MarseyWorld/files/mail/__init__.py

import requests
import time
from flask import *
from urllib.parse import quote

from files.helpers.security import *
from files.helpers.wrappers import *
from files.helpers.const import *
from files.helpers.get import *
from files.helpers.actions import *
from files.classes import *
from files.__main__ import app, limiter


def send_mail(to_address, subject, html):
	if MAILGUN_KEY == 'blahblahblah': return

	url = f"https://api.mailgun.net/v3/{SITE}/messages"

	auth = ("api", MAILGUN_KEY)

	data = {"from": EMAIL,
			"to": [to_address],
			"subject": subject,
			"html": html,
			}
	
	requests.post(url, auth=auth, data=data)


def send_verification_email(user, email=None):

	if not email:
		email = user.email

	url = f"https://{SITE}/activate"
	now = int(time.time())

	token = generate_hash(f"{email}+{user.id}+{now}")
	params = f"?email={quote(email)}&id={user.id}&time={now}&token={token}"

	link = url + params

	send_mail(to_address=email,
			html=render_template("email/email_verify.html",
								action_url=link,
								v=user),
			subject=f"Validate your {SITE_NAME} account email."
			)


@app.post("/verify_email")
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@limiter.limit("1/second;30/minute;200/hour;1000/day", key_func=lambda:f'{SITE}-{session.get("lo_user")}')
@auth_required
def verify_email(v):

	send_verification_email(v)

	return {"message": "Email has been sent (ETA ~5 minutes)"}


@app.get("/activate")
@auth_required
def activate(v):

	email = request.values.get("email", "").strip().lower()

	if not email_regex.fullmatch(email):
		return render_template("message.html", v=v, title="Invalid email.", error="Invalid email."), 400


	id = request.values.get("id", "").strip()
	timestamp = int(request.values.get("time", "0"))
	token = request.values.get("token", "").strip()

	if int(time.time()) - timestamp > 3600:
		return render_template("message.html", v=v, title="Verification link expired.",
							message="This link has expired. Visit your settings to send yourself another verification email."), 410

	user = get_account(id)

	if not validate_hash(f"{email}+{id}+{timestamp}", token):
		abort(403)

	if user.is_activated and user.email == email:
		return render_template("message_success.html", v=v, title="Email already verified.", message="Email already verified."), 404

	user.email = email
	user.is_activated = True

	badge_grant(user=user, badge_id=2)

	g.db.add(user)

	return render_template("message_success.html", v=v, title="Email verified.", message=f"Your email {email} has been verified. Thank you.")