Update app.py

app.py

@@ -18,12 +18,9 @@ app = Flask(__name__)
 app.config['SECRET_KEY'] = os.environ.get('SECRET_KEY', 'default-super-secret-key-for-local-dev')
 
 # --- KONFIGURASI PATH PENYIMPANAN SEMENTARA ---
-# Database dan Upload akan disimpan di /tmp yang dijamin bisa ditulisi
 DATA_DIR = '/tmp'
 UPLOAD_DIR = os.path.join(DATA_DIR, 'uploads')
 DB_PATH = os.path.join(DATA_DIR, 'database.db')
-
-# Pastikan direktori-direktori ini ada saat aplikasi dimulai
 os.makedirs(UPLOAD_DIR, exist_ok=True)
 
 # --- KONFIGURASI DATABASE ---
@@ -32,7 +29,7 @@ app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False
 db = SQLAlchemy(app)
 
 
-# --- MODEL DATABASE (STRUKTUR TABEL) ---
+# --- MODEL DATABASE ---
 class Category(db.Model):
     id = db.Column(db.Integer, primary_key=True)
     name = db.Column(db.String(100), unique=True, nullable=False)
@@ -67,13 +64,11 @@ class Sale(db.Model):
     def __repr__(self):
         return f'<Sale of {self.product_name}>'
 
-
-# --- INISIALISASI DATABASE OTOMATIS ---
 with app.app_context():
     db.create_all()
 
 
-# --- FUNGSI QR CODE ---
+# --- FUNGSI & CONTEXT PROCESSOR ---
 def generate_qr_code(data):
     qr = qrcode.QRCode(version=1, box_size=10, border=4)
     qr.add_data(data)
@@ -81,17 +76,13 @@ def generate_qr_code(data):
     img = qr.make_image(fill_color="black", back_color="white")
     buffered = io.BytesIO()
     img.save(buffered, format="PNG")
-    img_str = base64.b64encode(buffered.getvalue()).decode("utf-8")
-    return img_str
+    return base64.b64encode(buffered.getvalue()).decode("utf-8")
 
-# --- CONTEXT PROCESSOR UNTUK TEMPLATE ---
 @app.context_processor
 def inject_global_data():
     menu_icons = {
-        'Dashboard': 'fa-solid fa-chart-pie',
-        'Product': 'fa-solid fa-mug-hot',
-        'Category': 'fa-solid fa-tags',
-        'Sale': 'fa-solid fa-cash-register',
+        'Dashboard': 'fa-solid fa-chart-pie', 'Product': 'fa-solid fa-mug-hot',
+        'Category': 'fa-solid fa-tags', 'Sale': 'fa-solid fa-cash-register',
         'Setting': 'fa-solid fa-sliders'
     }
     def get_setting_from_db(key, default=''):
@@ -109,58 +100,57 @@ def check_auth(username, password):
 def authenticate():
     return Response('Login Required', 401, {'WWW-Authenticate': 'Basic realm="Login Required"'})
 
-
-# --- PENGATURAN ADMIN PANEL ---
-class AuthMixin:
-    def is_accessible(self):
+def protected(f):
+    @wraps(f)
+    def decorated(*args, **kwargs):
         auth = request.authorization
-        return auth and check_auth(auth.username, auth.password)
-    def inaccessible_callback(self, name, **kwargs):
-        return authenticate()
+        if not auth or not check_auth(auth.username, auth.password):
+            return authenticate()
+        return f(*args, **kwargs)
+    return decorated
 
