mirror of
https://github.com/GSA/notifications-api.git
synced 2025-12-20 15:31:15 -05:00
53 lines
1.8 KiB
Python
53 lines
1.8 KiB
Python
from flask import (
|
||
Blueprint,
|
||
jsonify,
|
||
current_app
|
||
)
|
||
|
||
from itsdangerous import SignatureExpired, BadData
|
||
|
||
from notifications_utils.url_safe_token import check_token
|
||
|
||
from app.dao.invited_user_dao import get_invited_user_by_id
|
||
from app.dao.organisation_dao import dao_get_invited_organisation_user
|
||
|
||
from app.errors import (
|
||
register_errors,
|
||
InvalidRequest
|
||
)
|
||
|
||
from app.schemas import invited_user_schema
|
||
|
||
|
||
accept_invite = Blueprint('accept_invite', __name__)
|
||
register_errors(accept_invite)
|
||
|
||
|
||
@accept_invite.route('/<invitation_type>/<token>', methods=['GET'])
|
||
def validate_invitation_token(invitation_type, token):
|
||
|
||
max_age_seconds = 60 * 60 * 24 * current_app.config['INVITATION_EXPIRATION_DAYS']
|
||
|
||
try:
|
||
invited_user_id = check_token(token,
|
||
current_app.config['SECRET_KEY'],
|
||
current_app.config['DANGEROUS_SALT'],
|
||
max_age_seconds)
|
||
except SignatureExpired:
|
||
errors = {'invitation':
|
||
['Your invitation to GOV.UK Notify has expired. '
|
||
'Please ask the person that invited you to send you another one']}
|
||
raise InvalidRequest(errors, status_code=400)
|
||
except BadData:
|
||
errors = {'invitation': 'Something’s wrong with this link. Make sure you’ve copied the whole thing.'}
|
||
raise InvalidRequest(errors, status_code=400)
|
||
|
||
if invitation_type == 'service':
|
||
invited_user = get_invited_user_by_id(invited_user_id)
|
||
return jsonify(data=invited_user_schema.dump(invited_user).data), 200
|
||
elif invitation_type == 'organisation':
|
||
invited_user = dao_get_invited_organisation_user(invited_user_id)
|
||
return jsonify(data=invited_user.serialize()), 200
|
||
else:
|
||
raise InvalidRequest("Unrecognised invitation type: {}".format(invitation_type))
|