path: root/app.py

from pathlib import Path
import json
import hmac
from typing import Annotated
import secrets
import random
from enum import Enum
from dataclasses import dataclass
import io
import datetime
from contextlib import asynccontextmanager
from typing import Any
from collections.abc import AsyncGenerator, Sequence

from sqlalchemy import select, String
from sqlalchemy.exc import IntegrityError, NoResultFound
from sqlalchemy.ext.asyncio import AsyncSession, async_sessionmaker, create_async_engine
from sqlalchemy.orm import DeclarativeBase, Mapped, mapped_column
from sqlalchemy.dialects.postgresql import ARRAY

from litestar import Litestar, get, post, Request
from litestar.contrib.jinja import JinjaTemplateEngine
from litestar.exceptions import HTTPException
from litestar.template.config import TemplateConfig
from litestar.response import Template, Redirect
from litestar.response.file import ASGIFileResponse
from litestar.response.streaming import ASGIStreamingResponse
from litestar.static_files import create_static_files_router
from litestar.enums import RequestEncodingType
from litestar.params import Body
from litestar import Request
from litestar.datastructures import State

import ics

# TODO admin remove attendees
# use url_fors, timezones?
# error handling, auth errors, sql errors, input validation

class Base(DeclarativeBase):
    pass

class Event(Base):
    __tablename__ = "events"

    def __init__(self, iden, password, title, time, location, description):
        self.iden = iden
        self.password = password
        self.title = title
        self.time = time
        self.location = location
        self.description = description
        self.invites = '[]'

    iden: Mapped[str] = mapped_column(primary_key=True)
    password: Mapped[str]
    title: Mapped[str]
    time: Mapped[datetime.datetime]
    location: Mapped[str]
    description: Mapped[str]
    invites: Mapped[str]

    def get_invites(self):
        return json.loads(self.invites)

    def to_ics(self):
        fmt = "%Y%m%dT%H%M%SZ"
        start = self.time.strftime(fmt)
        now = datetime.datetime.now().strftime(fmt)
        return f'''BEGIN:VCALENDAR
VERSION:2.0
PRODID:custom
BEGIN:VEVENT
DESCRIPTION:{self.description}
LOCATION:{self.location}
DTSTART:{start}
DTSTAMP:{now}
SUMMARY:{self.title}
UID:{self.iden}
END:VEVENT
END:VCALENDAR'''

@asynccontextmanager
async def db_connection(app: Litestar) -> AsyncGenerator[None, None]:
    engine = getattr(app.state, "engine", None)
    if engine is None:
        engine = create_async_engine("sqlite+aiosqlite:///symposium.sqlite", echo=True)
        app.state.engine = engine
    async with engine.begin() as conn:
        await conn.run_sync(Base.metadata.create_all)
    try:
        yield
    finally:
        await engine.dispose()

sessionmaker = async_sessionmaker(expire_on_commit=False)

parts = [
    "Oxbow", "Limber", "Steadfast", "Regicide", "Swarm", "Weave", "Bough", "Canopy", "Herald", "Scorn",
    "Alder", "Aerial", "Welkin", "Acrid", "Kindling", "Rapture", "Myrtle", "Envy", "Solstice",
    "Juniper", "Cleaving", "Stream", "Reaper", "Sluice", "Conduit", "Disdain", "Sylvan", "Ravish", "Atrium",
    "Thresh", "Harvest", "Water", "Renewal", "Rosy", "Frieze", "Portal", "Vespers", "Litany", "Serpent",
    "Primate", "Incite", "Canon", "Acquiese", "Mirror", "Script", "Seal", "Privy",
    "Piercing", "Heresy", "Subduct", "Sceptre", "Arrogance", "Ivory", "Accrete", "Cluster",
    "Sepulchre", "Summon", "Pleading", "Myriad", "Exalted", "Sentry", "Shriven", "River", "Threshold"
]

def gen_iden():
    return "-".join(random.choices(parts, k=8))

@get("/")
async def index() -> Template:
    return Template(template_name="index.html")

@get("/event/{iden:str}")
async def event(state: State, iden: str, password: str = "") -> Template:
    async with sessionmaker(bind=state.engine) as session:
        async with session.begin():
            query = select(Event).where(Event.iden == iden)
            result = await session.execute(query)
            event = result.scalar_one()

    manage = False
    if password and hmac.compare_digest(event.password, password):
        manage = True

    context = dict(event=event, manage=manage)
    return Template(template_name="event.html", context=context)

@get("/calendar/{iden:str}")
async def calendar(state: State, iden: str) -> ASGIStreamingResponse:
    async with sessionmaker(bind=state.engine) as session:
        async with session.begin():
            query = select(Event).where(Event.iden == iden)
            result = await session.execute(query)
            event = result.scalar_one()
    ics = event.to_ics()
    f = io.StringIO(ics)
    return ASGIStreamingResponse(iterator=f, media_type='text/plain', headers={
        'Content-Disposition': 'attachment; filename=event.ics',
    })

@dataclass
class EditRequest:
    title: str
    when: str
    where: str
    what: str

@post("/event/create")
async def create(state: State, data: Annotated[EditRequest, Body(media_type=RequestEncodingType.URL_ENCODED)]) -> Redirect:
    iden = gen_iden()
    password = secrets.token_bytes(16).hex()
    event = Event(iden, password, data.title, datetime.datetime.fromisoformat(data.when), data.where, data.what)

    async with sessionmaker(bind=state.engine) as session:
        async with session.begin():
            session.add(event)

    return Redirect(path="/symposium/event/" + iden + "?password=" + event.password)

@post("/event/{iden:str}/edit")
async def edit(state: State, request: Request, iden: str, password: str, data: Annotated[EditRequest, Body(media_type=RequestEncodingType.URL_ENCODED)]) -> Redirect: #-> Template:
    async with sessionmaker(bind=state.engine) as session:
        async with session.begin():
            query = select(Event).where(Event.iden == iden)
            result = await session.execute(query)
            event = result.scalar_one()

            manage = False
            if password and hmac.compare_digest(event.password, password):
                manage = True
            if not manage:
                raise ValueError("no auth")

            event.title = data.title
            event.time = datetime.datetime.fromisoformat(data.when)
            event.location = data.where
            event.description = data.what

    return Redirect(path="/symposium/event/" + iden + "?password=" + event.password)

@dataclass
class JoinRequest:
    name: str

@post("/event/{iden:str}/join")
async def join(state: State, request: Request, iden: str, data: Annotated[JoinRequest, Body(media_type=RequestEncodingType.URL_ENCODED)], password: str = "") -> Redirect: #-> Template:
    async with sessionmaker(bind=state.engine) as session:
        async with session.begin():
            query = select(Event).where(Event.iden == iden)
            result = await session.execute(query)
            event = result.scalar_one()
            name = data.name
            invites = json.loads(event.invites)
            invites.append(name)
            event.invites = json.dumps(invites)
    url = "/symposium/event/" + iden
    if password:
        url += "?password=" + password
    return Redirect(path=url)

app = Litestar(
    route_handlers=[
        index,
        event,
        calendar,
        create,
        edit,
        join,
        create_static_files_router(path='/static', directories=['static']),
    ],
    template_config=TemplateConfig(
        directory=Path("templates"),
        engine=JinjaTemplateEngine,
    ),
    lifespan=[db_connection],
)