flaschengeist/geruecht/finanzer/routes.py

from flask import Blueprint, request, jsonify
from geruecht.finanzer import LOGGER
from datetime import datetime
import geruecht.controller.userController as uc
import geruecht.controller.accesTokenController as ac
from geruecht.model import MONEY

finanzer = Blueprint("finanzer", __name__)

accesTokenController = ac.AccesTokenController()
userController = uc.UserController()

@finanzer.route("/getFinanzerMain")
def _getFinanzer():
    """ Function for /getFinanzerMain

        Retrieves all User for the groupe 'moneymaster'

        Returns:
            A JSON-File with Users
            or ERROR 401 Permission Denied.
    """
    LOGGER.info("Get main for Finanzer")
    token = request.headers.get("Token")
    LOGGER.debug("Verify AccessToken with Token {}".format(token))
    accToken = accesTokenController.validateAccessToken(token, [MONEY])
    if accToken:
        LOGGER.debug("Get all Useres")
        users = userController.getAllUsersfromDB()
        dic = {}
        for user in users:
            LOGGER.debug("Add User {} to ReturnValue".format(user))
            dic[user.uid] = user.toJSON()
            dic[user.uid]['creditList'] = {credit.year: credit.toJSON() for credit in user.geruechte}
            LOGGER.debug("ReturnValue is {}".format(dic))
        LOGGER.info("Send main for Finanzer")
        return jsonify(dic)
    LOGGER.info("Permission Denied")
    return jsonify({"error": "permission denied"}), 401

@finanzer.route("/finanzerAddAmount", methods=['POST'])
def _addAmount():
    """ Add Amount to User

        This Function add an amount to the user with posted userID.
        If year is not posted the default is the actual Year.
        If month is not posted the default is the actual Month.

        Returns:
            JSON-File with geruecht of year
            or ERROR 401 Permission Denied
    """
    LOGGER.info("Add Amount")
    token = request.headers.get("Token")
    LOGGER.debug("Verify AccessToken with Token {}".format(token))
    accToken = accesTokenController.validateAccessToken(token, [MONEY])

    if accToken:
        data = request.get_json()
        LOGGER.debug("Get data {}".format(data))
        userID = data['userId']
        amount = int(data['amount'])
        LOGGER.debug("UserID is {} and amount is {}".format(userID, amount))
        try:
            year = int(data['year'])
        except KeyError as er:
            LOGGER.error("KeyError in year. Year is set to default.")
            year = datetime.now().year
        try:
            month = int(data['month'])
        except KeyError as er:
            LOGGER.error("KeyError in month. Month is set to default.")
            month = datetime.now().month
        LOGGER.debug("Year is {} and Month is {}".format(year, month))
        userController.addAmount(userID, amount, year=year, month=month, finanzer=True)
        user = userController.getUser(userID)
        retVal = {str(geruecht.year): geruecht.toJSON() for geruecht in user.geruechte}
        retVal['locked'] = user.locked
        LOGGER.info("Send updated Geruecht")
        return jsonify(retVal)
    LOGGER.info("Permission Denied")
    return jsonify({"error": "permission denied"}), 401

@finanzer.route("/finanzerAddCredit", methods=['POST'])
def _addCredit():
    """ Add Credit to User

        This Function add an credit to the user with posted userID.
        If year is not posted the default is the actual Year.
        If month is not posted the default is the actual Month.

        Returns:
            JSON-File with geruecht of year
            or ERROR 401 Permission Denied
    """
    LOGGER.info("Add Amount")
    token = request.headers.get("Token")
    LOGGER.debug("Verify AccessToken with Token {}".format(token))
    accToken = accesTokenController.validateAccessToken(token, [MONEY])

    if accToken:

        data = request.get_json()
        print(data)
        LOGGER.debug("Get data {}".format(data))
        userID = data['userId']
        credit = int(data['credit'])
        LOGGER.debug("UserID is {} and credit is {}".format(userID, credit))

        try:
            year = int(data['year'])
        except KeyError as er:
            LOGGER.error("KeyError in year. Year is set to default.")
            year = datetime.now().year
        try:
            month = int(data['month'])
        except KeyError as er:
            LOGGER.error("KeyError in month. Month is set to default.")
            month = datetime.now().month

        LOGGER.debug("Year is {} and Month is {}".format(year, month))
        userController.addCredit(userID, credit, year=year, month=month).toJSON()
        user = userController.getUser(userID)
        retVal = {str(geruecht.year): geruecht.toJSON() for geruecht in user.geruechte}
        retVal['locked'] = user.locked
        LOGGER.info("Send updated Geruecht")
        return jsonify(retVal)
    LOGGER.info("Permission Denied")
    return jsonify({"error": "permission denied"}), 401

@finanzer.route("/finanzerLock", methods=['POST'])
def _finanzerLock():
    token = request.headers.get("Token")
    accToken = accesTokenController.validateAccessToken(token, [MONEY])

    if accToken:
        data = request.get_json()
        username = data['userId']
        locked = bool(data['locked'])
        retVal = userController.lockUser(username, locked).toJSON()
        return jsonify(retVal)
    return jsonify({"error": "permission denied"}), 401

@finanzer.route("/finanzerSetConfig", methods=['POST'])
def _finanzerSetConfig():
    token = request.headers.get("Token")
    accToken = accesTokenController.validateAccessToken(token, [MONEY])

    if accToken:
        data = request.get_json()
        username = data['userId']
        autoLock = bool(data['autoLock'])
        limit = int(data['limit'])
        retVal = userController.updateConfig(username, {'lockLimit': limit, 'autoLock': autoLock}).toJSON()
        return jsonify(retVal)
    return jsonify({"error": "permission denied"}), 401

@finanzer.route("/finanzerAddUser", methods=['POST'])
def _finanzerAddUser():
    token = request.headers.get("Token")
    accToken = accesTokenController.validateAccessToken(token, [MONEY])

    if accToken:
        data = request.get_json()
        username = data['userId']
        userController.getUser(username)
        LOGGER.debug("Get all Useres")
        users = userController.getAllUsersfromDB()
        dic = {}
        for user in users:
            LOGGER.debug("Add User {} to ReturnValue".format(user))
            dic[user.uid] = user.toJSON()
            dic[user.uid]['creditList'] = {credit.year: credit.toJSON() for credit in user.geruechte}
            LOGGER.debug("ReturnValue is {}".format(dic))
        return jsonify(dic), 200
    return jsonify({"error": "permission denied"}), 401

@finanzer.route("/finanzerSendOneMail", methods=['POST'])
def _finanzerSendOneMail():
    token = request.headers.get("Token")
    accToken = accesTokenController.validateAccessToken(token, [MONEY])

    if accToken:
        data = request.get_json()
        username = data['userId']
        retVal = userController.sendMail(username)
        return jsonify(retVal)
    return jsonify({"error:", "permission denied"}), 401

@finanzer.route("/finanzerSendAllMail", methods=['GET'])
def _finanzerSendAllMail():
    token = request.headers.get("Token")
    accToken = accesTokenController.validateAccessToken(token, [MONEY])

    if accToken:
        retVal = userController.sendAllMail()
        return jsonify(retVal)
    return jsonify({"error": "permission denied"}), 401