-class ProductAdminView(AuthMixin, ModelView):
+
+# --- PENGATURAN ADMIN PANEL ---
+class ProductAdminView(ModelView):
+    @protected
+    def dispatch_request(self, *args, **kwargs):
+        return super().dispatch_request(*args, **kwargs)
+        
     create_template = 'admin/custom_create.html'
     edit_template = 'admin/custom_edit.html'
     column_list = ('name', 'category', 'price')
     column_filters = ('category',)
     form_extra_fields = {
         'image': ImageUploadField(
-            'Gambar Produk',
-            base_path=UPLOAD_DIR,
-            endpoint='get_upload',
-            namegen=lambda obj, file_data: f"{datetime.now().strftime('%Y%m%d%H%M%S')}_{file_data.filename}",
-            allowed_extensions=['jpg', 'jpeg', 'png', 'gif'],
-            max_size=(3 * 1024 * 1024, 'Ukuran file maksimal 3MB')
+            'Gambar Produk', base_path=UPLOAD_DIR, endpoint='get_upload',
+            namegen=lambda o, f: f"{datetime.now().strftime('%Y%m%d%H%M%S')}_{f.filename}",
+            allowed_extensions=['jpg', 'jpeg', 'png', 'gif'], max_size=(3*1024*1024, 'Maksimal 3MB')
         )
     }
     form_columns = ('category', 'name', 'description', 'price', 'image')
-    form_args = {
-        'category': {
-            'label': 'Kategori Produk',
-            'query_factory': lambda: Category.query.order_by(Category.name).all()
-        },
-        'description': {'rows': 5}
-    }
+    form_widget_args = {'description': {'rows': 5}}
+    form_args = {'category': {'label': 'Kategori Produk', 'query_factory': lambda: Category.query.order_by(Category.name).all()}}
+
+class SecureModelView(ModelView):
+    @protected
+    def dispatch_request(self, *args, **kwargs):
+        return super().dispatch_request(*args, **kwargs)
 
-class SecureModelView(AuthMixin, ModelView):
-    pass
+class DashboardView(AdminIndexView):
+    @protected
+    def dispatch_request(self, *args, **kwargs):
+        return super().dispatch_request(*args, **kwargs)
 
-class DashboardView(AuthMixin, AdminIndexView):
     def get_sales_data(self):
-        today = date.today()
-        seven_days_ago = today - timedelta(days=6)
-        sales = db.session.query(
-            func.date(Sale.sale_date).label('date'),
-            func.sum(Sale.total_price).label('total')
-        ).filter(Sale.sale_date >= seven_days_ago).group_by(func.date(Sale.sale_date)).order_by(func.date(Sale.sale_date)).all()
+        today = date.today(); seven_days_ago = today - timedelta(days=6)
+        sales = db.session.query(func.date(Sale.sale_date).label('date'), func.sum(Sale.total_price).label('total')).filter(Sale.sale_date >= seven_days_ago).group_by(func.date(Sale.sale_date)).order_by(func.date(Sale.sale_date)).all()
         sales_dict = {s.date.strftime('%Y-%m-%d'): s.total for s in sales}
         labels = [(today - timedelta(days=i)).strftime('%a, %d') for i in range(6, -1, -1)]
         data = [sales_dict.get((today - timedelta(days=i)).strftime('%Y-%m-%d'), 0) for i in range(6, -1, -1)]
         return labels, data
 
     def get_stats(self):
-        stats = {}
-        total_revenue = db.session.query(func.sum(Sale.total_price)).scalar()
+        stats = {}; total_revenue = db.session.query(func.sum(Sale.total_price)).scalar()
         stats['total_revenue'] = total_revenue or 0
         stats['total_products'] = Product.query.count()
         stats['today_sales'] = Sale.query.filter(func.date(Sale.sale_date) == date.today()).count()
@@ -168,8 +158,7 @@ class DashboardView(AuthMixin, AdminIndexView):
 
     @expose('/')
     def index(self):
-        chart_labels, chart_data = self.get_sales_data()
-        stats = self.get_stats()
+        chart_labels, chart_data = self.get_sales_data(); stats = self.get_stats()
         return self.render('admin/dashboard.html', chart_labels=chart_labels, chart_data=chart_data, stats=stats)
 
 admin = Admin(