app.py

from os import urandom, environ
from sys import argv

from flask import Flask, render_template, make_response, request, url_for, redirect, abort, request
import flask_login
from flask_talisman import Talisman, GOOGLE_CSP_POLICY

from waitress import serve

from google.oauth2 import id_token
from google.auth.transport import requests

from Classes.Block import *
from Classes.User import *

import ScoutingWorker

# static vars

# app and login
web = Flask(__name__)
web.secret_key = urandom(16)
print('SECRET KEY:' + str(web.secret_key))

googleID = environ.get("GCID")  # THIS SHOULD BE AN ENVIORMENT VARIBLE

if googleID == None:
    raise Exception("No google ID provided.")

googleID += '.apps.googleusercontent.com'


loginManager = flask_login.LoginManager()
loginManager.init_app(web)
loginManager.login_view = 'loginPage'

# construct csp
# https://github.com/GoogleCloudPlatform/flask-talisman/blob/master/flask_talisman/talisman.py#LC31
csp = GOOGLE_CSP_POLICY
csp['font-src'] = '*'
csp['script-src'] += ' apis.google.com'

Talisman(web, content_security_policy=csp)


@loginManager.user_loader
def loadUser(id):
    return getUser(id)


@web.before_request
def beforeRequest():
    user = flask_login.current_user

    # all users without a team should be redirected to init page
    # allows requests to the init page and js, css through
    if user.is_authenticated and not user.hasInit and request.endpoint not in ['initAccount', 'initTeamCheck', 'logout'] and request.path[:8] != u'/static/':
        return redirect(url_for('initAccount'))


@web.route('/')
@web.route('/home')
def home():
    return render_template('home.html')


@web.route('/login', methods=['GET', 'POST'])
def loginPage():
    if request.method == 'POST':
        try:
            if request.headers['Login-Type'] == "google-signin":
                return googleLogin()
        except KeyError:
            pass

    # this isn't used, should probably delete
    elif request.headers.get("Login-Type") == "LOGOUT":
        flask_login.logout_user()
        return redirect(url_for('home'))

    elif flask_login.current_user.is_authenticated:
        return redirect(url_for('home'))

    return render_template("login.html", retry=False, googleID=googleID)


@web.route('/logout')
def logout():  # logs out and redirects to home
    flask_login.logout_user()
    return redirect(url_for('home'))


def googleLogin():
    json = request.get_json()

    # this is ripped directly from google lol
    idinfo = id_token.verify_oauth2_token(
        json['ID'], requests.Request(), googleID)

    if idinfo['iss'] not in ['accounts.google.com', 'https://accounts.google.com']:
        # not a valid issuer, murder them
        return render_template("login.html", retry=True, googleID=googleID)

    id_ = idinfo['sub']

    user = getGUser(id_)

    if user == None:
        user = User(json['name'], json['email'], id_)

    addUser(user)

    flask_login.login_user(user)

    saveUsers()

    if user.hasInit:  # account has been inintalized, it has a team number and account level asociated
        return redirect(url_for('home'))

    else:
        return redirect(url_for('initAccount', ))


# not used anywhere, should remove
def login():

    usr = request.form.get('usr')
    psw = request.form.get('psw')

    # SO because this would be massive security thingy we're just gonna disable this for now :)
    '''if usr == "gulk" and psw == "geist":
        resp = redirect(url_for('home'))
        resp.set_cookie('loggedIn', "true")
        resp.set_cookie('usr', usr)
        return resp

    else:
        return render_template('login.html', retry=True, googleID=googleID)'''
    return render_template('login.html', retry=True, googleID=googleID)


@web.route('/profile/')
@flask_login.login_required
def profilePage():
    if flask_login.current_user.hasInit:
        return render_template('profile.html', googleID=googleID, user=flask_login.current_user)
    else:
        return redirect(url_for('initAccount'))


@web.route('/profile/init/')
@flask_login.login_required
def initAccount():  # should only be run by users after creating their account
    user = flask_login.current_user
    if user.hasInit:
        return redirect(url_for('profilePage'))

