Replace user_exists api method with slightly different is_unique method; Implement signup api endpoint; Extend signup form

Author: MaKleSoft

api.py

@@ -83,14 +83,19 @@ class Meta:
 
 
 class PersonResource(ModelResource):
-    user = fields.ForeignKey(UserResource, 'user')
+    user = fields.ForeignKey(UserResource, 'user', blank=True, null=True)
     # teams = fields.ManyToManyField(TeamResource, 'teams')
 
     class Meta:
         queryset = Person.objects.all()
         authorization = Authorization()
-        authentication = ApiKeyAuthentication()
+        authentication = Authentication()
         excludes = ['activation_key', 'key_expires']
+        filtering = {
+            'user': ALL_WITH_RELATIONS,
+            'first_name': ['exact'],
+            'last_name': ['exact']
+        }
 
 
 class GameTypeResource(ModelResource):
@@ -155,6 +160,58 @@ class Meta:
 """
 
 
+def sign_up(request):
+    form = SignUpForm(request.POST)
+    if form.is_valid():
+        username = form.cleaned_data['username']
+        password = form.cleaned_data['password']
+        email = form.cleaned_data['email']
+        gender = form.cleaned_data['gender']
+        first_name = form.cleaned_data['first_name']
+        last_name = form.cleaned_data['last_name']
+        pass_number = form.cleaned_data['pass_number']
+        address = form.cleaned_data['address']
+        city = form.cleaned_data['city']
+        zip_code = form.cleaned_data['zip_code']
+        mobile_number = form.cleaned_data['mobile_number']
+
+        user = User.objects.create(username=username, password=password, email=email)
+
+        profile = form.cleaned_data['profile'] or Person.objects.create(user=user)
+        profile.first_name = first_name
+        profile.last_name = last_name
+        profile.gender = gender
+        profile.pass_number = pass_number
+        profile.address = address
+        profile.city = city
+        profile.zip_code = zip_code
+        profile.mobile_number = mobile_number
+        profile.save()
+
+        # Build the activation key
+        salt = sha.new(str(random())).hexdigest()[:5]
+        activation_key = sha.new(salt + user.username).hexdigest()
+        key_expires = datetime.datetime.now(pytz.utc) + datetime.timedelta(2)
+
+        # User is unactive until visiting activation link
+        user.is_active = False
+        user_profile.activation_key = activation_key
+        user_profile.key_expires = key_expires
+        activation_link = 'http://127.0.0.1/activate/' + activation_key
+
+        user.save()
+        user_profile.save()
+
+        from django.core.mail import send_mail
+        subject = _('Welcome to ScoreIt!')
+        message = _('To activate, please click the following link:\n' + activation_link)
+        sender = _('noreply@score-it.de')
+        recipients = [email]
+        send_mail(subject, message, sender, recipients)
+
+    return HttpResponse()
+
+
 def validate_user(request):
     """
     Checks a user's basic auth credentials and, if valid, returns the users data
@@ -199,30 +256,47 @@ def validate_user(request):
     return HttpResponse(person_resource.serialize(None, bundle, 'application/json'))
 
 
-def user_exists(request):
-    username = request.GET['username']
-    email = request.GET['email']
-    username_exists = True
-    email_exists = True
-
-    try:
-        User.objects.get(username=username)
-    except User.DoesNotExist:
-        username_exists = False
-    except User.MultipleObjectsReturned:
-        email_exists = True
-
-    try:
-        User.objects.get(email=email)
-    except User.DoesNotExist:
-        email_exists = False
-    except User.MultipleObjectsReturned:
-        email_exists = True
-
-    data = {
-        'username': username_exists,
-        'email': email_exists
-    }
+def is_unique(request):
+    data = {}
+
+    if 'user_name' in request.GET:
+        user_name = request.GET['user_name']
+
+        try:
+            User.objects.get(username=user_name)
+            unique = False
+        except User.DoesNotExist:
+            unique = True
+        except User.MultipleObjectsReturned:
+            unique = False
+
+        data['user_name'] = unique
+
+    if 'email' in request.GET:
+        email = request.GET['email']
+
+        try:
+            User.objects.get(email=email)
+            unique = False
+        except User.DoesNotExist:
+            unique = True
+        except User.MultipleObjectsReturned:
+            unique = False
+
+        data['email'] = unique
+
+    if 'pass_number' in request.GET:
+        pass_number = request.GET['pass_number']
+
+        try:
+            Person.objects.get(pass_number=pass_number)
+            unique = False
+        except Person.DoesNotExist:
+            unique = True
+        except Person.MultipleObjectsReturned:
+            unique = False
+
+        data['pass_number'] = unique
 
     serializer = Serializer()
 

forms.py

@@ -1,6 +1,7 @@
 from django import forms
 from django.utils.translation import ugettext as _
 from django.contrib.auth.models import User
+from handball.models import Person
 
 
 class SignUpForm(forms.Form):
@@ -9,7 +10,19 @@ class SignUpForm(forms.Form):
     password = forms.CharField(widget=forms.PasswordInput,
         label=_('Password'), required=True)
     password_repeat = forms.CharField(widget=forms.PasswordInput,
-        label=_('Repeat password'), required=True)
+        label=_('Repeat Password'), required=True)
+
+    gender = forms.ChoiceField(choices=(('male', _('male')), ('female', _('female'))))
+    first_name = forms.CharField(label=_('First Name'), required=True)
+    last_name = forms.CharField(label=_('Last Name'), required=True)
+    pass_number = forms.CharField(label=_('Pass Number'))
+    address = forms.CharField(label=_('Address'))
+    city = forms.CharField(label=_('City'))
+    zip_code = forms.CharField(label=_('Zip Code'))
+    mobile_number = forms.CharField(label=_('Mobile Number'))
+
+    profile = forms.ModelChoiceField(required=False,
+        queryset=Person.objects.filter(first_name=first_name).filter(last_name=last_name).filter(user__isnull=True))
 
     def clean_username(self):
         data = self.cleaned_data['username']
@@ -28,6 +41,15 @@ def clean_email(self):
         raise forms.ValidationError(
             _('A user with this email is already registered.'))
 
+    def clean_pass_number(self):
+        data = self.cleaned_data['pass_number']
+        try:
+            Person.objects.get(pass_number=data)
+        except Person.DoesNotExist:
+            return data
+        raise forms.ValidationError(
+            _('A player with this pass number is already registered.'))
+
     def clean(self):
         cleaned_data = super(SignUpForm, self).clean()
         password = cleaned_data.get('password')

urls.py

@@ -24,6 +24,6 @@
 # Non-resource api endpoints
 urlpatterns += patterns('handball.api',
     (r'^api/v1/auth/validate/$', 'validate_user'),
-    (r'^api/v1/auth/exists/$', 'user_exists')
+    (r'^api/v1/auth/unique/$', 'is_unique')
     #(r'^api/v1/auth/signup/$', 'sign_up')
 )