+                user['banned_reason'] = banned.reason
+                user['ban_lifted_by'] = banned.lifter_id
+            continue
+        all_users.append(user)
+    return all_users