refactor security to Flask-Security - Part 1

eveai_app/views/user_views.py

@@ -1,18 +1,17 @@
 # from . import user_bp
 from datetime import datetime as dt, timezone as tz
 from flask import request, redirect, url_for, flash, render_template, Blueprint, session
-from flask_jwt_extended import verify_jwt_in_request, get_jwt, get_jwt_identity, jwt_required
+from flask_security import hash_password
+
 from ..models.user import User, Tenant
-from ..extensions import db, bcrypt
+from ..extensions import db
 from .user_forms import TenantForm, UserForm
 from ..utils.database import Database
-from ..utils.security import admin_required, super_required, tester_required
 
 user_bp = Blueprint('user_bp', __name__, url_prefix='/user')
 
 
 @user_bp.route('/tenant', methods=['GET', 'POST'])
-@super_required
 def tenant():
     if request.method == 'POST':
         # Handle the required attributes
@@ -65,61 +64,39 @@ def tenant():
 
 
 @user_bp.route('/user', methods=['GET', 'POST'])
-@admin_required
-@jwt_required()
 def user():
-    if request.method == 'POST':
-        # Handle the required attributes
-        username = request.form.get('user_name')
-        email = request.form.get('email')
-        password = request.form.get('password')
-        first_name = request.form.get('first_name')
-        last_name = request.form.get('last_name')
-        error = None
-
-        if not username:
-            error = 'Username is required.'
-        elif not email:
-            error = 'Email is required.'
-        elif not password:
-            error = 'Password is required.'
-        elif not first_name:
-            error = 'First name is required.'
-        elif not last_name:
-            error = 'Last name is required.'
-        if error is None:
-            password_hash = bcrypt.generate_password_hash(password).decode('utf-8')
-
-            # Create new user if there is no error
-            new_user = User(user_name=username, email=email, password=password_hash, first_name=first_name,
-                            last_name=last_name)
-
-            # Handle optional attributes
-            new_user.is_active = bool(request.form.get('is_active'))
-            new_user.is_tester = bool(request.form.get('is_tester'))
-            new_user.is_admin = bool(request.form.get('is_admin'))
-            new_user.is_super = bool(request.form.get('is_super'))
-            new_user.valid_to = request.form.get('valid_to')
-
-            # Handle Timestamps
-            timestamp = dt.now(tz.utc)
-            new_user.created_at = timestamp
-            new_user.updated_at = timestamp
-
-            # Handle the relations
-            tenant_id = request.form.get('tenant_id')
-            the_tenant = Tenant.query.get(tenant_id)
-            new_user.tenant = the_tenant
-
-            # Add the new user to the database and commit the changes
-
-            try:
-                db.session.add(new_user)
-                db.session.commit()
-            except Exception as e:
-                error = e.args
-
-        flash(error) if error else flash('User added successfully.')
-
     form = UserForm()
+    if form.validate_on_submit():
+        hashed_password = hash_password(form.password.data)
+        new_user = User(
+            user_name=form.user_name.data,
+            email=form.email.data,
+            password=hashed_password,
+            first_name=form.first_name.data,
+            last_name=form.last_name.data,
+            is_active=form.is_active.data,
+            valid_to=form.valid_to.data,
+            tenant_id=form.tenant_id.data
+        )
+
+        timestamp = dt.now(tz.utc)
+        new_user.created_at = timestamp
+        new_user.updated_at = timestamp
+
+        # Handle the relations
+        tenant_id = request.form.get('tenant_id')
+        the_tenant = Tenant.query.get(tenant_id)
+        new_user.tenant = the_tenant
+
+        # Add the new user to the database and commit the changes
+
+        try:
+            db.session.add(new_user)
+            db.session.commit()
+            flash('User added successfully.')
+            # return redirect(url_for('user/user'))
+        except Exception as e:
+            db.session.rollback()
+            flash(f'Failed to add user. Error: {str(e)}')
+
     return render_template('user/user.html', form=form)