    # check if url is a GET with a team number attatched
    team = request.args.get('team', default=None, type=int)

    if team is None:  # doesn't have useful params, give the defualt page
        return render_template('initAccount.html', googleID=googleID)

    else:  # set user account to team #
        user.initUser(team)
        return redirect(url_for('home'))


@web.route('/profile/init/team')
@flask_login.login_required
def initTeamCheck():  # sent by js when user types in a team, checks if the team exists
    team = request.args.get('team', default=None, type=int)

    if team is None:
        return "No team provided"

    else:
        # True if team exists, False otherwise
        return str(getTeamByNumber(team) is not None)


@web.route('/scouting/')
@flask_login.login_required
def matchScoutingPage():
    '''return render_template('matchScouting.html', template=[HeaderBlock("This is an example of a header"), StringBlock('str01', 'This is an example of a string input', 'Sample Text'),
                                                           IntBlock(
                                                               'int01', 'This is an example of a int input', default=1234, max=9999), SpaceBlock(50),
                                                           TallyIntBlock(
        'tally01', 'Above is a space, this is an example of a tally interger box', default=13),
        CheckBoxBlock('chck01', 'This is an example of a check box'), RadioButtonBlock('rdo01', "This is an example of a radio button input", 'Choice1', "Choice2", "Choice3")])'''
    # RIP "bottom text"

    # not too sure why but vscode loves to eat my formatting so thats fun
    template = [HeaderBlock("Robot info"), IntBlock('robot', "Robot #", default=254), IntBlock('match', "Match number"), HeaderBlock("Standstorm"), RadioButtonBlock('startingSide', 'What platform did the robot start on?', '3', '2', '1'), TallyIntBlock('autoPanels', 'How many hatch panels did the robot place? (Auto)'), TallyIntBlock("autoCargo", "How much cargo did the robot place? (Auto)"), TallyIntBlock("autoRocketPanels", "How many panels did the robot put in the rocket? (Auto)"), TallyIntBlock("autoRocketCargo", "How much cargo did the robot put in the rocket? (Auto)"), SpaceBlock(40), HeaderBlock("Teleop"), TallyIntBlock("teleopPanels", "How many hatch panels did the robot place?"), TallyIntBlock("teleopCargo", "How much cargo did the robot place?"), TallyIntBlock("teleopRocketPanels", "How many panels did the robot put in the rocket?"), TallyIntBlock("teleopRocketCargo", "How much cargo did the robot put in the rocket?"), TallyIntBlock("droppedPanels", "How many panels did the robot drop?"), TallyIntBlock(
        "droppedCargo", "How much cargo did the robot drop?"), CheckBoxBlock("playedDefense", "Robot played defense"), CheckBoxBlock("attemptedClimb", "Robot attempted to climb"), CheckBoxBlock("helpedClimb", "Robot helped another robot climb"), CheckBoxBlock("climbed", "Robot successfully climbed (Second or third level)"), RadioButtonBlock("climbLevel", "What platform did the robot climb to?", 0, 1, 2, 3), CheckBoxBlock("brokeDown", "Robot tipped, broke down or lost COMMS"), IntBlock("ratePannels", "What would you rate the robot's ability to score hatch panels?(/10)", max=10), IntBlock("rateCargo", "What would you rate the robot's ability to score cargo?(/10)", max=10), IntBlock("rateRocketPanels", "What would you rate the robot's ability to score panels on rockets?(/10)", max=10), IntBlock("rateRocketCargo", "What would you rate the robot's ability to score cargo on rockets?(/10)", max=10), IntBlock("rateBot", "What would you rate the robot overall?(/10)", max=10), StringBlock("comments", "Comments")]

    return render_template('matchScouting.html', template=template)


@web.route('/scouting/submit', methods=['POST'])
@flask_login.login_required
def submitScouting():
    ScoutingWorker.saveData(4618, request.get_json())
    return redirect(url_for('matchScoutingPage'))


@web.route('/pit/')
def pitScoutingPage():
    return render_template('pitScouting.html')


@web.route('/picklist/')
def pickListPage():
    return render_template('picklist.html')


if __name__ == "__main__":
    loadUsers()
    serve(web, port=int(argv[1])if len(argv) > 1 else 8080, host="0.0.0.0")
    # web.run(debug=True)