MAIN.py

from datetime import date

from flask import Flask, render_template, url_for, flash, abort
from flask_sqlalchemy import SQLAlchemy
from flask_login import UserMixin, LoginManager, login_user, login_required, logout_user,current_user
# from sqlalchemy.sql.functions import current_user
from werkzeug.utils import redirect
from werkzeug.security import generate_password_hash, check_password_hash

from forms import Create_blog_post, RegisterUser, Login

app=Flask(__name__)
app.config['SECRET_KEY']="great"
app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///blog.db'
app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False
db = SQLAlchemy(app)

# -----------------------------------DATABASE FOR THE LOGIN PAGE------------------------------------

class User(UserMixin, db.Model):
    id = db.Column(db.Integer, primary_key=True)
    name = db.Column(db.String(150), nullable=False)
    email = db.Column(db.String(150), unique=True, nullable=False)
    password = db.Column(db.String(150), nullable=False)
    posts = db.relationship('Blog_post', backref='author_user')

    def __init__(self, email, password, name):
        self.email = email
        self.password = password
        self.name = name


# ----------------------DATABASE CREATION-------------------------------"continuation is at the very end"
class Blog_post(db.Model):
    id=db.Column(db.Integer,primary_key=True)
    title=db.Column(db.String(250),nullable=False)
    subtitle=db.Column(db.String(100),nullable=False)
    author_id = db.Column(db.Integer, db.ForeignKey('user.id'))
    author = db.relationship('User')

    body=db.Column(db.Text,nullable=False)
    date=db.Column(db.String(100),nullable=False)

    def __repr__(self):
        return f'Post {self.title}'


# ------------------------------------LOGIN MANAGER------------------------------------------
login_manager=LoginManager()
login_manager.init_app(app)
login_manager.login_view='login'
login_manager.login_message='Kindly log in to view dashboard.'
login_manager.login_message_category="warning"


@login_manager.user_loader
def load_user(user_id):
    return User.query.get(user_id)


# ---------------------------------LANDING PAGE--------------------------------
@app.route('/')
def landing_page():
    return render_template('landing.html')


# ------------------------------HOME PAGE---------------------------------------------
@app.route('/home')
def home():
    posts=Blog_post.query.all()
    return render_template("index.html",posts=posts)



# ----------------------------------REGISTRATION PAGE-----------------------------------------
@app.route('/register',methods=['GET','POST'])
def register():
    form=RegisterUser()
    if form.validate_on_submit():

        hashed_pw = generate_password_hash(form.password.data)

        new_user=User(
            email=form.email.data,
            password=hashed_pw,
            name=form.name.data,

        )

        existing_user = User.query.filter_by(email=form.email.data).first()
        if existing_user:
            return"Email already exists. Please log in instead."
            # onclick = "alert('You cannot edit other authors\' articles.');return false;"

            # return redirect(url_for('login'))

        db.session.add(new_user)
        db.session.commit()

        login_user(new_user)
        return redirect(url_for('dashboard'))


    return render_template('register.html',form=form)


# ------------------------------LOGIN-------------------------------------------
@app.route('/login',methods=['GET','POST'])
def login():
    form=Login()
    if form.validate_on_submit():

        user=User.query.filter_by(email=form.email.data).first()

        if not user:
            return 'Wrong email or password!'

        if not check_password_hash(user.password,form.password.data):

            return 'Wrong email or password!'

        login_user(user)

        return redirect(url_for('dashboard'))


    return render_template("login.html",form=form)


# --------------------------------TO VIEW AN ARTICLE-------------------------------------------
@app.route('/post/<int:post_id>')
def post_page(post_id):
    # posts=Blog_post.query.all()
    post = Blog_post.query.get_or_404(post_id)

    return render_template("post.html",post=post)


# ----------------------TO CREATE A NEW POST--------------------------------------------------------
@app.route('/create-post',methods=['GET','POST'])
@login_required
def create_post():
    form=Create_blog_post()
    if form.validate_on_submit():
        new_post=Blog_post(
            title=form.Title.data,
            subtitle=form.Subtitle.data,
            # author=form.Author.data,
            # author=current_user.name,
            author_id=current_user.id,

            body=form.Article.data,
            date=date.today().strftime("%B %d,%Y")

        )

        db.session.add(new_post)
        db.session.commit()
        return redirect(url_for("dashboard"))


    return render_template("form.html",form=form)


# ----------------------TO EDIT A POST----------------------------------------------------
@app.route("/edit-post/<int:post_id>",methods=["GET","POST"])
@login_required
def edit_post(post_id):
    post = Blog_post.query.get_or_404(post_id)

    if post.author_id!= current_user.id:
        abort(403)


    #     flash("You cannot edit other people's posts!")
    #     return redirect(url_for("dashboard"))


    form=Create_blog_post(
        Title=post.title,
        Subtitle=post.subtitle,
        Author=post.author,
        Article=post.body

    )

    if form.validate_on_submit():
        post.title = form.Title.data
        post.subtitle = form.Subtitle.data
        post.author = current_user
        post.body = form.Article.data


        db.session.commit()
        return redirect(url_for("post_page", post_id=post.id))

    return render_template("form.html",form=form)


# -------------------------------------TO DELETE A POST---------------------------------------------
@app.route('/delete-post/<int:post_id>')
@login_required
def delete_post(post_id):
    # post=Blog_post.query.get(post_id)
    post = Blog_post.query.get_or_404(post_id)


    if post.author_id!=current_user.id:
        return "Not your post - cannot delete!"
    db.session.delete(post)
    db.session.commit()

    return redirect(url_for('home'))


#---------------------------------TO GO TO DASHBOARD--------------------------------------------
@app.route('/dashboard')
@login_required
def dashboard():
    # posts=Blog_post.query.all()
    posts = Blog_post.query.filter_by(author_id=current_user.id).all()


    return render_template("dashboard.html",posts=posts)


# ----------------------------------LOGOUT-----------------------------------------------------
@app.route('/logout',methods=['GET','POST'])
@login_required
def logout():
    logout_user()
    return redirect(url_for('home'))




if __name__=="__main__":
    with app.app_context():
        db.create_all()
    app.run(debug=True)