settings: avatar & username (& little stuff too)

accounts/locale/fr/LC_MESSAGES/django.po

@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2024-02-01 13:59+0100\n"
+"POT-Creation-Date: 2024-03-11 11:02+0100\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,6 +17,11 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
+
+#: serializers/update_user.py:15
+msgid "You dont have permission for this user."
+msgstr "Vous n'avez pas de permissions pour cet utilisateur."
+
 #: views/login.py:22
 msgid "Invalid username or password."
 msgstr "Nom d'utilisateur ou mot de passe incorect."

accounts/serializers/update_user.py

@@ -0,0 +1,20 @@
+from rest_framework.serializers import ModelSerializer, ValidationError
+from django.contrib.auth.models import User
+from django.utils.translation import gettext as _
+
+
+class UpdateUserSerializer(ModelSerializer):
+    class Meta:
+        model = User
+        fields = ['username']
+
+    def update(self, instance, validated_data):
+        user = self.context['request'].user
+
+        if user.pk != instance.pk:
+            raise ValidationError({'authorize': _('You dont have permission for this user.')})
+
+        instance.username = validated_data.get('username', instance.username)
+
+        instance.save()
+        return instance

accounts/urls.py

@@ -1,6 +1,6 @@
 from django.urls import path
 
-from .views import register, login, logout, delete, edit, logged
+from .views import register, login, logout, delete, logged, update_profile
 
 urlpatterns = [
     path("register", register.RegisterView.as_view(), name="register"),
@@ -8,6 +8,5 @@ urlpatterns = [
     path("logout", logout.LogoutView.as_view(), name="logout"),
     path("logged", logged.LoggedView.as_view(), name="logged"),
     path("delete", delete.DeleteView.as_view(), name="delete"),
-    path("edit", edit.EditView.as_view(), name="change_password")
-    
-]
+    path('update_profile', update_profile.UpdateProfileView.as_view(), name='update_profile')
+]

accounts/views/delete.py

@@ -5,17 +5,18 @@ from django.contrib.auth import logout
 from django.http import HttpRequest
 from rest_framework.authentication import SessionAuthentication
 
+
 class DeleteView(APIView):
     permission_classes = (permissions.IsAuthenticated,)
     authentication_classes = (SessionAuthentication,)
+
     def delete(self, request: HttpRequest):
         data: dict = request.data
 
         password: str = data["password"]
-        if (password is None):
-            return Response({"password": ["This field may not be blank."]})
-        if (request.user.check_password(password) == False):
-            return Response({"password": ["Password wrong."]})
+        if (request.user.check_password(password) is False):
+            return Response({"password": ["Password incorrect."]},
+                            status.HTTP_401_UNAUTHORIZED)
         request.user.delete()
         logout(request)
-        return Response("user deleted", status=status.HTTP_200_OK)
+        return Response(status=status.HTTP_200_OK)

accounts/views/edit.py

@@ -1,45 +0,0 @@
-from rest_framework.views import APIView
-from rest_framework.response import Response
-from rest_framework import permissions, status
-from django.http import HttpRequest
-from django.contrib.auth import login
-from rest_framework.authentication import SessionAuthentication
-from django.contrib.auth.models import User
-import re
-
-class EditView(APIView):
-
-    permission_classes = (permissions.IsAuthenticated,)
-    authentication_classes = (SessionAuthentication,)
-
-    def get(self, request: HttpRequest):
-        return Response({"username": request.user.username, "id": request.user.pk})
-
-    def patch(self, request: HttpRequest):
-        data: dict = request.data
-
-        current_password: str = data.get("current_password")
-        if (current_password is None):
-            return Response({"current_password": ["This field may not be blank."]})
-
-        user_object = request.user
-
-        if (user_object.check_password(current_password) == False):
-            return Response({"current_password": ["Password is wrong."]})
-
-        new_username = data.get("username", user_object.username)
-        if (new_username != user_object.username):
-            if (User.objects.filter(username=new_username).exists()):
-                return Response({"username": ["A user with that username already exists."]})
-            if (set(new_username) == {' '}):
-                return Response({"username": ["This field may not be blank."]})
-            if (re.search('^([a-z]||\@||\+||\-||\_)+$', new_username) is None):
-                return Response({"username":["Enter a valid username. This value may contain only letters, numbers, and @/./+/-/_ characters."]})
-
-        new_password: str = data.get("password")
-        if (new_password is not None):
-           user_object.set_password(new_password)
-        
-        user_object.save()
-
-        return Response("data has been alterate")

accounts/views/logged.py

@@ -2,15 +2,13 @@ from rest_framework.views import APIView
 from rest_framework.response import Response
 from rest_framework import permissions, status
 from django.http import HttpRequest
-from django.contrib.auth import login
 from rest_framework.authentication import SessionAuthentication
 
-from ..serializers.login import LoginSerializer
 
 class LoggedView(APIView):
-    
+
     permission_classes = (permissions.AllowAny,)
     authentication_classes = (SessionAuthentication,)
 
     def get(self, request: HttpRequest):
-        return Response(status = (status.HTTP_200_OK if request.user.is_authenticated else status.HTTP_400_BAD_REQUEST))
+        return Response(status=status.HTTP_200_OK if request.user.is_authenticated else status.HTTP_400_BAD_REQUEST)

accounts/views/login.py

@@ -8,8 +8,9 @@ from django.utils.translation import gettext as _
 
 from ..serializers.login import LoginSerializer
 
+
 class LoginView(APIView):
-    
+
     permission_classes = (permissions.AllowAny,)
     authentication_classes = (SessionAuthentication,)
 

accounts/views/logout.py

@@ -5,9 +5,11 @@ from rest_framework.response import Response
 from django.http import HttpRequest
 from rest_framework.authentication import SessionAuthentication
 
+
 class LogoutView(APIView):
     permission_classes = (permissions.IsAuthenticated,)
     authentication_classes = (SessionAuthentication,)
+
     def get(self, request: HttpRequest):
         logout(request)
-        return Response("user unlogged", status=status.HTTP_200_OK)
+        return Response("user logged out", status.HTTP_200_OK)

accounts/views/register.py

@@ -5,8 +5,10 @@ from rest_framework.response import Response
 from django.http import HttpRequest
 from django.contrib.auth import login
 
+
 class RegisterView(APIView):
     permission_classes = (permissions.AllowAny,)
+
     def post(self, request: HttpRequest):
         data = request.data
         serializer = RegisterSerialiser(data=data)

accounts/views/update_profile.py

@@ -0,0 +1,14 @@
+from ..serializers.update_user import UpdateUserSerializer
+from rest_framework.generics import UpdateAPIView
+from rest_framework.permissions import IsAuthenticated
+from django.contrib.auth.models import User
+
+
+class UpdateProfileView(UpdateAPIView):
+
+    queryset = User.objects.all()
+    permission_classes = (IsAuthenticated,)
+    serializer_class = UpdateUserSerializer
+
+    def get_object(self):
+        return self.queryset.get(pk=self.request.user.pk)