Updates for the event images

mobile_web_api/views/user.py

@@ -0,0 +1,124 @@
+# accounts/views.py
+import json
+from django.views.decorators.csrf import csrf_exempt
+from django.http import JsonResponse
+from django.utils.decorators import method_decorator
+from django.views import View
+from rest_framework.authtoken.models import Token
+from mobile_web_api.forms import RegisterForm, LoginForm
+from rest_framework.authentication import TokenAuthentication
+from django.contrib.auth import logout
+
+
+@method_decorator(csrf_exempt, name='dispatch')
+class RegisterView(View):
+    def post(self, request):
+        try:
+            data = json.loads(request.body)
+            form = RegisterForm(data)
+            if form.is_valid():
+                user = form.save()
+                token, _ = Token.objects.get_or_create(user=user)
+                return JsonResponse({'message': 'User registered successfully', 'token': token.key}, status=201)
+            return JsonResponse({'errors': form.errors}, status=400)
+        except Exception as e:
+            return JsonResponse({'error': str(e)}, status=500)
+
+
+@method_decorator(csrf_exempt, name='dispatch')
+class LoginView(View):
+    def post(self, request):
+        try:
+            data = json.loads(request.body)
+            form = LoginForm(data)
+            if form.is_valid():
+                user = form.cleaned_data['user']
+                token, _ = Token.objects.get_or_create(user=user)
+                return JsonResponse({'message': 'Login successful', 'token': token.key})
+            return JsonResponse({'errors': form.errors}, status=401)
+        except Exception as e:
+            return JsonResponse({'error': str(e)}, status=500)
+
+
+@method_decorator(csrf_exempt, name='dispatch')
+class StatusView(View):
+    def post(self, request):
+        try:
+            data = json.loads(request.body)
+
+            token_key = data.get("token")
+            username = data.get("username")
+
+            if not token_key or not username:
+                return JsonResponse(
+                    {"status": "error", "message": "token and username required"},
+                    status=400
+                )
+
+            try:
+                token = Token.objects.get(key=token_key)
+
+                if token.user.username != username:
+                    return JsonResponse(
+                        {"status": "error", "message": "token does not match user"},
+                        status=401
+                    )
+
+                return JsonResponse({
+                    "status": "logged_in",
+                    "username": token.user.username,
+                    "email": token.user.email
+                })
+
+            except Token.DoesNotExist:
+                return JsonResponse({"status": "invalid_token"}, status=401)
+
+        except json.JSONDecodeError:
+            return JsonResponse({"status": "error", "message": "Invalid JSON"}, status=400)
+        except Exception as e:
+            return JsonResponse({"status": "error", "message": str(e)}, status=500)
+
+
+@method_decorator(csrf_exempt, name='dispatch')
+class LogoutView(View):
+    def post(self, request):
+        try:
+            data = json.loads(request.body)
+
+            token_key = data.get("token")
+            username = data.get("username")
+
+            if not token_key or not username:
+                return JsonResponse(
+                    {"status": "error", "message": "token and username required"},
+                    status=400
+                )
+
+            try:
+                token = Token.objects.get(key=token_key)
+                user = token.user
+
+                if user.username != username:
+                    return JsonResponse(
+                        {"status": "error", "message": "token does not match user"},
+                        status=401
+                    )
+
+                # 🔍 Call Django's built-in logout
+                logout(request)
+
+                # 🗑 Delete the token to invalidate future access
+                token.delete()
+
+                return JsonResponse({
+                    "status": "logged_out",
+                    "message": "Logout successful"
+                })
+
+            except Token.DoesNotExist:
+                return JsonResponse({"status": "invalid_token"}, status=401)
+
+        except json.JSONDecodeError:
+            return JsonResponse({"status": "error", "message": "Invalid JSON"}, status=400)
+        except Exception as e:
+            return JsonResponse({"status": "error", "message": str(e)}, status=500)