Tweeder/backend/accounts.py

from pymongo import MongoClient
import bcrypt
from bson.objectid import ObjectId

client = MongoClient()
accounts_db = client.tweeder.accounts


def set_theme(username, value):
    username = username.lower()
    accounts_db.update_one({'username': username}, {"$set": {"theme": value}})


def get_theme(username):
    username = username.lower()
    if "theme" in accounts_db.find_one({"username": username}).keys():
        return accounts_db.find_one({"username": username})['theme']
    else:
        set_theme(username, "default")
        return "default"


def get_display_name(username):
    return accounts_db.find_one({'username': username})['displayname']


def is_verified(username):
    return accounts_db.find_one({'username': username})['verified']


def is_following(follower, following):
    return bool( accounts_db.find_one({'username': following.lower()})['_id'] in accounts_db.find_one({'username': follower.lower()})['following'] )


def account_exists(username):
    return bool(accounts_db.find_one({'username': username}))


def account_details(username):
    return accounts_db.find_one({'username': username.lower()})


def username_for_email(email):
    return accounts_db.find_one({'email': email})['username']


def get_profile(username):
    return accounts_db.find_one({'username': username})['profile']


def update_profile(username, details):
    accounts_db.update_one({'username': username},
                           {'$set': {'profile': details}}, upsert=True)


def set_pinned(username, post_id):
    post_id = ObjectId(post_id)
    accounts_db.update_one({'username': username},
                           {'$set': {'pinned': post_id}}, upsert=True)


def unset_pinned(username, post_id):
    username = username.lower()
    post_id = ObjectId(post_id)
    if accounts_db.find_one({'username': username})['pinned'] == post_id:
        accounts_db.update_one({'username': username},
                               {'$set': {'pinned': None}}, upsert=True)


def get_followers(username):
    if not account_exists(username):
        return False
    followers = []
    for follower in accounts_db.find({"following": account_details(username)['_id']}):
        followers.append(follower['_id'])
    return followers


def validate_username(username):
    allowed_chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890_"
    for char in username:
        if char not in allowed_chars:
            return 1
    if len(username) > 15:
        return 2
    return 0


def change_password(username, oldpass, newpass):
    username = username.lower()
    hashed_password = account_details(username)['password']
    if hashed_password != bcrypt.hashpw(str.encode(oldpass), hashed_password):
        return 1  # Old password is incorrect
    new_hashed = bcrypt.hashpw(str.encode(newpass), bcrypt.gensalt(14))
    accounts_db.update_one({'username': username},
                           {'$set': {'password': new_hashed}}, upsert=True)
    return 0  # All good :)


def create_account(email, username, password):
    displayname = username
    username = username.lower()
    if validate_username(username) == 1:
        return {
            'status': 'danger',
            'code': 6,
            'message': 'Username can only contain numbers, letters, and underscores'
        }

    if validate_username(username) == 2:
        return {
            'status': 'danger',
            'code': 7,
            'message': 'Username too long'
        }

    if accounts_db.find_one({'username': username}):

        return {
            'status': 'danger',
            'code': 1,
            'message': 'Username already exists!'
        }

    elif accounts_db.find_one({'email': email}):

        return {
            'status': 'danger',
            'code': 2,
            'message': 'Email address already in use!'
        }

    elif email == "":
        return {
            'status': 'danger',
            'code': 3,
            'message': 'Email address cannot be blank!'
        }

    elif username == "":
        return {
            'status': 'danger',
            'code': 4,
            'message': "Username cannot be blank!"
        }

    elif password == "":
        return {
            'status': 'danger',
            'code': 5,
            'message': 'Password cannot be blank!'
        }

    else:
        hashed_password = bcrypt.hashpw(str.encode(password), bcrypt.gensalt(14))
        accounts_db.insert_one({
            'username': username,
            'displayname': displayname,
            'email': email,
            'password': hashed_password,
            'verified': False,
            'following': [],
            'profile': {},
            'theme': 'default',
        })

        follow(username, username)

        return {
            'status': 'success',
            'code': 0,
            'message': 'Account created!'
        }


def login(username, password):
    username = username.lower()

    # Check that account exists, either with username or email based login
    if accounts_db.find_one({'username': username}):
        account_document = accounts_db.find_one({'username': username})
    elif accounts_db.find_one({'email': username}):
        account_document = accounts_db.find_one({'email': username})
    else:

        return {
            'status': 'danger',
            'code': 1,
            'message': 'Account does not exist!'
        }

    # Do login stuff
    hashed_password = account_document['password']
    if hashed_password == bcrypt.hashpw(str.encode(password), hashed_password):

        return {
            'status': 'success',
            'code': 0,
            'message': 'Logged in!'
        }

    else:

        return {
            'status': 'danger',
            'code': 2,
            'message': 'Incorrect password'
        }


def follow(follower, following):
    following_doc = accounts_db.find_one({'username': following.lower()})
    following_id = following_doc['_id']

    accounts_db.update_one({'username': follower.lower()},
                           {'$push': {'following': following_id}})


def unfollow(follower, following):
    following_doc = accounts_db.find_one({'username': following.lower()})
    following_id = following_doc['_id']

    accounts_db.update_one({'username': follower.lower()},
                           {'$pull': {'following': following_id}})