652 lines
28 KiB
Python
652 lines
28 KiB
Python
"""
|
||
Core Routes - Setup Wizard
|
||
GMAO Collège - Assistant de configuration initiale
|
||
"""
|
||
import os
|
||
import json
|
||
import hmac
|
||
from datetime import datetime, timezone
|
||
from flask import Blueprint, render_template, redirect, url_for, flash, request, jsonify, current_app, session, abort
|
||
from flask_login import login_required, current_user
|
||
from werkzeug.security import generate_password_hash
|
||
from ...extensions import db, csrf
|
||
from ..models.user import User
|
||
from ..models.college import College, Building, Zone, Room
|
||
from ..models.equipment import EquipmentCategory
|
||
from ..models.maintenance import Lot
|
||
from ..models.rbac import Role
|
||
from ..services.rbac import replace_user_roles
|
||
from ..authorization import has_permission
|
||
from ..models.planning import WorkSchedule, CollegeClosure, ClosureWorkDay
|
||
from ..setup_catalog import EQUIPMENT_CATEGORIES, LOTS, grouped_catalog
|
||
|
||
setup_wizard_bp = Blueprint('setup_wizard', __name__, url_prefix='/setup-wizard')
|
||
|
||
# Dossier contenant les données
|
||
DATA_DIR = os.path.join(os.path.dirname(__file__), '..', '..', 'instance')
|
||
|
||
|
||
def is_setup_complete():
|
||
"""Vérifie si le setup est déjà terminé."""
|
||
return os.path.exists(os.path.join(DATA_DIR, '.setup_complete'))
|
||
|
||
|
||
@setup_wizard_bp.before_request
|
||
def protect_initial_setup():
|
||
"""Exige un jeton d'environnement tant que l'installation est incomplète."""
|
||
# Le panneau de gestion reste accessible aux administrateurs connectés,
|
||
# même si le marqueur du volume instance a été perdu lors d'un redéploiement.
|
||
if request.endpoint == 'setup_wizard.admin_panel' and current_user.is_authenticated and current_user.is_admin():
|
||
return None
|
||
if is_setup_complete():
|
||
return None
|
||
|
||
expected_token = os.environ.get('SETUP_TOKEN', '')
|
||
if len(expected_token) < 32:
|
||
current_app.logger.error('SETUP_TOKEN is missing or too short')
|
||
return jsonify({'error': 'Installation sécurisée non configurée'}), 503
|
||
|
||
supplied_token = (
|
||
request.headers.get('X-Setup-Token')
|
||
or request.args.get('token', '')
|
||
)
|
||
if supplied_token and hmac.compare_digest(supplied_token, expected_token):
|
||
session['setup_authorized'] = True
|
||
if request.method == 'GET' and request.args.get('token'):
|
||
return redirect(request.path)
|
||
|
||
if not session.get('setup_authorized'):
|
||
return jsonify({'error': 'Jeton d’installation requis'}), 403
|
||
|
||
return None
|
||
|
||
|
||
def load_lots_data():
|
||
"""Retourne le catalogue embarqué issu du dump SQL de référence."""
|
||
return grouped_catalog()
|
||
|
||
|
||
class SetupProgress(db.Model):
|
||
"""Progression du setup wizard."""
|
||
__tablename__ = 'setup_progress'
|
||
|
||
id = db.Column(db.Integer, primary_key=True)
