from django.contrib.auth import get_user_model from django.contrib import auth from django.shortcuts import redirect from rest_framework.views import APIView from rest_framework.renderers import JSONRenderer from rest_framework.response import Response from django.db.models import Q from access.models import Invite from access.serializers import UserInitSerializer, UserSearchSerializer class TeacherListView(APIView): renderer_classes = (JSONRenderer,) status_code = 200 def get(self, request): return Response([i.email for i in get_user_model().objects.filter(groups__name='teachers')], self.status_code) class CheckUserView(APIView): renderer_classes = (JSONRenderer,) status_code = 200 def get(self, request): if request.user.is_authenticated() and (request.user.is_staff or request.user.is_superuser): return Response(True, status=self.status_code) return Response(False, status=self.status_code) class InfoUserView(APIView): renderer_classes = (JSONRenderer,) status_code = 200 def get(self, request): if request.user.is_authenticated(): return Response(UserInitSerializer(request.user).data, status=self.status_code) return Response('anonymous', status=self.status_code) class FindUserView(APIView): renderer_classes = (JSONRenderer,) status_code = 200 def get(self, request): if request.user.is_authenticated() and \ (request.user.is_superuser or 'managers' in request.user.groups.all() or 'lead_managers' in request.user.groups.all()): key = request.GET.get('key', None) count = int(request.GET.get('count', '10')) if key: res = get_user_model().objects.filter( Q(id__contains=key) | Q(email__contains=key.lower()) | Q(first_name__contains=key) | Q(last_name__contains=key) | Q(account__phone__contains=key), groups__name='students' ) else: res = get_user_model().objects.all() res = res[:(count if len(res) > count else len(res))] return Response([ UserSearchSerializer(i).data for i in res], status=self.status_code ) return Response('Permission denied', status=403) class DetailUserView(APIView): renderer_classes = (JSONRenderer,) @staticmethod def get(request, pk): if request.user.is_authenticated() and \ (request.user.is_superuser or request.user.is_staff or request.user.id == pk): try: user = get_user_model().objects.get(id=pk) except get_user_model().DoesNotExist: return Response("User doesn't exist", status=404) return Response(UserInitSerializer(user).data, status=200) return Response('Permission denied', status=403) class RegistrationView(APIView): renderer_classes = (JSONRenderer,) @staticmethod def get(request): try: invite = Invite.objects.get(hash=request.GET['hash']) invite.owner.is_active = True invite.owner.save() auth.login(request, invite.owner) invite.delete() return redirect('/') except Invite.DoesNotExist: return Response('Приглошения не существует возможно оно сгорело', status=404) @staticmethod def post(request): try: get_user_model().objects.get(email=request.JSON['email'].lower()) return Response('user already exist', status=403) except get_user_model().DoesNotExist: user = get_user_model().objects.create_student( email=request.JSON['email'].lower(), password=request.JSON['password'] ) return Response(UserInitSerializer(user).data, status=200) class ChangePasswordView(APIView): renderer_classes = (JSONRenderer,) @staticmethod def post(request): if request.user.is_authenticated() and not request.user.check_password(request.JSON['old_password']): return Response("Неверный пароль", status=404) request.user.set_password(request.JSON['new_password']) request.user.save() return Response("Пароль был изменён", status=200) class LoginView(APIView): renderer_classes = (JSONRenderer,) @staticmethod def post(request): if not request.user.is_authenticated(): user = auth.authenticate(email=request.JSON.get('email'), password=request.JSON.get('password')) try: auth.login(request, user) except AttributeError: return Response("Неверный пароль", status=404) return Response(UserInitSerializer(request.user).data, status=200) class LogoutView(APIView): renderer_classes = (JSONRenderer,) @staticmethod def post(request): if request.user.is_authenticated(): auth.logout(request) return Response(status=204)