implement admin panel

app/main.py

@@ -121,6 +121,94 @@ def revoke_token():
     return redirect("/dashboard")
 
 
+@app.route('/create-user', methods=["POST"])
+def create_user():
+    if session.get("USERID") is None:
+        return redirect("/")
+    if not auth.is_admin(DB_PATH, session.get("USERID")):
+        return redirect("/dashboard")
+
+    if 'username' not in request.form or 'password' not in request.form:
+        return redirect("/dashboard")
+
+    username = request.form.get("username").strip()
+    password = request.form.get("password")
+
+    domains = request.form.get('domains')
+    if domains is None:
+        domains = []
+    else:
+        collapse_exp = re.compile(r'\s+')
+        domains = collapse_exp.sub(' ', domains.strip())
+        domains = domains.split(" ")
+
+    is_admin = request.form.get("is_admin") is not None
+
+    flash(auth.create_user(DB_PATH, username, password, domains, is_admin, request.form.get('email')))
+
+    return redirect("/dashboard")
+
+
+@app.route('/update-user', methods=["POST"])
+def update_user():
+    if session.get("USERID") is None:
+        return redirect("/")
+    if not auth.is_admin(DB_PATH, session.get("USERID")):
+        return redirect("/dashboard")
+
+    userid = request.form.get("userid")
+    if userid is None:
+        return redirect("/dashboard")
+    try:
+        userid = int(userid)
+    except ValueError:
+        return redirect("/dashboard")
+
+    domains = request.form.get('domains')
+
+    if domains is not None:
+        collapse_exp = re.compile(r'\s+')
+        domains = collapse_exp.sub(' ', domains.strip())
+        domains = domains.split(" ")
+
+    password = request.form.get("password")
+
+    is_admin = request.form.get("is_admin")
+    print(is_admin, flush=True)
+    if is_admin is not None:
+        is_admin = is_admin == "true"
+    print(is_admin, flush=True)
+
+    email = request.form.get("email")
+
+    auth.update_user(DB_PATH, userid, domains, password, is_admin, email)
+
+    return redirect("/dashboard")
+
+
+
+@app.route('/delete-user', methods=["POST"])
+def delete_user():
+    if session.get("USERID") is None:
+        return redirect("/")
+    if not auth.is_admin(DB_PATH, session.get("USERID")):
+        return redirect("/dashboard")
+
+    userid = request.form.get("userid")
+    if userid is None:
+        return redirect("/dashboard")
+    try:
+        userid = int(userid)
+    except ValueError:
+        return redirect("/dashboard")
+
+    auth.delete_user(DB_PATH, userid)
+
+    return redirect("/dashboard")
+
+
+
+
 @app.route('/change-password', methods=["POST"])
 def change_password():
     if session.get("USERID") is None: