+
+
+
+ {% if error %}
+
+ {{ error }}
+ {% endif %} +
+
+ 
Guest
Don't have access?Request Access
" + if self.ALLOW_GUEST_LOGIN: + register_link = "Don't have access?
Request Access or Login as guest
" + return render_template('login.html', login_buttons=login_buttons, register_link=register_link) + + def index(self): - return render_template('index.html') + return self.render_locked_page("index.html") + + def personal_documents(self): + + return self.render_locked_page("personal_documents.html") + + def master_documents(self): + + return self.render_locked_page("master_documents.html", admin_only = True) + + def admin_settings(self): + + return self.render_locked_page("admin_settings.html", admin_only=True, original_emails=', '.join(self.VALID_USER_EMAILS)) + + def submit_user_emails(self): + + #get emails from text box form on admin settings + emails = request.form['emails'] + email_list = [email.strip() for email in emails.split(',')] + + # check if emails from text box are properly formatted + for email in email_list: + email_regex = r'^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$' #standard email regular expression + if re.match(email_regex, email) is None: #check if it is a valid email address + error_message = "Unable to submit changes: Invalid email found: " + str(email) +". Please make sure all emails are valid and seperated by commas" + return self.render_locked_page('admin_settings.html', error=error_message, original_emails=emails) + + # check if the user emails contain the admin emails + # if they don't, add back in the admin emails and submit + if not set(self.VALID_ADMIN_EMAILS).issubset(set(email_list)): + error_message = "Admin emails must be in the user emails. Automatically adding the following admin emails back in: " + str(set(self.VALID_ADMIN_EMAILS) - set(email_list)) + email_list = list(set(self.VALID_ADMIN_EMAILS).union(set(email_list))) + self.VALID_USER_EMAILS = email_list + return self.render_locked_page('admin_settings.html', error=error_message, original_emails=', '.join(self.VALID_USER_EMAILS)) + + # if emails are properly formatted, update the valid user emails + self.VALID_USER_EMAILS = email_list + return self.render_locked_page('admin_settings.html', original_emails=emails) + def terms(self): return render_template('terms.html') + + def guest_login(self): + # create a guest user with a unique session + unique_id = f"{secrets.token_hex(UUID_BYTES)}" + email = f"guest-{unique_id}" + user = User(id_=unique_id, email=email, name="Guest") + + # since we generate a unique user each time for guests there should not be a collision + User.create(unique_id, email, name="Guest") + + # begin user session by logging the user in + login_user(user) + + # send user back to homepage + return redirect(url_for("index")) + + def login(self): + # parse query parameter specifying OAuth provider + provider = request.args.get('provider') + + # set config, client, and callback based on provider + provider_cfg, client, callback = None, None, None + if provider == "google": + provider_cfg = self.get_google_provider_cfg() + client = self.google_client + callback = "/google-callback" + + elif provider == "mit": + provider_cfg = self.get_mit_provider_cfg() + client = self.mit_client + callback = "/mit-callback" + + # get authorization endpoint from provider config + authorization_endpoint = provider_cfg["authorization_endpoint"] + + # get client and construct request URI w/scopes for openid, email, and profile + request_uri = client.prepare_request_uri( + authorization_endpoint, + redirect_uri=request.base_url + callback, + scope=["openid", "email", "profile"], + ) + + return redirect(request_uri) + + def callback(self, get_provider_cfg, client, client_id, client_secret, valid_user_emails): + # get authorization code provider sent back + code = request.args.get("code") + + # fetch URL to get tokens that allow us to ask for user's email + info from provider + provider_cfg = get_provider_cfg() + token_endpoint = provider_cfg["token_endpoint"] + + # Prepare and send a request to get access token(s) + token_url, headers, body = client.prepare_token_request( + token_endpoint, + authorization_response=request.url, + redirect_url=request.base_url, + code=code + ) + token_response = requests.post( + token_url, + headers=headers, + data=body, + auth=(client_id, client_secret), + ) + + # parse access token(s) + client.parse_request_body_response(json.dumps(token_response.json())) + + # fetch user's profile information from provider; we will only keep unique_id and user_email + provider_cfg = get_provider_cfg() + userinfo_endpoint = provider_cfg["userinfo_endpoint"] + uri, headers, body = client.add_token(userinfo_endpoint) + userinfo_response = requests.get(uri, headers=headers, data=body) + + # parse info if user email is verified + if userinfo_response.json().get("email_verified"): + unique_id = userinfo_response.json()["sub"] + user_email = userinfo_response.json()["email"] + user_name = userinfo_response.json()["name"] + else: + return "User email not available or not verified by provider.", 400 + + # if owner of this application has not green-light email; reject user + if user_email not in self.VALID_USER_EMAILS: + return "User email not authorized for this application.", 401 + + # TODO: we could send them to a different landing page w/a link back to index + # so they can retry with a diff. email + # return redirect(url_for('index')) + + # create a user with the information provided by provider + user = User(id_=unique_id, email=user_email, name = user_name) + + # add user to db if they don't already exist + if not User.get(unique_id): + User.create(unique_id, user_email, user_name) + + # begin user session by logging the user in + login_user(user) + + # send user back to homepage + return redirect(url_for("index")) + + @login_required + def logout(self): + logout_user() + return redirect(url_for("index")) def like(self): self.chat.lock.acquire() diff --git a/a2rchi/interfaces/chat_app/db.py b/a2rchi/interfaces/chat_app/db.py new file mode 100644 index 00000000..60e4af50 --- /dev/null +++ b/a2rchi/interfaces/chat_app/db.py @@ -0,0 +1,38 @@ +# http://flask.pocoo.org/docs/1.0/tutorial/database/ +import sqlite3 + +import click +from flask import current_app, g +from flask.cli import with_appcontext + +def get_db(): + if "db" not in g: + g.db = sqlite3.connect( + "sqlite_db", detect_types=sqlite3.PARSE_DECLTYPES + ) + g.db.row_factory = sqlite3.Row + + return g.db + +def close_db(e=None): + db = g.pop("db", None) + + if db is not None: + db.close() + +def init_db(): + db = get_db() + + with current_app.open_resource("schema.sql") as f: + db.executescript(f.read().decode("utf8")) + +@click.command("init-db") +@with_appcontext +def init_db_command(): + """Clear the existing data and create new tables.""" + init_db() + click.echo("Initialized the database.") + +def init_app(app): + app.teardown_appcontext(close_db) + app.cli.add_command(init_db_command) diff --git a/a2rchi/interfaces/chat_app/schema.sql b/a2rchi/interfaces/chat_app/schema.sql new file mode 100644 index 00000000..177c929f --- /dev/null +++ b/a2rchi/interfaces/chat_app/schema.sql @@ -0,0 +1,5 @@ +CREATE TABLE IF NOT EXISTS user ( + id TEXT PRIMARY KEY, + email TEXT UNIQUE NOT NULL, + name TEXT NOT NULL +); diff --git a/a2rchi/interfaces/chat_app/static/images/login.png b/a2rchi/interfaces/chat_app/static/images/login.png new file mode 100644 index 00000000..77aeb587 Binary files /dev/null and b/a2rchi/interfaces/chat_app/static/images/login.png differ diff --git a/a2rchi/interfaces/chat_app/static/script.js-template b/a2rchi/interfaces/chat_app/static/script.js-template index 27eb10a8..49e4b655 100644 --- a/a2rchi/interfaces/chat_app/static/script.js-template +++ b/a2rchi/interfaces/chat_app/static/script.js-template @@ -39,6 +39,16 @@ async function fetchWithTimeout(resource, options = {}) { return response; } +function openNav() { + document.getElementById("main_sidebar").style.width = "250px"; + document.getElementById("main").style.marginLeft = "250px"; +} + +function closeNav() { + document.getElementById("main_sidebar").style.width = "0"; + document.getElementById("main").style.marginLeft= "0"; +} + const loadDataFromLocalstorage = () => { // Load saved chats and theme from local storage and apply/add on the page const themeColor = localStorage.getItem("themeColor"); diff --git a/a2rchi/interfaces/chat_app/static/style.css b/a2rchi/interfaces/chat_app/static/style.css index 23fe7e5d..54e084a0 100644 --- a/a2rchi/interfaces/chat_app/static/style.css +++ b/a2rchi/interfaces/chat_app/static/style.css @@ -15,6 +15,7 @@ --outgoing-chat-border: #343541; --incoming-chat-border: #444654; --incoming-chat-code-snippet: #545764; + --alternative-bckg: #1f1f27; } .light-mode { --text-color: #343541; @@ -26,6 +27,7 @@ --outgoing-chat-border: #FFFFFF; --incoming-chat-border: #D9D9E3; --incoming-chat-code-snippet: #FFFFFF; + --alternative-bckg: #a9a9bc; } body { background: var(--outgoing-chat-bg); @@ -40,6 +42,153 @@ ol { margin: 1rem 3.5rem; } +#main { + transition: margin-left .5s; +} + +/*login page styling */ +.page-wrapper { + background-image: url("images/login.png"); + background-position: center; + background-size: cover; + background-repeat: no-repeat; + justify-content: center; + align-items: center; + min-height: 100vh; + display: flex; +} + +.login-wrapper { + width: 420px; + background: var(--alternative-bckg); + border: 2px solid var(--outgoing-chat-bg); + box-shadow: 0 0 10px rgba(0, 0, 0, 0.2); + color: var(--text-color); + border-radius: 10px; + padding: 30px 40px; +} +.login-wrapper h1 { + font-size: 36px; + text-align: center; + margin: 0 0 15px 0; + +} +.login-wrapper .login-btn { + width: 100%; + height: 45px; + background: var(--icon-hover-bg); + border: none; + outline: none; + border-radius: 40px; + box-shadow: 0 0 10px rgba(0, 0, 0, 0.1); + cursor: pointer; + font-size: 16px; + color: var(--text-color); + font-weight: 600; + margin: 10px 0; + display: flex; + justify-content: center; + align-items: center; + text-decoration: none; +} + +.login-wrapper .register-link { + font-size: 14.5px; + text-align: center; + margin: 20px 0 15px; +} + +.register-link p a { + color: var(--text-color); + text-decoration: none; + font-weight: 600; +} + +.register-link p a:HOVER { + text-decoration: underline; +} + + +/* Main sidebar menu styling */ +.sidebar { + height: 100%; + width: 0; + position: fixed; + z-index: 1; + top: 0; + left: 0; + background-color: #111; + overflow-x: hidden; + transition: 0.5s; + padding-top: 60px; +} + +.sidebar .closebtn { + position: absolute; + top: 0; + right: 25px; + font-size: 36px; + margin-left: 50px; + + padding: 8px 8px 8px 32px; + text-decoration: none; + color: #818181; + display: block; + transition: 0.3s; +} + +.openbtn { + font-size: 20px; + cursor: pointer; + background-color: #111; + color: white; + padding: 10px 15px; + border: none; + position:fixed; + margin-top: 20px; + margin-left: 20px; +} + + +.top-menu-links { + padding: 8px 8px 8px 32px; + text-decoration: none; + font-size: 25px; + color: #818181; + display: block; + transition: 0.3s; +} + +.sidebar a:hover { + color: #f1f1f1; +} + +.openbtn:hover { + background-color: #444; +} + +.bottom-menu-links-container { + position: absolute; + bottom: 0; + left: 0; + width: 100%; + padding-bottom: 40px; +} + +.bottom-menu-items { + bottom: 0; + left: 0; + width: 100%; + padding-bottom: 5px; + padding-left: 32px; + + text-decoration: none; + font-size: 15px; + color: #818181; + display: block; + transition: 0.3s; +} + /* Pop up container styling */ #popup-form { display: none; diff --git a/a2rchi/interfaces/chat_app/templates/admin_settings.html b/a2rchi/interfaces/chat_app/templates/admin_settings.html new file mode 100644 index 00000000..cbe6a3e6 --- /dev/null +++ b/a2rchi/interfaces/chat_app/templates/admin_settings.html @@ -0,0 +1,68 @@ + + + + +{{ error }}
+ {% endif %} + Guest