From 882d086a839a4b18e99937e59d26a9bcff7fa9fd Mon Sep 17 00:00:00 2001
From: b3yond <b3yond@riseup.net>
Date: Thu, 9 Aug 2018 15:01:51 +0200
Subject: [PATCH] wrote unsubscribe function, but BE & FE have different
 secrets

---
 active_bots/mailbot.py |  8 +++++---
 db.py                  |  9 ++++++++-
 frontend.py            | 11 +++++++++--
 user.py                |  4 ++++
 4 files changed, 26 insertions(+), 6 deletions(-)

diff --git a/active_bots/mailbot.py b/active_bots/mailbot.py
index 6efe9f4..dc03bb3 100644
--- a/active_bots/mailbot.py
+++ b/active_bots/mailbot.py
@@ -7,7 +7,8 @@ import mailbox
 import email
 import report
 from bot import Bot
-
+from config import config
+from db import db
 
 logger = logging.getLogger(__name__)
 
@@ -28,8 +29,9 @@ class Mailbot(Bot):
         recipients = user.get_mailinglist()
         for rec in recipients:
             rec = rec[0]
-            unsubscribe_link = ""  # todo: generate unsubscribe link
-            body = report.text + unsubscribe_link
+            unsubscribe_text = "\n_______\nYou don't want to receive those messages? Unsubscribe with this link: "
+            body = report.text + unsubscribe_text + config['web']['host'] + "/city/mail/unsubscribe/" \
+                   + db.mail_subscription_token(rec, user.get_city())
             print(body)
             if report.author != rec:
                 try:
diff --git a/db.py b/db.py
index 6e545fc..17ade92 100644
--- a/db.py
+++ b/db.py
@@ -165,12 +165,19 @@ class DB(object):
         :param city: string
         :return: a token with an encoded json dict { email: x, city: y }
         """
-        return jwt.encode({
+        token = jwt.encode({
             'email': email,
             'city': city
         }, self.secret).decode('ascii')
+        print("mail_subscription_token")
+        print(token)
+        print(self.secret)
+        return token
 
     def confirm_subscription(self, token):
+        print("confirm_subscription")
+        print(token)
+        print(self.secret)
         json = jwt.decode(token, self.secret)
         return json['email'], json['city']
 
diff --git a/frontend.py b/frontend.py
index 980fae1..79a0a4b 100755
--- a/frontend.py
+++ b/frontend.py
@@ -109,13 +109,20 @@ def subscribe_mail(city):
 @view('template/city.tpl')
 def confirm_subscribe(token):
     email, city = db.confirm_subscription(token)
-    print(email)  # debug
-    print(city)  # debug
     user = db.by_city(city)
     user.add_subscriber(email)
     redirect('/city/' + city)
 
 
+@get('/city/mail/unsubscribe/<token>')
+@view('template/mail.tpl')
+def unsubscribe(token):
+    email, city = db.confirm_subscription(token)
+    user = db.by_city(city)
+    user.remove_subscriber(email)
+    redirect('/city/' + city)
+
+
 @get('/settings')
 @view('template/settings.tpl')
 def settings(user):
diff --git a/user.py b/user.py
index d061799..0d6ab0b 100644
--- a/user.py
+++ b/user.py
@@ -166,6 +166,10 @@ schlitz
         db.execute("INSERT INTO mailinglist(user_id, email, active) VALUES(?, ?, ?);", (self.uid, email, 1))
         db.commit()
 
+    def remove_subscriber(self, email):
+        db.execute("UPDATE mailinglist SET active = 0 WHERE email = ? AND user_id = ?;", (email, self.uid))
+        db.commit()
+
     def set_badwords(self, words):
         db.execute("UPDATE badwords SET words = ? WHERE user_id = ?;",
                    (words, self.uid))