account.py

from . import sql 
import pymysql
import re
import json
import os
import hashlib
from flask import (
    Blueprint, flash, g, redirect, render_template, request, session, url_for
)

bp = Blueprint('account', __name__, url_prefix='/account')

@bp.route('/')
def account():
    return 'hello'

@bp.route('/login/',methods=['GET','POST'])
def login():
    '''
    request(POST) data:
        email (or username for staff)
        password
        type - the type of login
    '''
    if request.method=='POST' and 'password' in request.form:
        type = request.form["type"]
        password = hashlib.md5(request.form['password'].encode()).hexdigest()
        if type != 'staff':
            email = request.form['email']
        else:
            username = request.form['username']
        #connection = pymysql.connect(host = config['host'], port = int(config['port']), user = config['user'], password = config['password'], database = 'air_ticket')
        connection = sql.SQLConnection.Instance().conn
        cursor = connection.cursor()
        #print('SELECT * FROM % s WHERE email = % s AND password = % s', (type, email, password, ))
        if type == 'customer':
            cursor.execute('SELECT * FROM customer WHERE email = % s AND password = % s', (email, password, ))
        elif type == 'agent':
            cursor.execute('SELECT * FROM agent WHERE agent_email = % s AND password = % s', (email, password, ))
        elif type == 'staff':
            cursor.execute('SELECT * FROM airline_staff WHERE username = % s AND password = % s', (username, password, ))
        account = cursor.fetchone()
        if account:
            print(account)
            session['loggedin'] = True
            session['type'] = type
            if type == 'customer':
                session['username'] = account['name']
                session['email'] = account['email']
            elif type == 'agent':
                session['username'] = f"Agent {account['booking_agent_id']}"
            elif type == 'staff':
                session['username'] = account['username']
            return redirect("/public/home")
        else:
            flash('Invalid username or password!')
    return render_template('login.html')

@bp.route('/logout/')
def logout():
    '''
    remove user data from session
    '''
    print(session)
    print(dict(session) == {})
    session.clear()
    print(session)
    print(dict(session) == {})
    return redirect(url_for('account.login'))

@bp.route('/register/',methods=['GET','POST'])
def register():
    '''
    request(POST) data:
        a ton of user data (refer to sql)
        type - the type of user
    '''
    flash('')
    if request.method == 'POST':
        type = request.form["type"]
        #connection = pymysql.connect(host = config['host'], port = int(config['port']), user = config['user'], password = config['password'], database = "air_ticket")
        connection = sql.SQLConnection.Instance().conn
        cursor = connection.cursor()
        if type == 'customer':
            name = request.form['name']
            email = request.form['email']
            password = hashlib.md5(request.form['password'].encode()).hexdigest()
            building_number = request.form['building_number']
            street = request.form["street"]
            city = request.form["city"]
            state = request.form["state"]
            phone_number = request.form["phone_number"]
            passport_number = request.form["passport_number"]
            passport_expiration = request.form["passport_expiration"]
            passport_country = request.form["passport_country"]
            date_of_birth = request.form["date_of_birth"]
            cursor.execute('SELECT * FROM customer WHERE name = % s', (name, ))
            account = cursor.fetchone()
            if account:
                flash('Account already exists !')
            else:
                cursor.execute(
                    'INSERT INTO customer (name, email, password, building_number, street, city, state, phone_number, passport_number, passport_expiration, passport_country, date_of_birth) VALUES (% s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)',
                    (name, email, password, building_number, street, city, state, phone_number, passport_number, passport_expiration, passport_country, date_of_birth, ))
                connection.commit()
                flash('You have successfully registered !')
                return redirect(url_for('account.login'))
        elif type == 'agent':
            email = request.form['email']
            password = hashlib.md5(request.form['password'].encode()).hexdigest()
            cursor.execute('SELECT * FROM agent WHERE agent_email = % s', (email, ))
            account = cursor.fetchone()
            if account:
                flash('Account already exists !')
            else:
                cursor.execute(
                    'INSERT INTO agent(agent_email, password) VALUES (% s, % s)',
                    (email, password, ))
                connection.commit()
                flash('You have successfully registered !')
                return redirect(url_for('account.login'))
        elif type == 'staff':
            username = request.form['username']
            airline_name = request.form['airline_name']
            password = hashlib.md5(request.form['password'].encode()).hexdigest()
            first_name = request.form['first_name']
            last_name = request.form['last_name']
            date_of_birth = request.form["date_of_birth"]
            cursor.execute('SELECT * FROM airline_staff WHERE username = % s', (username, ))
            account = cursor.fetchone()
            if account:
                flash('Account already exists !')
            else:
                cursor.execute(
                    'INSERT INTO airline_staff (username, airline_name, password, first_name, last_name, date_of_birth) VALUES (% s, % s, %s, %s, %s, %s)',
                    (username, airline_name, password, first_name, last_name, date_of_birth,))
                connection.commit()
                flash('You have successfully registered !')
                return redirect(url_for('account.login'))

    return render_template('register.html')