-
Notifications
You must be signed in to change notification settings - Fork 0
/
application.py
249 lines (172 loc) · 8.3 KB
/
application.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
import os
import requests
from flask import Flask, session, render_template, request, redirect, url_for, jsonify
from flask_session import Session
from sqlalchemy import create_engine
from sqlalchemy.orm import scoped_session, sessionmaker
from werkzeug.security import check_password_hash, generate_password_hash
from xml.etree import ElementTree
app = Flask(__name__)
# Check for environment variable
if not os.getenv("DATABASE_URL"):
raise RuntimeError("DATABASE_URL is not set")
# Configure session to use filesystem
app.config["SESSION_PERMANENT"] = False
app.config["SESSION_TYPE"] = "filesystem"
Session(app)
# Set up database
engine = create_engine(os.getenv("DATABASE_URL"))
db = scoped_session(sessionmaker(bind=engine))
def goodreads(books):
d = dict()
error=[]
for book in books:
res = requests.get("https://www.goodreads.com/book/isbn/", params={"isbn": book.isbn, "key":os.getenv("SECRET_KEY")})
tree = ElementTree.fromstring(res.content)
query = requests.get("https://www.goodreads.com/book/review_counts.json", params={"isbns": book.isbn, "key":os.getenv("SECRET_KEY")})
try:
response = query.json()
except ValueError:
error.append(tuple(book))
continue
response = response['books'][0]
d[book.isbn]= {'image_url': tree[1][8].text, 'small_image_url': tree[1][9].text,'description': tree[1][16].text, 'review':response }
books = list(books)
if len(error) != 0:
for e in error:
books.remove(e)
return d, books
@app.route("/")
def index():
books = db.execute("SELECT * FROM books ORDER BY random() LIMIT 6").fetchall()
d, books = goodreads(books)
return render_template("index.html", d=d, books=books,)
@app.route('/register', methods=["GET", "POST"])
def register():
""" Register user """
if request.method == "POST":
# Ensure username was submitted
if not request.form.get("username"):
return "Must submit username"
# Ensure password was submitted
elif not request.form.get("password"):
return "Must submit password"
# Ensure password was confirmed
elif not request.form.get("confirmation"):
return "Must confirm password"
# Ensure passwords coincide
elif request.form.get("password") != request.form.get("confirmation"):
return "Passwords don't coincide"
# Ensure username is unique in the database
if db.execute("SELECT * FROM users WHERE id = :username", {"username": request.form.get("username")}).rowcount == 1:
return "username is taken"
# Hash password
hash = generate_password_hash(request.form.get("password"))
# Insert username into database
db.execute("INSERT INTO users (id, hash) VALUES (:username, :hash)", {"username":request.form.get("username"), "hash":hash})
db.commit()
# Remember which user has registered
session["user_id"]=request.form.get("username")
# Redirect user to home page
return redirect('/')
# User reached route via GET (as by clicking a link or via redirect)
else:
return render_template("register.html")
@app.route('/login', methods=["GET", "POST"])
def login():
""" Log user in. """
# Forget any user id
session.clear()
# User reached route via POST (as by submitting a form via POST)
if request.method == "POST":
# Ensure username was submitted
if not request.form.get("username"):
return "Must submit a username"
# Ensure password was submitted
elif not request.form.get("password"):
return "Must submit a password"
# Query database for username
users = db.execute("SELECT id, hash FROM users WHERE id= :username", {"username":request.form.get("username")}).fetchall()
# Ensure username exists and password is correct
if len(users) != 1 or not check_password_hash(users[0]['hash'], request.form.get("password")):
return "Invalid Username or password"
# Remember which user has logged in
session['user_id'] = users[0]['id']
# Return user to home page
return redirect('/')
else:
return render_template("login.html")
@app.route("/logout")
def logout():
""" Log user out """
# Forget any user id
session.clear()
# Redirect user to login form
return redirect('/')
@app.route("/book/<isbn>", methods=['GET', 'POST'])
def book(isbn):
if request.method == "POST":
# Ensure a review was written
if not request.form.get('userreview'):
return 'Must submit a review'
user = session['user_id']
rating = request.form.get('rating')
review = request.form.get('userreview')
# Ensure user has not already written a review for this book
if db.execute("SELECT * FROM reviews WHERE user_id = :user_id AND isbn=:isbn", {"user_id":user, "isbn":isbn}).rowcount >= 1:
return "You have already submitted a review for this book."
# Query database to insert book review
db.execute("INSERT INTO reviews (isbn, user_id, review, rating) VALUES (:isbn, :user_id, :review, :rating)", {"isbn":isbn,"user_id":user, "review":review, "rating":rating})
db.commit()
return redirect("/book/" + isbn)
else:
# Make sure book exists.
book = db.execute("SELECT * FROM books WHERE isbn = :isbn", {"isbn": isbn}).fetchone()
if book is None:
return "No such book."
res = requests.get("https://www.goodreads.com/book/isbn/", params={"isbn": book.isbn, "key":os.getenv("SECRET_KEY")})
tree = ElementTree.fromstring(res.content)
query = requests.get("https://www.goodreads.com/book/review_counts.json", params={"isbns": book.isbn, "key":os.getenv("SECRET_KEY")})
try:
response = query.json()
except ValueError:
print("Error in response from GoodReads API")
response = response['books'][0]
d = dict()
d[book.isbn]= {'image_url': tree[1][8].text, 'small_image_url': tree[1][9].text,'description': tree[1][16].text, 'review':response }
# Get all reviews.
reviews = db.execute("SELECT user_id, review, rating FROM reviews WHERE isbn = :isbn", {"isbn": isbn}).fetchall()
return render_template("book.html", book=book, d=d, reviews=reviews)
@app.route("/search", methods=['GET'])
def search():
""" Get book results """
if not request.args.get("search"):
return "Must search a Book or an Author or an Isbn"
books = db.execute("SELECT * FROM books WHERE \
lower(author) LIKE lower(:search) OR \
lower(title) LIKE lower(:search) OR \
lower(isbn) LIKE lower(:search) LIMIT 9",
{"search":"%" + request.args.get("search") + "%"})
if books.rowcount == 0:
return "Book or Author or ISBN not found."
books = books.fetchall()
d, books = goodreads(books)
return render_template("index.html", books=books, d=d)
@app.route("/api/<isbn>", methods=['GET'])
def api(isbn):
""" Returns book details """
book = db.execute("SELECT books.title, books.author, books.year, books.isbn, \
COUNT(reviews.id) as count, \
AVG(reviews.rating) as average_score \
FROM books \
INNER JOIN reviews \
ON books.isbn = reviews.isbn \
WHERE books.isbn = :isbn \
GROUP BY books.title, books.author, books.year, books.isbn",
{"isbn": isbn})
if not book.rowcount == 1:
return jsonify({"Error": "Book not found"}), 404
book = book.fetchone()
book = dict(book.items())
book['average_score'] = float('%.2f'%(book['average_score']))
return jsonify(book)