app.py

#!/usr/bin/env python
# -*- coding: utf-8 -*-
from flask import Flask, request, session
from Page.SearchPage import SearchPage
from Page.SearchRule import SearchRule
from Model import *
from pony.orm import *
from pony.orm.serialization import to_dict
import json
import cronwork
from functools import wraps
from UserCenter import UserCenter

app = Flask(__name__)

if Config.get('develop'):
    app.debug = True

def check_permission(func):
    @wraps(func)
    def _check_permission(**args):
        student_id = args['student_id']
        if request.form.has_key('token'):
            token = request.form['token']   
        elif request.args.get('token'):
            token = request.args.get('token')
        elif session.has_key('token'):
            token = session['token']
        else:
            return json.dumps({'result':False, 'msg':'Permission denied'})        
        u = User.checkToken(student_id, token)
        if not u:
            return json.dumps({'result':False, 'msg':'Permission denied'})        
        return func(**args)
    return _check_permission

@app.route("/api/search")
def search():
    key = request.args.get('key')
    author = request.args.get('author')
    key = key.encode('utf8') if key else ''
    author = author.encode('utf8') if author else ''
    page = 1 if not request.args.get('page') else int(request.args.get('page'))
    limit = 20 if not request.args.get('limit') else int(request.args.get('limit'))
    r = SearchRule().add('title', key).add('author', author)
    result = SearchPage(r).offset(page, limit)
    return json.dumps(result)

@app.route("/api/user/<int:student_id>/history")
@db_session
@check_permission
def history(student_id):
    u = User.getBySid(str(student_id))
    h = to_dict(u.histories)
    return json.dumps({
        'result':True, 
        'user':u.to_dict(exclude='password'), 
        'history':h
        })

@app.route("/api/user/<int:student_id>/borrowed")
@db_session
@check_permission
def borrowed(student_id):
    u = User.getBySid(str(student_id))
    r = to_dict(u.readings)['Reading']
    r = [r[b] for b in r]
    result = []
    for row in r:
        del row['user']
        result.append(row)
    return json.dumps({
        'result':True,
        'user':u.to_dict(exclude='password'),
        'readings':result
        })

@app.route("/api/user/<int:student_id>/borrowed/<int:book_id>")
@db_session
@check_permission
def borrowed_book(student_id, book_id):
    pass

@app.route("/api/user/<int:student_id>")
@db_session
@check_permission
def user(student_id):
    u = User.getBySid(str(student_id))
    if not u :
        return json.dumps({'result':False, 'msg':'No such user'})
    return json.dumps({'result':True, 'user':u.to_dict(exclude='password')}) 

@app.route("/")
def index():
    return 'hello world'   

if __name__ == '__main__':
    cronwork.start()
    if Config.get('develop'):
        app.run(host='0.0.0.0', use_reloader=False)
    else:
        app.run(host='0.0.0.0', use_reloader=False)