|
||
# Numéro de la dernière étape validée. Zéro signifie « aucune ».
|
||
step = db.Column(db.Integer, default=0)
|
||
admin_username = db.Column(db.String(100), nullable=True)
|
||
college_name = db.Column(db.String(200), nullable=True)
|
||
college_address = db.Column(db.String(255), nullable=True)
|
||
college_zip = db.Column(db.String(10), nullable=True)
|
||
college_city = db.Column(db.String(100), nullable=True)
|
||
buildings_json = db.Column(db.Text, nullable=True)
|
||
lots_json = db.Column(db.Text, nullable=True)
|
||
categories_json = db.Column(db.Text, nullable=True)
|
||
vacations_json = db.Column(db.Text, nullable=True)
|
||
vacances_zone = db.Column(db.String(5), nullable=True)
|
||
vacances_annee = db.Column(db.Integer, nullable=True)
|
||
ent_configured = db.Column(db.Boolean, default=False)
|
||
pronote_qr_code = db.Column(db.Text, nullable=True)
|
||
pronote_qr_code_id = db.Column(db.String(50), nullable=True)
|
||
pronote_pin = db.Column(db.String(100), nullable=True)
|
||
created_at = db.Column(db.DateTime, default=lambda: datetime.now(timezone.utc))
|
||
updated_at = db.Column(db.DateTime, default=lambda: datetime.now(timezone.utc), onupdate=lambda: datetime.now(timezone.utc))
|
||
|
||
def __repr__(self):
|
||
return f"<SetupProgress step={self.step}>"
|
||
|
||
@staticmethod
|
||
def get():
|
||
"""Récupère ou crée la progression."""
|
||
progress = SetupProgress.query.first()
|
||
if not progress:
|
||
progress = SetupProgress()
|
||
db.session.add(progress)
|
||
db.session.commit()
|
||
return progress
|
||
|
||
def get_buildings(self):
|
||
"""Récupère la liste des bâtiments."""
|
||
if not self.buildings_json:
|
||
return []
|
||
try:
|
||
return json.loads(self.buildings_json)
|
||
except:
|
||
return []
|
||
|
||
def set_buildings(self, buildings_list):
|
||
"""Sauvegarde la liste des bâtiments."""
|
||
self.buildings_json = json.dumps(buildings_list)
|
||
|
||
def get_lots(self):
|
||
"""Récupère la liste des lot."""
|
||
if not self.lots_json:
|
||
return []
|
||
try:
|
||
return json.loads(self.lots_json)
|
||
except:
|
||
return []
|
||
|
||
def set_lots(self, lots_list):
|
||
"""Sauvegarde la liste des lots."""
|
||
self.lots_json = json.dumps(lots_list)
|
||
|
||
def to_dict(self):
|
||
"""Convertit en dictionnaire pour le template."""
|
||
buildings = [
|
||
{'id': item.id, 'name': item.name, 'description': item.description or ''}
|
||
for item in Building.query.order_by(Building.name, Building.id).all()
|
||
]
|
||
zones = [
|
||
{'id': item.id, 'name': item.name, 'building_id': item.building_id}
|
||
for item in Zone.query.order_by(Zone.building_id, Zone.name, Zone.id).all()
|
||
]
|
||
rooms = [
|
||
{
|
||
'id': item.id,
|
||
'name': item.name,
|
||
'code': '' if item.code in (None, 'None') else item.code,
|
||
'building_id': item.building_id,
|
||
'zone_id': item.zone_id,
|
||
'floor': item.floor or 0,
|
||
'room_type_id': item.room_type_id,
|
||
}
|
||
for item in Room.query.order_by(Room.building_id, Room.name, Room.id).all()
|
||
]
|
||
vacation_periods = [
|
||
{
|
||
'id': closure.id,
|
||
'name': closure.name,
|
||
'start_date': closure.start_date.isoformat(),
|
||
'end_date': closure.end_date.isoformat(),
|
||
'work_days': [
|
||
{
|
||
'id': work_day.id,
|
||
'work_date': work_day.work_date.isoformat(),
|
||
'start_time': work_day.start_time.strftime('%H:%M'),
|
||
'end_time': work_day.end_time.strftime('%H:%M'),
|
||
'lunch_start': work_day.lunch_start.strftime('%H:%M') if work_day.lunch_start else '',
|
||
'lunch_end': work_day.lunch_end.strftime('%H:%M') if work_day.lunch_end else '',
|
||
'notes': work_day.notes or '',
|
||
}
|
||
for work_day in closure.work_days
|
||
],
|
||
}
|
||
for closure in CollegeClosure.query.filter_by(closure_type='vacances')
|
||
.order_by(CollegeClosure.start_date, CollegeClosure.id).all()
|
||
]
|
||
return {
|
||
'step': self.step,
|
||
'data': {
|
||
'admin_username': self.admin_username or '',
|
||
'college': {
|
||
'name': self.college_name or '',
|
||
'address': self.college_address or '',
|
||
'zip': self.college_zip or '',
|
||
'city': self.college_city or '',
|
||
},
|
||
'buildings': buildings,
|
||
'zones': zones,
|
||
'rooms': rooms,
|
||
'lots': self.get_lots(),
|
||
'categories': json.loads(self.categories_json) if self.categories_json else [],
|
||
'vacances_zone': self.vacances_zone or '',
|
||
'vacances_annee': self.vacances_annee,
|
||
'vacation_periods': vacation_periods,
|
||
'ent_configured': self.ent_configured,
|
||
}
|
||
}
|
||
|
||
|
||
@setup_wizard_bp.route('/')
|
||
def index():
|
||
"""Page principale du wizard - accessible sans auth."""
