add user dashboard

app/main.py

@@ -1,4 +1,4 @@
-from flask import Flask, jsonify, request, render_template, redirect
+from flask import Flask, jsonify, request, render_template, redirect, session, flash
 import auth
 import re
 
@@ -10,6 +10,11 @@ DB_PATH = "/app/sqlite.db"
 
 
 app = Flask(__name__)
+app.config["SESSION_PERMANENT"] = True
+app.config["SESSION_TYPE"] = "memcached"
+app.config["PERMANENT_SESSION_LIFETIME"] = 3600
+
+app.config["SECRET_KEY"] = "dsadasda"
 
 hosts = {}
 
@@ -38,6 +43,8 @@ def validate_ip(ip: str) -> bool:
 
 @app.route('/', methods=["GET"])
 def homepage():
+    if session.get("USERID") is not None:
+        return redirect("/dashboard")
     return render_template("index.html")
 
 
@@ -50,13 +57,92 @@ def login():
     if request.form["user"].strip() == "" or request.form["pass"].strip() == "":
         return redirect("/"), 400
 
-    if not auth.user_login(DB_PATH, request.form["user"], request.form["pass"]):
+    userid = auth.user_login(DB_PATH, request.form["user"], request.form["pass"])
+    if userid is None:
         return redirect("/")
 
+    session["USERID"] = userid
+
     return redirect("/dashboard", code=302)
 
+@app.route('/logout', methods=["GET"])
+def logout():
+    session.clear()
+    return redirect("/")
 
 
+
+@app.route('/dashboard', methods=["GET"])
+def dashboard():
+    if session.get("USERID") is None:
+        return redirect("/")
+    username = auth.get_username(DB_PATH, session.get("USERID"))
+    domains = auth.get_user_domains(DB_PATH, session.get("USERID"))
+    tokens = auth.get_user_tokens(DB_PATH, session.get("USERID"))
+
+    return render_template("dashboard.html", username=username, domains=domains, tokens=tokens)
+
+
+
+@app.route('/generate-token', methods=["POST"])
+def generate_token():
+    if session.get("USERID") is None:
+        return redirect("/")
+
+    if "token" not in request.form:
+        return redirect("/dashboard")
+    if request.form["token"].strip() == "":
+        return redirect("/dashboard")
+
+    token = auth.generate_user_token(DB_PATH, session.get("USERID"), request.form["token"])
+
+    if token is not None:
+        flash(token)
+
+    return redirect("/dashboard")
+
+
+@app.route('/revoke-token', methods=["POST"])
+def revoke_token():
+    if session.get("USERID") is None:
+        return redirect("/")
+
+    if "token" not in request.form:
+        return redirect("/dashboard")
+    if request.form["token"].strip() == "":
+        return redirect("/dashboard")
+
+    auth.revoke_user_token(DB_PATH, session.get("USERID"), request.form["token"])
+
+    return redirect("/dashboard")
+
+
+@app.route('/change-password', methods=["POST"])
+def change_password():
+    if session.get("USERID") is None:
+        return redirect("/")
+
+    if "pass" not in request.form or "pass-new" not in request.form or "pass-rep" not in request.form:
+        flash("password change failed")
+        return reidrect("/dashboard")
+    if request.form["pass"] == "" or request.form["pass-new"] == "" or request.form["pass-rep"] == "":
+        flash("password change failed")
+        return redirect("/dashboard")
+
+    oldpass = request.form["pass"]
+    newpass = request.form["pass-new"]
+
+    if newpass != request.form["pass-rep"]:
+        flash("passwords do not match")
+        return redirect("/dashboard")
+
+    if not auth.change_user_password(DB_PATH, session.get("USERID"), oldpass, newpass):
+        flash("password change failed")
+        return redirect("/dashboard")
+
+    flash("password changed successfully")
+    return redirect("/dashboard")
+
 @app.route('/health', methods=["GET"])
 def health():
     return jsonify({"status": "healthy", "comment": ""})