skill-back/access/views.py

from django.contrib.auth import get_user_model
from django.contrib import auth
from django.shortcuts import redirect
from rest_framework.views import APIView
from rest_framework.renderers import JSONRenderer
from rest_framework.response import Response
from django.db.models import Q

from access.models import Invite, Progress, ExtraPrivilege
from access.serializers import UserInitSerializer, UserSearchSerializer
from courses.models import Vertex


class TeacherListView(APIView):
    renderer_classes = (JSONRenderer,)
    status_code = 200

    def get(self, request):
        return Response([i.email for i in get_user_model().objects.filter(groups__name='teachers')], self.status_code)


class CheckUserView(APIView):
    renderer_classes = (JSONRenderer,)
    status_code = 200

    def get(self, request):
        if request.user.is_authenticated() and (request.user.is_staff or request.user.is_superuser):
            return Response(True, status=self.status_code)
        return Response(False, status=self.status_code)


class InfoUserView(APIView):
    renderer_classes = (JSONRenderer,)
    status_code = 200

    def get(self, request):
        if request.user.is_authenticated():
            return Response(UserInitSerializer(request.user).data, status=self.status_code)
        return Response('anonymous', status=self.status_code)


class FindUserView(APIView):
    renderer_classes = (JSONRenderer,)
    status_code = 200

    def get(self, request):
        if request.user.is_authenticated() and \
                (request.user.is_superuser
                 or 'managers' in request.user.groups.all() or 'lead_managers' in request.user.groups.all()):

            key = request.GET.get('key', None)
            count = int(request.GET.get('count', '10'))

            if key:
                res = get_user_model().objects.filter(
                    Q(id__contains=key) | Q(email__contains=key.lower()) | Q(first_name__contains=key) |
                    Q(last_name__contains=key) | Q(account__phone__contains=key), groups__name='students'
                )

            else:
                res = get_user_model().objects.all()

            res = res[:(count if len(res) > count else len(res))]

            return Response(
                [UserSearchSerializer(i).data for i in res],
                status=self.status_code
            )

        return Response('Permission denied', status=403)


class DetailUserView(APIView):
    renderer_classes = (JSONRenderer,)

    @staticmethod
    def get(request, pk):
        if request.user.is_authenticated() and \
                (request.user.is_superuser or request.user.is_staff or request.user.id == pk):

            try:
                user = get_user_model().objects.get(id=pk)
            except get_user_model().DoesNotExist:
                return Response("User doesn't exist", status=404)

            return Response(UserInitSerializer(user).data, status=200)

        return Response('Permission denied', status=403)


class RegistrationView(APIView):
    renderer_classes = (JSONRenderer,)

    @staticmethod
    def get(request):
        try:
            invite = Invite.objects.get(hash=request.GET['hash'])
            invite.owner.is_active = True
            invite.owner.save()
            auth.login(request, invite.owner)
            invite.delete()
            return redirect('/')
        except Invite.DoesNotExist:
            return Response('Приглошения не существует возможно оно сгорело', status=404)

    @staticmethod
    def post(request):
        try:
            get_user_model().objects.get(email=request.JSON['email'].lower())
            return Response('user already exist', status=403)
        except get_user_model().DoesNotExist:
            password = request.JSON.get('password')
            if password:
                user = get_user_model().objects.create_student(
                    email=request.JSON['email'].lower(),
                    password=request.JSON['password']
                )
            else:
                user = get_user_model().objects.create_student(
                    email=request.JSON['email'].lower(),
                )

        return Response(UserInitSerializer(user).data, status=200)


class ChangePasswordView(APIView):
    renderer_classes = (JSONRenderer,)

    @staticmethod
    def post(request):
        if request.user.is_authenticated() and not request.user.check_password(request.JSON['old_password']):
            return Response("Неверный пароль", status=404)
        request.user.set_password(request.JSON['new_password'])
        request.user.save()
        return Response("Пароль был изменён", status=200)


class LoginView(APIView):
    renderer_classes = (JSONRenderer,)

    @staticmethod
    def post(request):
        if not request.user.is_authenticated():
            user = auth.authenticate(email=request.JSON.get('email'), password=request.JSON.get('password'))
            try:
                auth.login(request, user)
            except AttributeError:
                return Response("Неверный пароль", status=404)
        return Response(UserInitSerializer(request.user).data, status=200)


class LogoutView(APIView):
    renderer_classes = (JSONRenderer,)

    @staticmethod
    def post(request):
        if request.user.is_authenticated():
            auth.logout(request)
        return Response(status=204)


class UpdateProgress(APIView):
    """
    Переводит ученика на следующую стадию прохождения курса
    Запрос идёт синхронно возвращает id нового объекта прогресса
    """
    renderer_classes = (JSONRenderer,)

    @staticmethod
    def post(request):
        pk = int(request.JSON.get('id'))
        try:
            vertex = Vertex.objects.get(id=pk)
        except Vertex.DoesNotExist:
            return Response("Объект не найден", status=404)

        next_vertex = vertex.get_next(['task', 'tutorial'])

        try:
            progress = Progress.objects.get(user=request.user, course=vertex.course)
            if progress.active_obj == vertex:
                if next_vertex.is_more(progress.active_obj):
                    progress.active_obj = next_vertex
                    progress.save()
            return Response({'id': progress.active_obj.id, 'type': progress.active_obj.content_type.model}, status=200)
        except Progress.DoesNotExist:
            pass

        try:
            privilege = ExtraPrivilege.objects.get(user=request.user, subject=vertex)
            privilege.is_done = True
            privilege.save()
            return Response({'id': next_vertex.id, 'type': next_vertex.content_type.model}, status=200)
        except ExtraPrivilege.DoesNotExist:
            return Response('У вас нет прав', status=403)