|
||
if is_setup_complete():
|
||
return render_template('setup_wizard/setup_complete.html')
|
||
|
||
progress = SetupProgress.get()
|
||
lots_data = load_lots_data()
|
||
|
||
return render_template('setup_wizard/index.html',
|
||
progress=progress.to_dict(),
|
||
lots_data=lots_data)
|
||
|
||
|
||
@setup_wizard_bp.route('/api/progress')
|
||
@csrf.exempt
|
||
def api_progress():
|
||
"""API pour récupérer la progression."""
|
||
if is_setup_complete():
|
||
return jsonify({'complete': True})
|
||
|
||
progress = SetupProgress.get()
|
||
return jsonify({
|
||
'complete': False,
|
||
'step': progress.step,
|
||
'data': progress.to_dict()
|
||
})
|
||
|
||
|
||
@setup_wizard_bp.route('/api/step/<int:step>', methods=['POST'])
|
||
@csrf.exempt
|
||
def api_save_step(step):
|
||
"""Sauvegarde une étape du setup."""
|
||
if is_setup_complete():
|
||
return jsonify({'error': 'Setup déjà terminé'}), 403
|
||
|
||
try:
|
||
data = request.get_json(silent=True)
|
||
if not isinstance(data, dict):
|
||
return jsonify({'error': 'Corps JSON invalide'}), 400
|
||
progress = SetupProgress.get()
|
||
|
||
if step == 1:
|
||
# Étape 1 : Utilisateur admin
|
||
username = data.get('username', '').strip()
|
||
password = data.get('password', '').strip()
|
||
|
||
if not username or len(username) < 3:
|
||
return jsonify({'error': 'Le nom d\'utilisateur doit faire au moins 3 caractères'}), 400
|
||
|
||
if not password or len(password) < 12:
|
||
return jsonify({'error': 'Le mot de passe doit faire au moins 12 caractères'}), 400
|
||
|
||
# Supprimer l'utilisateur admin par défaut s'il existe
|
||
default_admin = User.query.filter_by(username='admin').first()
|
||
if default_admin and username != 'admin':
|
||
db.session.delete(default_admin)
|
||
|
||
# Créer ou mettre à jour l'utilisateur
|
||
user = User.query.filter_by(username=username).first()
|
||
if user:
|
||
user.set_password(password)
|
||
user.is_active = True
|
||
else:
|
||
user = User(
|
||
username=username,
|
||
email=f'{username}@gmao.local',
|
||
role='admin',
|
||
is_active=True
|
||
)
|
||
user.set_password(password)
|
||
db.session.add(user)
|
||
db.session.flush()
|
||
|
||
admin_role = Role.query.filter_by(slug='admin', is_active=True).first()
|
||
if admin_role:
|
||
replace_user_roles(user, [admin_role.id])
|
||
|
||
progress.admin_username = username
|
||
progress.step = 2
|
||
db.session.commit()
|
||
|
||
return jsonify({'success': True, 'step': 2})
|
||
|
||
elif step == 2:
|
||
# Étape 2 : Collège
|
||
name = data.get('name', '').strip()
|
||
address = data.get('address', '').strip()
|
||
zip_code = data.get('zip', '').strip()
|
||
city = data.get('city', '').strip()
|
||
|
||
if not all([name, address, zip_code, city]):
|
||
return jsonify({'error': 'Tous les champs sont requis'}), 400
|
||
|
||
college = College.query.first()
|
||
if college:
|
||
college.name = name
|
||
college.address = address
|
||
college.zip_code = zip_code
|
||
college.city = city
|
||
else:
|
||
college = College(
|
||
name=name,
