app.py

from flask import *
from flask_sqlalchemy import SQLAlchemy
from werkzeug.security import check_password_hash, generate_password_hash
import os

app = Flask(__name__)
app.config['VERSION'] = 'v1.0'
app.secret_key = 'super_secret_key :D'
app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///users.db'
app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False
db = SQLAlchemy(app)

class User(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    username = db.Column(db.String(50), unique=True, nullable=False)
    password = db.Column(db.String(100), nullable=False)

    def __repr__(self):
        return f"User('{self.username}')"

def checkAuth():
    if 'username' not in session:
        return redirect(url_for('login'))

UPLOAD_FOLDER = 'uploads'
if not os.path.exists(UPLOAD_FOLDER):
    os.makedirs(UPLOAD_FOLDER)

app.config['UPLOAD_FOLDER'] = UPLOAD_FOLDER

# TODO: FIXME
# @app.before_request
# def check_authentication():
#     if request.endpoint != 'login' and 'username' not in session:
#         return redirect(url_for('login'))

@app.route('/')
def index():
    if 'username' not in session:
        return redirect('/login')

    return render_template('index.html')


@app.route('/login', methods=['GET', 'POST'])
def login():
    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        user = User.query.filter_by(username=username).first()
        if user and check_password_hash(user.password, password):
            session['username'] = username
            flash('Login successful!', 'success')
            return redirect('/')
        else:
            flash('Invalid username or password', 'error')
    return render_template('login.html')

@app.route('/register', methods=['GET', 'POST'])
def register():
    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        if User.query.filter_by(username=username).first():
            flash('Username already exists', 'error')
        else:
            # Generate password hash
            hashed_password = generate_password_hash(password)
            # Create a new user instance
            new_user = User(username=username, password=hashed_password)
            # Add the new user to the database session
            db.session.add(new_user)
            # Commit the changes to the database
            db.session.commit()
            flash('Registration successful. Please log in.', 'success')
            return redirect('/login')
    return render_template('register.html')

@app.route('/logout')
def logout():
    session.pop('username', None)
    flash('You have been logged out', 'info')
    return redirect('/login')

@app.route('/upload', methods=['POST'])
def upload_file():
    checkAuth()
    folder = request.form['folder']
    if folder:
        folder_path = os.path.join(app.config['UPLOAD_FOLDER'], folder)
        if not os.path.exists(folder_path):
            os.makedirs(folder_path)
    else:
        folder_path = app.config['UPLOAD_FOLDER']
    
    file = request.files['file']
    
    if file.filename == '':
        flash('No selected file')
        return redirect(url_for('index'))
    
    if file:
        filename = file.filename
        file.save(os.path.join(folder_path, filename))
        flash(f'File {filename} uploaded successfully')
    return redirect(url_for('index'))

@app.route('/files')
def list_files():
    checkAuth()
    folders = []
    files = []
    for item in os.listdir(app.config['UPLOAD_FOLDER']):
        if os.path.isdir(os.path.join(app.config['UPLOAD_FOLDER'], item)):
            folders.append(item)
        else:
            files.append(item)
    return render_template('files.html', folders=folders, files=files)

@app.route('/download/<path:filename>')
def download_file(filename):
    checkAuth()
    return send_from_directory(app.config['UPLOAD_FOLDER'], filename, as_attachment=True)

@app.route('/delete/<path:filename>')
def delete_file(filename):
    checkAuth()
    file_path = os.path.join(app.config['UPLOAD_FOLDER'], filename)
    if os.path.exists(file_path):
        if os.path.isdir(file_path):
            # Recursively delete all files and subdirectories within the folder
            for root, dirs, files in os.walk(file_path, topdown=False):
                for file in files:
                    os.remove(os.path.join(root, file))
                for dir in dirs:
                    os.rmdir(os.path.join(root, dir))
            # After all files and subdirectories are deleted, remove the directory itself
            os.rmdir(file_path)
        else:
            os.remove(file_path)
        flash(f'{filename} deleted successfully')
    return redirect(url_for('list_files'))

@app.route('/folder/<foldername>')
def folder_files(foldername):
    checkAuth()
    folder_path = os.path.join(app.config['UPLOAD_FOLDER'], foldername)
    files = os.listdir(folder_path)
    return render_template('folder.html', foldername=foldername, files=files)


if __name__ == '__main__':
#program entry point
    with app.app_context():
        db.create_all()
    app.run(debug=True)