sorry for delay, user post added, post edit added

app/__init__.py

@@ -5,12 +5,14 @@
 from flask_sqlalchemy import SQLAlchemy
 from config import config
 from flask_login import LoginManager
+from flask_pagedown import PageDown
 
 bootstrap = Bootstrap()
 mail = Mail()
 moment = Moment()
 db = SQLAlchemy()
 login_manager = LoginManager()
+pagedown = PageDown()
 login_manager.login_view = "auth.login"
 
 
@@ -23,6 +25,7 @@ def create_app(config_name):
     moment.init_app(app)
     db.init_app(app)
     login_manager.init_app(app)
+    pagedown.init_app(app)
     from .main import main as main_blueprint
     app.register_blueprint(main_blueprint)
     from .auth import auth as auth_blueprint

app/main/forms.py

@@ -2,6 +2,7 @@
 from wtforms import StringField, SubmitField, TextAreaField, SelectField, BooleanField
 from wtforms.validators import DataRequired, Length, Email, Regexp, ValidationError
 from ..models import Role, User
+from flask_pagedown.fields import PageDownField
 
 
 class NameForm(FlaskForm):
@@ -58,5 +59,5 @@ def validate_username(self, field):
 
 
 class PostForm(FlaskForm):
-    body = TextAreaField("What's on your mind?", validators=[DataRequired()])
+    body = PageDownField("What's on your mind?", validators=[DataRequired()])
     submit = SubmitField("Submit")

app/main/views.py

@@ -82,3 +82,26 @@ def edit_profile_admin(id):
     form.location.data = user.location
     form.about_me.data = user.about_me
     return render_template('edit_profile.html', form=form, user=user)
+
+
+@main.route('/post/<int:id>')
+def post(id):
+    post = Post.query.get_or_404(id)
+    return render_template('post.html', posts=[post])
+
+
+@main.route('/edit/<int:id>', methods=['GET', 'POST'])
+@login_required
+def edit(id):
+    post = Post.query.get_or_404(id)
+    if current_user != post.author and not current_user.can(Permission.ADMIN):
+        abort(403)
+    form = PostForm()
+    if form.validate_on_submit():
+        post.body = form.body.data
+        db.session.add(post)
+        db.session.commit()
+        flash('The post has been updated.')
+        return redirect(url_for('.post', id=post.id))
+    form.body.data = post.body
+    return render_template('edit_post.html', form=form)

app/models.py

@@ -6,6 +6,8 @@
 from itsdangerous import TimedJSONWebSignatureSerializer as Serializer
 from datetime import datetime
 import hashlib
+from markdown import markdown
+import bleach
 
 
 class Permission:
@@ -204,7 +206,22 @@ class Post(db.Model):
     body = db.Column(db.Text)
     timestamp = db.Column(db.DateTime, index=True, default=datetime.utcnow)
     author_id = db.Column(db.Integer, db.ForeignKey('users.id'))
+    body_html = db.Column(db.Text)
 
+    @staticmethod
+    def on_changed_body(target, value, oldvalue, initiator):
+        allowed_tags = [
+            'a', 'abbr', 'acronym', 'b', 'blockquote', 'code', 'em', 'i', 'li',
+            'ol', 'pre', 'strong', 'ul', 'h1', 'h2', 'h3', 'p'
+        ]
+        target.body_html = bleach.linkify(
+            bleach.clean(
+                markdown(value, output_format='html'),
+                tags=allowed_tags,
+                strip=True))
+
+
+db.event.listen(Post.body, 'set', Post.on_changed_body)
 
 login_manager.anonymous_user = AnonymousUser
 

app/templates/_posts.html

@@ -16,7 +16,25 @@
         </a>
       </div>
       <div class="post-body">
-          {{post.body}}
+          {% if post.body_html %}
+            {{post.body_html | safe}} 
+          {% else %}
+            {{post.body}}
+          {% endif %}
+      </div>
+      <div class="post-footer">
+        <a href="{{url_for('.post', id=post.id)}}">
+          <span class="label label-default">Permalink</span>
+        </a>
+        {% if current_user == post.author %}
+          <a href="{{url_for('.edit', id=post.id)}}">
+            <span class="label label-primary">Edit</span>
+          </a> 
+        {% elif current_user.is_administrator()%}
+          <a href="{{url_for('.edit', id=post.id)}}">
+            <span class="label label-danger">Edit [Admin]</span>
+          </a>
+        {% endif %}
       </div>
     </div>
   </li>

app/templates/edit_post.html

@@ -0,0 +1,17 @@
+{% extends "base.html" %}
+{% import "bootstrap/wtf.html" as wtf%}
+{% block title %}
+    Flasky - Edit Post
+{% endblock title %}
+{% block page_content %}
+    <div class="page-header">
+        <h1>Edit Post</h1>
+    </div>
+    <div>
+        {{wtf.quick_form(form)}}
+    </div>
+{% endblock page_content %}
+{% block scripts %}
+    {{super()}}
+    {{pagedown.include_pagedown()}}
+{% endblock scripts %}

app/templates/index.html

@@ -19,4 +19,8 @@ <h1>Hello, {% if current_user.is_authenticated %}{{ current_user.username }}{% e
     {{ macros.pagination_widget(pagination, '.index') }}
 </div>
 {% endif %}
-{% endblock %}
+{% endblock %}
+{% block scripts %}
+{{super()}}
+{{pagedown.include_pagedown()}}
+{% endblock scripts %}

app/templates/post.html

@@ -0,0 +1,7 @@
+{% extends "base.html" %}
+{% block title %}
+    Flasky - Post
+{% endblock title %}
+{% block page_content %}
+{% include "_posts.html" %}
+{% endblock page_content %}

migrations/versions/6f248965421e_.py

@@ -0,0 +1,28 @@
+"""empty message
+
+Revision ID: 6f248965421e
+Revises: 3b2834457dae
+Create Date: 2018-08-27 22:33:47.612213
+
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision = '6f248965421e'
+down_revision = '3b2834457dae'
+branch_labels = None
+depends_on = None
+
+
+def upgrade():
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.add_column('posts', sa.Column('body_html', sa.Text(), nullable=True))
+    # ### end Alembic commands ###
+
+
+def downgrade():
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.drop_column('posts', 'body_html')
+    # ### end Alembic commands ###