|
||
address=address,
|
||
zip_code=zip_code,
|
||
city=city
|
||
)
|
||
db.session.add(college)
|
||
|
||
progress.college_name = name
|
||
progress.college_address = address
|
||
progress.college_zip = zip_code
|
||
progress.college_city = city
|
||
progress.step = 3
|
||
db.session.commit()
|
||
|
||
return jsonify({'success': True, 'step': 3})
|
||
|
||
elif step == 3:
|
||
# Étape 3 : Bâtiments
|
||
buildings = data.get('buildings', [])
|
||
if not isinstance(buildings, list) or not buildings:
|
||
return jsonify({'error': 'Ajoutez au moins un bâtiment'}), 400
|
||
|
||
saved = []
|
||
for b in buildings:
|
||
if not isinstance(b, dict):
|
||
return jsonify({'error': 'Bâtiment invalide'}), 400
|
||
name = str(b.get('name') or '').strip()
|
||
if not name:
|
||
return jsonify({'error': 'Le nom de chaque bâtiment est requis'}), 400
|
||
building_id = b.get('id')
|
||
building = db.session.get(Building, building_id) if building_id else None
|
||
if building is None:
|
||
building = Building.query.filter(db.func.lower(Building.name) == name.lower()).first()
|
||
if building is None:
|
||
building = Building(name=name)
|
||
db.session.add(building)
|
||
db.session.flush()
|
||
building.name = name
|
||
building.description = str(b.get('description') or '').strip()
|
||
saved.append({'id': building.id, 'name': building.name, 'description': building.description or ''})
|
||
|
||
progress.set_buildings(saved)
|
||
progress.step = max(progress.step or 0, 3)
|
||
db.session.commit()
|
||
|
||
return jsonify({'success': True, 'step': 3, 'buildings': saved})
|
||
|
||
elif step == 4:
|
||
# Étape 4 : Zones. Les absences du formulaire ne suppriment rien.
|
||
zones = data.get('zones', [])
|
||
if not isinstance(zones, list):
|
||
return jsonify({'error': 'Liste de zones invalide'}), 400
|
||
saved = []
|
||
for item in zones:
|
||
if not isinstance(item, dict):
|
||
return jsonify({'error': 'Zone invalide'}), 400
|
||
name = str(item.get('name') or '').strip()
|
||
try:
|
||
building_id = int(item.get('building_id'))
|
||
except (TypeError, ValueError):
|
||
return jsonify({'error': f'Bâtiment invalide pour la zone {name or "sans nom"}'}), 400
|
||
if not name or db.session.get(Building, building_id) is None:
|
||
return jsonify({'error': 'Chaque zone doit avoir un nom et un bâtiment existant'}), 400
|
||
zone_id = item.get('id')
|
||
zone = db.session.get(Zone, zone_id) if zone_id else None
|
||
if zone is None:
|
||
zone = Zone.query.filter(
|
||
Zone.building_id == building_id,
|
||
db.func.lower(Zone.name) == name.lower(),
|
||
).first()
|
||
if zone is None:
|
||
zone = Zone(name=name, building_id=building_id)
|
||
db.session.add(zone)
|
||
db.session.flush()
|
||
zone.name = name
|
||
zone.building_id = building_id
|
||
saved.append({'id': zone.id, 'name': zone.name, 'building_id': zone.building_id})
|
||
|
||
progress.step = max(progress.step or 0, 4)
|
||
db.session.commit()
|
||
|
||
return jsonify({'success': True, 'step': 4, 'zones': saved})
|
||
|
||
elif step == 5:
