SAE-A2-TruthInquiry/truthinquiry/routes/routes_api_admin.py

import os

import flask
from sqlalchemy import select, delete, and_

from truthinquiry.ext.database.models import *
from truthinquiry.ext.database.fsa import db
from truthinquiry.utils import require_admin


routes_api_admin = flask.Blueprint("api_admin", __name__)

@routes_api_admin.route("/auth", methods=["GET", "POST"])
def auth():
    password = flask.request.values.get("password")
    if password == os.getenv("ADMIN_PASSWORD"):
        flask.session["admin"] = True
        return flask.redirect("/admin")
    else:
        return flask.redirect("/admin/auth?failed=1")

@routes_api_admin.route("/logout", methods=["GET", "POST"])
def logout():
    flask.session.pop("admin", None)
    return flask.redirect("/")

@routes_api_admin.route("/setQuestions", methods=["GET", "POST"])
@require_admin(api=True)
def set_questions():
    if not flask.request.json:
        return {"error": 1, "msg": "no json set"}
    lang = flask.request.json["lang"]
    all_questions = flask.request.json["questions"]

    # Delete old questions
    text_ids_requ = (
        select(Locale.LID)
        .join(Text).where(Text.LANG==lang)
        .join(QuestionType)
    )
    db.session.execute(
        delete(Text)
        .where(Text.LID.in_(text_ids_requ.subquery()))
    )
    
    # get question LIDs in database
    question_lids_requ = (
        select(QuestionType.TEXT_LID)
        .join(Locale)
    )
    question_lids = (data[0] for data in db.session.execute(question_lids_requ))

    # set new questions 
    text_obs = []
    for question_lid, questionType in zip(question_lids, all_questions):
        for question in questionType["questions"]:
            text_obs.append(Text(None, question_lid, lang, question["text"]))

    db.session.add_all(text_obs)
    db.session.commit()

    return {"error": 0}

@routes_api_admin.route("/setTraits", methods=["GET", "POST"])
@require_admin(api=True)
def set_traits():
    input_lang = flask.request.json["lang"]
    input_traits = flask.request.json["traits"]


    db_traits = db.session.query(Trait).all()
    
    modified_db_traits = []
    for input_trait in input_traits:
        if input_trait["id"]:
            # modify
            db_trait = list(filter(lambda db_trait: db_trait.TRAIT_ID == int(input_trait["id"]), db_traits))[0]
            
            db.session.delete(db_trait.NAME_LOCALE.get_text(input_lang))
            db.session.delete(db_trait.DESC_LOCALE.get_text(input_lang))
            db_trait.NAME_LOCALE.TEXTS = [Text(None, None, input_lang, input_trait["name"])]
            db_trait.DESC_LOCALE.TEXTS = [Text(None, None, input_lang, input_trait["desc"])]
            
            db.session.add(db_trait)
            modified_db_traits.append(db_trait)
        else:
            # add
            new_trait = Trait(None, None, None)
            
            new_trait.NAME_LOCALE = Locale(None)
            new_trait.DESC_LOCALE = Locale(None)

            new_trait.NAME_LOCALE.TEXTS.append(Text(None, None, input_lang, input_trait["name"]))
            new_trait.DESC_LOCALE.TEXTS.append(Text(None, None, input_lang, input_trait["desc"]))
            
            db.session.add(new_trait)

    # delete
    for db_trait in db_traits:
        if db_trait not in modified_db_traits:
            db.session.delete(db_trait)

    db.session.commit()

    return {"error": 0}

@routes_api_admin.route("/setPlaces", methods=["GET", "POST"])
@require_admin(api=True)
def set_places():
    input_lang = flask.request.json["lang"]
    input_places = flask.request.json["places"]


    db_places = db.session.query(Place).all()
    
    modified_db_places = []
    for input_place in input_places:
        if input_place["id"]:
            # modify
            db_place = list(filter(lambda db_place: db_place.PLACE_ID == int(input_place["id"]), db_places))[0]
            
            db.session.delete(db_place.NAME_LOCALE.get_text(input_lang))
            
            db_place.NAME_LOCALE.TEXTS = [Text(None, None, input_lang, input_place["name"])]
            
            db.session.add(db_place)
            modified_db_places.append(db_place)
        else:
            # add
            new_place = Place(None, None)
            
            new_place.NAME_LOCALE = Locale(None)
            new_place.NAME_LOCALE.TEXTS = [Text(None, None, input_lang, input_place["name"])]
            
            db.session.add(new_place)

    # delete
    for db_place in db_places:
        if db_place not in modified_db_places:
            db.session.delete(db_place)

    db.session.commit()

    return {"error": 0}

@routes_api_admin.route("/setNpc", methods=["GET", "POST"])
@require_admin(api=True)
def set_npc():
    input_lang = flask.request.json["lang"]
    input_npc = flask.request.json["npc"]

    if input_npc["id"]:
        npc_obj = db.session.get(Npc, input_npc["id"])
    else:
        npc_obj = Npc(None, None)
        npc_obj.NAME_LOCALE = Locale(None)
        db.session.add(npc_obj)

    npc_obj.NAME_LOCALE.get_text(input_lang, True).TEXT = input_npc["name"]

    for answer_type, input_answer_type in zip(npc_obj.ANSWERS, input_npc["allAnswers"]):
        for text in answer_type.TEXT_LOCALE.get_texts(input_lang):
            db.session.delete(text)
        for input_answer in input_answer_type["answers"]:
            answer_type.TEXT_LOCALE.TEXTS.append(Text(None, None, input_lang, input_answer["text"]))


    db.session.commit()

    return {"error": 0}

@routes_api_admin.route("/deleteNpc", methods=["GET", "POST"])
@require_admin(api=True)
def delete_npc():
    input_npc_id = flask.request.json["npc_id"]
    db.session.execute(delete(Npc).where(Npc.NPC_ID==input_npc_id))
    db.session.commit()
    return {}

@routes_api_admin.route("/setReaction", methods=["GET", "POST"])
@require_admin(api=True)
def setReaction():
    input_npc_id = flask.request.values["npc_id"]
    input_trait_id = flask.request.values["trait_id"]

    row = db.session.execute(
        select(Reaction)
        .where(and_(
            Reaction.NPC_ID==input_npc_id,
            Reaction.TRAIT_ID==input_trait_id
        ))
    ).first()
    
    reaction = None if row == None else row[0]
    

    if len(flask.request.files) == 0: # want to delete
        if reaction:
            db.session.delete(reaction)
        else:
            return {"msg": "No such reaction"} # Not an error because this can be intentional
    else:
        input_reaction_file = flask.request.files['file']
        if not reaction:
            reaction = Reaction(None, input_npc_id, input_trait_id)
            db.session.add(reaction)
        reaction.IMG = input_reaction_file.read()
    
    db.session.commit()
    
    return {}