home.py

from flask import (
    Blueprint, render_template, request, redirect, url_for, flash, g
)

from CSTG2026.db import get_db
from CSTG2026.auth import signin_required
from random import randint

bp = Blueprint('home', __name__, url_prefix='/home')

@bp.route('/')
@bp.route('/index')
def index():
    return render_template('home/index.html')

@bp.route('/call_for_papers')
def call_for_papers():
    return render_template('home/call_for_papers.html')

@bp.route('/conference_policies')
def conference_policies():
    return render_template('home/conference_policies.html')

@bp.route('/cstg_conferences')
def cstg_conferences():
    return render_template('home/cstg_conferences.html')

@bp.route('/submit', methods=('GET', 'POST'))
@signin_required
def submit():
    from . import store_file
    if request.method == 'GET':
        return render_template('home/submit.html')
    
    title = request.form['title']
    abstract = request.form['abstract']
    file = request.files['file']
    error = None
    db = get_db()

    authors = []
    for key in request.form:
        if key.startswith('author'):
            authors.append(request.form[key])

    with db.cursor() as cursor:
        if not title:
            error = 'Title is required.'
        elif not abstract:
            error = 'Abstract is required.'
        elif not file:
            error = 'File is required.'
        elif authors == []:
            error = 'Authors are required.'

        if error is not None:
            flash(error, 'error')
            return render_template('home/submit.html')
        
        ids = []
        for author in authors:
            cursor.execute(
                'SELECT usr_id FROM usr WHERE email = %s',
                (author,)
            )
            item = cursor.fetchone()
            if item is None:
                error = 'Author not found: ' + author
                flash(error, 'error')
                return render_template('home/submit.html')
            ids.append(item[0])

        filename = store_file(file)

        placeholder = ', '.join(['%s'] * len(ids))
        cursor.execute(
            f"SELECT usr_id FROM usr WHERE type = 'R' and email NOT IN ({placeholder})",
            ids
        )
        reviewers = cursor.fetchall()
        
        if len(reviewers) == 0:
            flash('No reviewer available.', 'error')
            return redirect(url_for('home.index'))

        try:
            idx = randint(0, len(reviewers) - 1)
            cursor.execute(
                "INSERT INTO paper (title, abstract, filename, reviewer_id, comment) VALUES (%s, %s, %s, %s, 'NULL')",
                (title, abstract, filename, reviewers[idx][0])
            )
            paper_id = cursor.lastrowid
            for id in ids:
                cursor.execute(
                    'INSERT INTO publishes (usr_id, paper_id) VALUES (%s, %s)',
                    (id, paper_id)
                )
            db.commit()
            flash('You have successfully submitted the paper.', 'info')
            return redirect(url_for('home.index'))
        except Exception as e:
            print(e)
            flash('Unknown error.', 'error')
            return render_template('home/submit.html')
        
@bp.route('/personal_homepage')
@signin_required
def personal_homepage():
    usr_id = g.usr[0]
    db = get_db()
    submissions = []
    reviews = []

    with db.cursor() as cursor:
        cursor.execute(
            'SELECT paper_id FROM publishes WHERE usr_id = %s',
            (usr_id,)
        )
        paper_ids = cursor.fetchall()
        for paper_id in paper_ids:
            cursor.execute(
                'SELECT * FROM paper WHERE paper_id = %s',
                (paper_id[0],)
            )
            submissions.append(cursor.fetchone())

        cursor.execute(
            'SELECT * FROM paper WHERE reviewer_id = %s',
            (usr_id,)
        )
        reviews = cursor.fetchall()

    return render_template('home/personal_homepage.html',
        submissions=submissions, reviews=reviews)

@bp.route('/review/<paper_id>', methods=('POST',))
@signin_required
def review(paper_id):
    result = request.form['result']
    comment = request.form['comment']
    db = get_db()
    error = None

    if not result:
        error = 'Result is required.'
    elif not comment:
        error = 'Comment is required.'

    if error is not None:
        flash(error, 'error')
        return redirect(url_for('home.personal_homepage'))

    try:
        with db.cursor() as cursor:
            cursor.execute(
                'UPDATE paper SET status = %s, comment = %s WHERE paper_id = %s',
                (result, comment, paper_id)
            )
        db.commit()
        flash('You have successfully reviewed the paper.', 'info')
        return redirect(url_for('home.personal_homepage'))
    except Exception as e:
        print(e)
        flash('Unknown error.', 'error')
        return redirect(url_for('home.personal_homepage'))