|
||
# Étape 5 : Salles. Mise à jour/création uniquement.
|
||
rooms = data.get('rooms', [])
|
||
if not isinstance(rooms, list):
|
||
return jsonify({'error': 'Liste de salles invalide'}), 400
|
||
saved = []
|
||
for item in rooms:
|
||
if not isinstance(item, dict):
|
||
return jsonify({'error': 'Salle invalide'}), 400
|
||
name = str(item.get('name') or '').strip()
|
||
try:
|
||
building_id = int(item.get('building_id'))
|
||
floor = int(item.get('floor') or 0)
|
||
except (TypeError, ValueError):
|
||
return jsonify({'error': f'Bâtiment ou étage invalide pour {name or "la salle"}'}), 400
|
||
building = db.session.get(Building, building_id)
|
||
if not name or building is None:
|
||
return jsonify({'error': 'Chaque salle doit avoir un nom et un bâtiment existant'}), 400
|
||
zone_id = item.get('zone_id') or None
|
||
if zone_id is not None:
|
||
try:
|
||
zone_id = int(zone_id)
|
||
except (TypeError, ValueError):
|
||
return jsonify({'error': f'Zone invalide pour {name}'}), 400
|
||
zone = db.session.get(Zone, zone_id)
|
||
if zone is None or zone.building_id != building_id:
|
||
return jsonify({'error': f'La zone de {name} ne correspond pas à son bâtiment'}), 400
|
||
room_id = item.get('id')
|
||
room = db.session.get(Room, room_id) if room_id else None
|
||
if room is None:
|
||
room = Room.query.filter(
|
||
Room.building_id == building_id,
|
||
db.func.lower(Room.name) == name.lower(),
|
||
).first()
|
||
if room is None:
|
||
room = Room(name=name, building_id=building_id)
|
||
db.session.add(room)
|
||
db.session.flush()
|
||
room.name = name
|
||
room.code = str(item.get('code') or '').strip() or None
|
||
room.building_id = building_id
|
||
room.zone_id = zone_id
|
||
room.floor = floor
|
||
saved.append({
|
||
'id': room.id, 'name': room.name, 'code': room.code or '',
|
||
'building_id': room.building_id, 'zone_id': room.zone_id, 'floor': room.floor,
|
||
})
|
||
|
||
progress.step = max(progress.step or 0, 5)
|
||
db.session.commit()
|
||
return jsonify({'success': True, 'step': 5, 'rooms': saved})
|
||
|
||
elif step == 6:
|
||
# Étape 6 : catalogue fixe des catégories et lots du dump SQL.
|
||
categories_by_name = {}
|
||
for name in EQUIPMENT_CATEGORIES:
|
||
category = EquipmentCategory.query.filter(
|
||
db.func.lower(EquipmentCategory.name) == name.lower()
|
||
).first()
|
||
if category is None:
|
||
category = EquipmentCategory(name=name)
|
||
db.session.add(category)
|
||
db.session.flush()
|
||
categories_by_name[name] = category
|
||
|
||
for lot_name, category_name in LOTS:
|
||
lot = Lot.query.filter(db.func.lower(Lot.name) == lot_name.lower()).first()
|
||
if lot is None:
|
||
lot = Lot(name=lot_name)
|
||
db.session.add(lot)
|
||
lot.category_id = categories_by_name[category_name].id
|
||
|
||
progress.categories_json = json.dumps(list(EQUIPMENT_CATEGORIES), ensure_ascii=False)
|
||
progress.set_lots([name for name, _category in LOTS])
|
||
progress.step = max(progress.step or 0, 6)
|
||
db.session.commit()
|
||
return jsonify({
|
||
'success': True, 'step': 6,
|
||
'categories_count': len(EQUIPMENT_CATEGORIES), 'lots_count': len(LOTS),
|
||
})
|
||
|
||
elif step == 7:
|
||
# Étape 7 : Vacances et horaires
|
||
zone = data.get('zone', 'A')
|
||
annee = data.get('annee', datetime.now().year)
|
||
import_vacances = data.get('import_vacances', False)
|
||
import_feries = data.get('import_feries', False)
|
||
vacation_periods = data.get('vacation_periods', [])
|
||
if not isinstance(vacation_periods, list):
|
||
return jsonify({'error': 'Liste de vacances invalide'}), 400
|
||
|
||
saved_periods = []
|
||
for period in vacation_periods:
|
||
if not isinstance(period, dict):
|
||
return jsonify({'error': 'Période de vacances invalide'}), 400
|
||
name = str(period.get('name') or '').strip()
|
||
try:
|
||
start_date = datetime.strptime(period.get('start_date', ''), '%Y-%m-%d').date()
|
||
end_date = datetime.strptime(period.get('end_date', ''), '%Y-%m-%d').date()
|
||
except (TypeError, ValueError):
|
||
return jsonify({'error': f'Dates invalides pour {name or "une période"}'}), 400
|
||
if not name or end_date < start_date:
|
||
return jsonify({'error': 'Chaque période doit avoir un nom et des dates cohérentes'}), 400
|
||
|
||
closure = db.session.get(CollegeClosure, period.get('id')) if period.get('id') else None
|
||
if closure is None:
|
||
closure = CollegeClosure.query.filter_by(
|
||
name=name, start_date=start_date, end_date=end_date
|
||
).first()
|
||
if closure is None:
|
||
closure = CollegeClosure(name=name, start_date=start_date, end_date=end_date)
|
||
db.session.add(closure)
|
||
db.session.flush()
|
||
closure.name = name
|
||
closure.start_date = start_date
|
||
closure.end_date = end_date
|
||
closure.closure_type = 'vacances'
