app.py

from flask import Flask, render_template, request, jsonify, session, flash, redirect, url_for, make_response, g
from flask_bcrypt import Bcrypt
from common.mongo_connection import MongoConnection
from config import MONGO_CONNECTION_STRING, MONGO_AUTH_DATABASE, MONGO_DATABASE_NAME
from common.login_manager import authenticate_user
from common.session_manager import SessionManager
from controllers.user_controller import user_bp
from controllers.dailySales_controller import sales_bp
from controllers.products_controller import product_bp 
from controllers.supplier_controller import supplier_bp
from controllers.notifications_controller import notifications_bp
from controllers.addstock_controller import addstock_bp

app = Flask(__name__)
bcrypt = Bcrypt(app)
app.secret_key = 'demo_session_kapita'

mongo = MongoConnection(
    connection_string=MONGO_CONNECTION_STRING,
    db_name=MONGO_DATABASE_NAME
)

auth_mongo = MongoConnection(
    connection_string=MONGO_CONNECTION_STRING,
    db_name=MONGO_AUTH_DATABASE
)

session_manager = SessionManager()

app.register_blueprint(user_bp, url_prefix='/users_management')
app.register_blueprint(product_bp, url_prefix='/products')
app.register_blueprint(supplier_bp, url_prefix='/suppliers')
app.register_blueprint(sales_bp, url_prefix='/daily_sales')
app.register_blueprint(notifications_bp, url_prefix='/notifications')
app.register_blueprint(addstock_bp, url_prefix='/add_stock')

@app.before_request
def check_login_before_request():
    """
    Fungsi ini akan berjalan OTOMATIS sebelum setiap request ke halaman manapun.
    """
    allowed_routes = ['login', 'static']
    if request.endpoint and any(route in request.endpoint for route in allowed_routes):
        return None

    token = request.cookies.get('token')
    if not token:
        return redirect(url_for('login'))
    
    session_data = session_manager.verify_token(token)
    
    if not session_data:
        flash('Sesi Anda telah berakhir atau tidak valid. Silakan login kembali.', 'error')
        response = make_response(redirect(url_for('login')))
        response.set_cookie('token', '', expires=0)
        return response
    
    session['user_id'] = session_data.get('username')
    session['role'] = session_data.get('role')
    return None

@app.route('/')
def index():
    if session.get('role').lower() == 'admin':
        return redirect(url_for('user_bp.get_users'))
    elif session.get('role').lower() == 'operator':
        return redirect(url_for('sales_bp.daily_sales'))
    else:
        flash('Role tidak dikenali.', 'error')
        return redirect(url_for('login'))

@app.route('/login', methods=['GET', 'POST'])
def login():
    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']

        user = authenticate_user(username, password)
        if user:
            role = user['role'].lower()
            token = session_manager.generate_token(user['username'], role)

            session['user_id'] = user['username']
            session['role'] = role

            target_url = url_for('index') if role == 'admin' else url_for('sales_bp.daily_sales')
            
            response = make_response(redirect(target_url))
            response.set_cookie('token', token)
            return response
        else:
            flash('Username atau password salah.', 'error')

    return render_template('login.html')

@app.route('/logout')
def logout():
    token = request.cookies.get('token')
    if token:
        session_manager.remove_token(token)
    
    session.clear()
    response = make_response(redirect(url_for('login')))
    response.set_cookie('token', '', expires=0)
    flash('Anda telah berhasil logout.', 'success')
    return response

if __name__ == '__main__':
    app.run(debug=True)