mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-02-05 10:53:28 -05:00
16618e80f9
When a person registers with a valid mobile number and email address, a code will be sent to each. That person can enter the verify codes and continue to the add-service page.
74 lines
2.5 KiB
Python
74 lines
2.5 KiB
Python
from datetime import datetime, timedelta
|
|
from random import randint
|
|
|
|
from flask import render_template, redirect, jsonify, session
|
|
from sqlalchemy.exc import SQLAlchemyError
|
|
|
|
from app import admin_api_client
|
|
from app.main import main
|
|
from app.main.dao import users_dao
|
|
from app.main.encryption import hashpw
|
|
from app.main.exceptions import AdminApiClientException
|
|
from app.main.forms import RegisterUserForm
|
|
from app.models import User
|
|
|
|
|
|
@main.route("/register", methods=['GET'])
|
|
def render_register():
|
|
return render_template('register.html', form=RegisterUserForm())
|
|
|
|
|
|
@main.route('/register', methods=['POST'])
|
|
def process_register():
|
|
form = RegisterUserForm()
|
|
|
|
if form.validate_on_submit():
|
|
user = User(name=form.name.data,
|
|
email_address=form.email_address.data,
|
|
mobile_number=form.mobile_number.data,
|
|
password=form.password.data,
|
|
created_at=datetime.now(),
|
|
role_id=1)
|
|
try:
|
|
sms_code = send_sms_code(form.mobile_number.data)
|
|
email_code = send_email_code(form.email_address.data)
|
|
session['sms_code'] = hashpw(sms_code)
|
|
session['email_code'] = hashpw(email_code)
|
|
session['expiry_date'] = str(datetime.now() + timedelta(hours=1))
|
|
users_dao.insert_user(user)
|
|
session['user_id'] = user.id
|
|
except AdminApiClientException as e:
|
|
return jsonify(admin_api_client_error=e.value)
|
|
except SQLAlchemyError:
|
|
return jsonify(database_error='encountered database error'), 400
|
|
else:
|
|
return jsonify(form.errors), 400
|
|
return redirect('/verify')
|
|
|
|
|
|
def send_sms_code(mobile_number):
|
|
sms_code = _create_code()
|
|
try:
|
|
admin_api_client.send_sms(mobile_number, message=sms_code, token=admin_api_client.auth_token)
|
|
except:
|
|
raise AdminApiClientException('Exception when sending sms.')
|
|
return sms_code
|
|
|
|
|
|
def send_email_code(email):
|
|
email_code = _create_code()
|
|
try:
|
|
admin_api_client.send_email(email_address=email,
|
|
from_str='notify@digital.cabinet-office.gov.uk',
|
|
message=email_code,
|
|
subject='Verification code',
|
|
token=admin_api_client.auth_token)
|
|
except:
|
|
raise AdminApiClientException('Exception when sending email.')
|
|
|
|
return email_code
|
|
|
|
|
|
def _create_code():
|
|
return ''.join(["%s" % randint(0, 9) for _ in range(0, 5)])
|