|
||
# Toute la période est fermée, sauf les dates exactes ci-dessous.
|
||
closure.work_hours_type = 'none'
|
||
|
||
work_days = period.get('work_days', [])
|
||
if not isinstance(work_days, list):
|
||
db.session.rollback()
|
||
return jsonify({'error': f'Jours travaillés invalides pour {name}'}), 400
|
||
ClosureWorkDay.query.filter_by(closure_id=closure.id).delete()
|
||
seen_dates = set()
|
||
saved_days = []
|
||
for day in work_days:
|
||
if not isinstance(day, dict):
|
||
db.session.rollback()
|
||
return jsonify({'error': f'Jour travaillé invalide pour {name}'}), 400
|
||
try:
|
||
work_date = datetime.strptime(day.get('work_date', ''), '%Y-%m-%d').date()
|
||
start_time = datetime.strptime(day.get('start_time', ''), '%H:%M').time()
|
||
end_time = datetime.strptime(day.get('end_time', ''), '%H:%M').time()
|
||
lunch_start = datetime.strptime(day['lunch_start'], '%H:%M').time() if day.get('lunch_start') else None
|
||
lunch_end = datetime.strptime(day['lunch_end'], '%H:%M').time() if day.get('lunch_end') else None
|
||
except (TypeError, ValueError):
|
||
db.session.rollback()
|
||
return jsonify({'error': f'Date ou horaires invalides pour un jour travaillé de {name}'}), 400
|
||
if not start_date <= work_date <= end_date:
|
||
db.session.rollback()
|
||
return jsonify({'error': f'Le {work_date:%d/%m/%Y} est hors de la période {name}'}), 400
|
||
if work_date in seen_dates or end_time <= start_time:
|
||
db.session.rollback()
|
||
return jsonify({'error': f'Jour dupliqué ou horaires incohérents dans {name}'}), 400
|
||
if (lunch_start is None) != (lunch_end is None) or (
|
||
lunch_start and not (start_time <= lunch_start < lunch_end <= end_time)
|
||
):
|
||
db.session.rollback()
|
||
return jsonify({'error': f'Pause déjeuner incohérente le {work_date:%d/%m/%Y}'}), 400
|
||
seen_dates.add(work_date)
|
||
work_day = ClosureWorkDay(
|
||
closure_id=closure.id,
|
||
work_date=work_date,
|
||
start_time=start_time,
|
||
end_time=end_time,
|
||
lunch_start=lunch_start,
|
||
lunch_end=lunch_end,
|
||
notes=str(day.get('notes') or '').strip() or None,
|
||
)
|
||
db.session.add(work_day)
|
||
saved_days.append({'work_date': work_date.isoformat()})
|
||
saved_periods.append({'id': closure.id, 'name': name, 'work_days': saved_days})
|
||
|
||
progress.vacances_zone = zone
|
||
progress.vacances_annee = annee
|
||
progress.vacations_json = json.dumps({
|
||
'import_vacances': bool(import_vacances),
|
||
'import_feries': bool(import_feries),
|
||
'vacation_periods': saved_periods,
|
||
}, ensure_ascii=False)
|
||
progress.step = max(progress.step or 0, 7)
|
||
db.session.commit()
|
||
|
||
return jsonify({'success': True, 'step': 7, 'vacation_periods': saved_periods})
|
||
|
||
elif step in (8, 9):
