Add editing galleries to API

app.py

@@ -1621,3 +1621,122 @@ def api_gallery(id):

                                
                                
                                
                            
                                
                                    
                                        
                                            1621  
                                            
                                        
                                        
                                            
                                            
                                            
                                            
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        
                                            1622  
                                                return flask.jsonify(json_gallery)
                                        
                                        
                                            
                                            
                                            
                                            
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        
                                            1623  
                                            
                                        
                                        
                                            
                                            
                                            
                                            
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1624 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1625 +
                                        @app.route("/api/gallery/<int:id>/edit", methods=["POST"])
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1626 +
                                        def api_edit_gallery(id):
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1627 +
                                            gallery = db.session.get(Gallery, id)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1628 +
                                            if gallery is None:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1629 +
                                                flask.abort(404)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1630 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1631 +
                                            current_user = db.session.get(User, flask.session.get("username"))
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1632 +
                                            if current_user is None:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1633 +
                                                flask.abort(401)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1634 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1635 +
                                            if current_user != gallery.owner and not current_user.admin:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1636 +
                                                flask.abort(403)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1637 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1638 +
                                            title = flask.request.json.get("title", gallery.title)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1639 +
                                            description = flask.request.json.get("description", gallery.description)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1640 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1641 +
                                            if not title:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1642 +
                                                return flask.jsonify({"error": "Give a title"}), 400
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1643 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1644 +
                                            if not description:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1645 +
                                                description = ""
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1646 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1647 +
                                            gallery.title = title
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1648 +
                                            gallery.description = description
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1649 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1650 +
                                            db.session.commit()
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1651 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1652 +
                                            return flask.jsonify({"message": "Gallery updated successfully"})
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1653 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1654 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1655 +
                                        @app.route("/api/new-gallery", methods=["POST"])
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1656 +
                                        def api_new_gallery():
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1657 +
                                            if "username" not in flask.session:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1658 +
                                                return flask.jsonify({"error": "You must be logged in to create galleries"}), 401
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1659 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1660 +
                                            title = flask.request.json.get("title")
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1661 +
                                            description = flask.request.json.get("description", "")
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1662 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1663 +
                                            if not title:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1664 +
                                                return flask.jsonify({"error": "Give a title"}), 400
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1665 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1666 +
                                            gallery = Gallery(title, description, db.session.get(User, flask.session["username"]))
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1667 +
                                            db.session.add(gallery)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1668 +
                                            db.session.commit()
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1669 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1670 +
                                            return flask.jsonify({"message": "Gallery created successfully"})
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1671 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1672 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1673 +
                                        @app.route("/api/gallery/<int:id>/add-picture", methods=["POST"])
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1674 +
                                        def api_gallery_add_picture(id):
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1675 +
                                            gallery = db.session.get(Gallery, id)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1676 +
                                            if gallery is None:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1677 +
                                                flask.abort(404)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1678 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1679 +
                                            if "username" not in flask.session:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1680 +
                                                return flask.jsonify({"error": "You must be logged in to add pictures to galleries"}), 401
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1681 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1682 +
                                            current_user = db.session.get(User, flask.session.get("username"))
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1683 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1684 +
                                            if flask.session["username"] != gallery.owner_name and not current_user.admin and not UserInGallery.query.filter_by(user=current_user, gallery=gallery).first():
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1685 +
                                                return flask.jsonify({"error": "You do not have permission to add pictures to this gallery"}), 403
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1686 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1687 +
                                            picture_id = flask.request.json.get("picture_id")
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1688 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1689 +
                                            try:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1690 +
                                                picture_id = int(picture_id)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1691 +
                                            except ValueError:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1692 +
                                                return flask.jsonify({"error": "Invalid picture ID"}), 400
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1693 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1694 +
                                            picture = db.session.get(PictureResource, picture_id)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1695 +
                                            if picture is None:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1696 +
                                                return flask.jsonify({"error": "The picture doesn't exist"}), 404
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1697 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1698 +
                                            if PictureInGallery.query.filter_by(resource=picture, gallery=gallery).first():
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1699 +
                                                return flask.jsonify({"error": "This picture is already in the gallery"}), 400
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1700 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1701 +
                                            db.session.add(PictureInGallery(picture, gallery))
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1702 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1703 +
                                            db.session.commit()
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1704 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1705 +
                                            return flask.jsonify({"message": "Picture added to gallery"})
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1706 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1707 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1708 +
                                        @app.route("/api/gallery/<int:id>/remove-picture", methods=["POST"])
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1709 +
                                        def api_gallery_remove_picture(id):
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1710 +
                                            gallery = db.session.get(Gallery, id)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1711 +
                                            if gallery is None:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1712 +
                                                flask.abort(404)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1713 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1714 +
                                            if "username" not in flask.session:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1715 +
                                                return flask.jsonify({"error": "You must be logged in to remove pictures from galleries"}), 401
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1716 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1717 +
                                            current_user = db.session.get(User, flask.session.get("username"))
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1718 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1719 +
                                            if flask.session["username"] != gallery.owner_name and not current_user.admin and not UserInGallery.query.filter_by(user=current_user, gallery=gallery).first():
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1720 +
                                                return flask.jsonify({"error": "You do not have permission to remove pictures from this gallery"}), 403
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1721 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1722 +
                                            picture_id = flask.request.json.get("picture_id")
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1723 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1724 +
                                            try:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1725 +
                                                picture_id = int(picture_id)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1726 +
                                            except ValueError:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1727 +
                                                return flask.jsonify({"error": "Invalid picture ID"}), 400
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1728 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1729 +
                                            picture = db.session.get(PictureResource, picture_id)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1730 +
                                            if picture is None:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1731 +
                                                return flask.jsonify({"error": "The picture doesn't exist"}), 404
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1732 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1733 +
                                            picture_in_gallery = PictureInGallery.query.filter_by(resource=picture, gallery=gallery).first()
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1734 +
                                            if picture_in_gallery is None:
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1735 +
                                                return flask.jsonify({"error": "This picture isn't in the gallery"}), 400
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1736 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1737 +
                                            db.session.delete(picture_in_gallery)
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1738 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1739 +
                                            db.session.commit()
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1740 +
                                        
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1741 +
                                            return flask.jsonify({"message": "Picture removed from gallery"})
                                        
                                        
                                        
                                    
                                
                                
                                
                            
                                
                                    
                                        1742 +