mirror of https://github.com/logos-co/open-law.git
47 lines
1.3 KiB
Python
47 lines
1.3 KiB
Python
|
from flask_login import current_user
|
||
|
|
from flask import Response, flash, redirect, url_for, request
|
||
|
|
|
||
|
|
from app import models as m, db
|
||
|
|
from app.logger import log
|
||
|
|
|
||
|
|
|
||
|
|
class BookRouteVerifier:
|
||
|
|
_routes = []
|
||
|
|
|
||
|
|
@classmethod
|
||
|
|
def add_route(cls, route_name: str):
|
||
|
|
cls._routes.append(route_name)
|
||
|
|
|
||
|
|
@classmethod
|
||
|
|
def remove_route(cls, route_name: str):
|
||
|
|
cls._routes.remove(route_name)
|
||
|
|
|
||
|
|
@classmethod
|
||
|
|
def is_present(cls, route_name: str) -> bool:
|
||
|
|
return route_name in cls._routes
|
||
|
|
|
||
|
|
|
||
|
|
def register_book_verify_route(blueprint_name: str):
|
||
|
|
def decorator(func: callable):
|
||
|
|
BookRouteVerifier.add_route(f"{blueprint_name}.{func.__name__}")
|
||
|
|
return func
|
||
|
|
|
||
|
|
return decorator
|
||
|
|
|
||
|
|
|
||
|
|
def book_validator() -> Response | None:
|
||
|
|
if not BookRouteVerifier.is_present(request.endpoint):
|
||
|
|
return None
|
||
|
|
|
||
|
|
request_args = (
|
||
|
|
{**request.view_args, **request.args} if request.view_args else {**request.args}
|
||
|
|
)
|
||
|
|
|
||
|
|
book_id = request_args.get("book_id")
|
||
|
|
if book_id:
|
||
|
|
book: m.Book = db.session.get(m.Book, book_id)
|
||
|
|
if not book or book.is_deleted or book.owner != current_user:
|
||
|
|
log(log.INFO, "User: [%s] is not owner of book: [%s]", current_user, book)
|
||
|
|
flash("You are not owner of this book!", "danger")
|
||
|
|
return redirect(url_for("book.my_books"))
|