119 lines
4.9 KiB
Python
119 lines
4.9 KiB
Python
from flask import Blueprint, render_template, request, flash, redirect, url_for, current_app
|
|
from flask_mail import Message
|
|
from itsdangerous import URLSafeTimedSerializer, SignatureExpired, BadSignature
|
|
from app.extensions import db, mail, limiter
|
|
from app.models import Participant
|
|
import traceback
|
|
|
|
bp = Blueprint('main', __name__)
|
|
|
|
def get_confirmed_count():
|
|
return Participant.query.filter_by(confirmed=True).count()
|
|
|
|
def add_user(name, email, looking_for_team, on_waitlist = False):
|
|
new_user = Participant(name=name, email=email, looking_for_team=looking_for_team)
|
|
if on_waitlist:
|
|
new_user.on_waitlist = on_waitlist
|
|
db.session.add(new_user)
|
|
db.session.commit()
|
|
return new_user
|
|
|
|
def send_verification_email(user, is_new=True):
|
|
if user.num_emails_sent < 5:
|
|
s = URLSafeTimedSerializer(current_app.config['SECRET_KEY'])
|
|
register_token = s.dumps(user.email, salt='email-confirm-h4tum-ctf-2025')
|
|
remove_token = s.dumps(user.email, salt='email-remove-h4tum-ctf-2026')
|
|
register_link = url_for('main.verify_email', token=register_token, _external=True)
|
|
remove_link = url_for('main.remove_registration', token=remove_token, _external=True)
|
|
logo = url_for('static', filename='h4tum_white.png', _external=True)
|
|
|
|
msg = Message('Verify your CTF Registration', recipients=[user.email])
|
|
msg.html = render_template("email.html", user_name=user.name, register_link=register_link, remove_link=remove_link, logo_url=logo)
|
|
mail.send(msg)
|
|
current_app.logger.info(f"Sent verification email to {user.email}")
|
|
user.num_emails_sent += 1
|
|
db.session.commit()
|
|
if is_new:
|
|
flash("Registration started! Check your email to confirm your spot.", "success")
|
|
else:
|
|
flash("Confirmation email resent. Please check your inbox.", "info")
|
|
else:
|
|
flash("Email limit reached", "error")
|
|
|
|
def send_waitlist_email(user):
|
|
msg = Message('h4tum CTF 2026 Registration', recipients=[user.email])
|
|
logo = url_for('static', filename='h4tum_white.png', _external=True)
|
|
msg.html = render_template("waitlist_email.html", logo_url=logo, user_name=user.name)
|
|
current_app.logger.info(msg)
|
|
mail.send(msg)
|
|
|
|
def send_waitlist_newsletter():
|
|
results = db.session.query(Participant.email).filter(Participant.on_waitlist == True).all()
|
|
waitlist_emails = [r[0] for r in results]
|
|
logo = url_for('static', filename='h4tum_white.png', _external=True)
|
|
s = URLSafeTimedSerializer(current_app.config['SECRET_KEY'])
|
|
for email in waitlist_emails:
|
|
register_token = s.dumps(email, salt='email-confirm-h4tum-ctf-2025')
|
|
register_link = url_for('main.verify_email', token=register_token, _external=True)
|
|
remove_token = s.dumps(email, salt='email-remove-h4tum-ctf-2026')
|
|
remove_link = url_for('main.remove_registration', token=remove_token, _external=True)
|
|
msg = Message('h4tum CTF 2026 Free Spot available', recipients=[email])
|
|
msg.html = render_template("waitlist_maillist_email.html", logo_url=logo, register_link=register_link, remove_link=remove_link)
|
|
mail.send(msg)
|
|
current_app.logger.info(f"Sent waitlist newsletter email to {email}")
|
|
|
|
@bp.route('/', methods=['GET', 'POST'])
|
|
@limiter.limit("5 per hour", methods=["POST"])
|
|
def index():
|
|
confirmed_count = get_confirmed_count()
|
|
max_spots = current_app.config['MAX_SPOTS']
|
|
spots_left = max_spots - confirmed_count
|
|
|
|
if request.method == 'POST':
|
|
flash("Event has already started")
|
|
|
|
return render_template('index.html', spots_left=spots_left, max_spots=max_spots)
|
|
|
|
|
|
@bp.route('/verify/<token>')
|
|
@limiter.limit("50 per hour")
|
|
def verify_email(token):
|
|
return render_template("error.html", error_message="Sorry! The event has already started")
|
|
|
|
@bp.route('/remove/<token>')
|
|
@limiter.limit("5 per hour")
|
|
def remove_registration(token):
|
|
return render_template("error.html", error_message="The event already started you can not deregister")
|
|
|
|
@bp.route('/dsgvo')
|
|
@limiter.exempt
|
|
def dsgvo():
|
|
return render_template('dsgvo.html')
|
|
|
|
@bp.route('/impressum')
|
|
@limiter.exempt
|
|
def impressum():
|
|
return render_template('impressum.html')
|
|
|
|
@bp.route('/rules')
|
|
@limiter.exempt
|
|
def rules():
|
|
return render_template('rules.html')
|
|
|
|
@bp.errorhandler(429)
|
|
def ratelimit_handler(e):
|
|
msg = Message('429 Ratelimit hit', recipients=["simon.bussmann@tum.de"])
|
|
msg.body = f"IP {request.remote_addr} triggered the rate limit"
|
|
mail.send(msg)
|
|
return render_template("ratelimit_error.html", error_message=e.description), 429
|
|
|
|
@bp.errorhandler(500)
|
|
def server_error(e):
|
|
msg = Message('500 Error on registration Website', recipients=["simon.bussmann@tum.de"])
|
|
full_traceback = traceback.format_exc()
|
|
|
|
msg.body = f"An error occurred during registration:\n\n{full_traceback}"
|
|
mail.send(msg)
|
|
|
|
return render_template("error.html", error_message="Internal Server Error. Admin has been notified!"), 500
|