canaille-globuzma/canaille/consents.py

from canaille.flaskutils import user_needed
from canaille.models import Client
from canaille.models import Consent
from flask import Blueprint
from flask import flash
from flask import redirect
from flask import url_for
from flask_babel import gettext
from flask_themer import render_template


bp = Blueprint("consents", __name__)


@bp.route("/")
@user_needed()
def consents(user):
    consents = Consent.filter(oauthSubject=user.dn)
    consents = [c for c in consents if not c.oauthRevokationDate]
    client_dns = list({t.oauthClient for t in consents})
    clients = {dn: Client.get(dn) for dn in client_dns}
    return render_template(
        "consent_list.html", consents=consents, clients=clients, menuitem="consents"
    )


@bp.route("/delete/<consent_id>")
@user_needed()
def delete(user, consent_id):
    consent = Consent.get(consent_id)

    if not consent or consent.oauthSubject != user.dn:
        flash(gettext("Could not delete this access"), "error")

    else:
        consent.revoke()
        flash(gettext("The access has been revoked"), "success")

    return redirect(url_for("consents.consents"))