|
||
# Intégrations facultatives : le paramétrage complet reste dans leurs pages dédiées.
|
||
progress.step = max(progress.step or 0, step)
|
||
db.session.commit()
|
||
return jsonify({'success': True, 'step': step, 'skipped': True})
|
||
|
||
elif step == 10:
|
||
progress.step = max(progress.step or 0, 10)
|
||
db.session.commit()
|
||
return jsonify({'success': True, 'step': 10})
|
||
|
||
else:
|
||
return jsonify({'error': 'Étape invalide'}), 400
|
||
|
||
except Exception:
|
||
db.session.rollback()
|
||
current_app.logger.exception('Échec lors de la sauvegarde du wizard')
|
||
return jsonify({'error': 'Erreur interne lors de la sauvegarde'}), 500
|
||
|
||
|
||
@setup_wizard_bp.route('/api/complete', methods=['POST'])
|
||
@csrf.exempt
|
||
def api_complete():
|
||
"""Marquer le setup comme terminé."""
|
||
if is_setup_complete():
|
||
return jsonify({'error': 'Setup déjà terminé'}), 403
|
||
|
||
try:
|
||
progress = SetupProgress.get()
|
||
admin = User.query.filter_by(role='admin', is_active=True).first()
|
||
if not admin:
|
||
return jsonify({'error': 'Un administrateur actif est requis'}), 400
|
||
if progress.step < 10:
|
||
return jsonify({'error': 'Toutes les étapes doivent être terminées'}), 400
|
||
|
||
# Créer le fichier .setup_complete
|
||
with open(os.path.join(DATA_DIR, '.setup_complete'), 'w') as f:
|
||
f.write(datetime.now(timezone.utc).isoformat())
|
||
|
||
return jsonify({'success': True})
|
||
except Exception:
|
||
current_app.logger.exception('Échec lors de la finalisation du wizard')
|
||
return jsonify({'error': 'Erreur interne lors de la finalisation'}), 500
|
||
|
||
|
||
@setup_wizard_bp.route('/api/test-ent', methods=['POST'])
|
||
@csrf.exempt
|
||
def api_test_ent():
|
||
"""Tester la connexion ENT."""
|
||
if is_setup_complete():
|
||
return jsonify({'error': 'Setup déjà terminé'}), 403
|
||
|
||
data = request.get_json(silent=True) or {}
|
||
username = data.get('username', '')
|
||
password = data.get('password', '')
|
||
|
||
return jsonify({'success': False, 'error': 'Test ENT non implémenté'}), 501
|
||
|
||
|
||
@setup_wizard_bp.route('/api/test-pronote', methods=['POST'])
|
||
@csrf.exempt
|
||
def api_test_pronote():
|
||
"""Tester la connexion Pronote."""
|
||
if is_setup_complete():
|
||
return jsonify({'error': 'Setup déjà terminé'}), 403
|
||
|
||
data = request.get_json(silent=True) or {}
|
||
qr_code_data = data.get('qr_code', '')
|
||
pin = data.get('pin', '')
|
||
|
||
return jsonify({'success': False, 'error': 'Test Pronote non implémenté'}), 501
|
||
|
||
|
||
@setup_wizard_bp.route('/admin')
|
||
@login_required
|
||
def admin_panel():
|
||
"""Panneau d'administration."""
|
||
if not has_permission('system.configure', current_user):
|
||
abort(403)
|
||
from ..models.user import User
|
||
from ..models.college import Building, Room
|
||
from ..models.equipment import Equipment
|
||
|
||
stats = {
|
||
'users': User.query.count(),
|
||
'buildings': Building.query.count(),
|
||
'rooms': Room.query.count(),
|
||
'equipments': Equipment.query.count()
|
||
}
|
||
|
||
return render_template('setup_wizard/admin_panel.html', stats=stats)
|