API Reference

Module: main.py
Application: pkg.bio

This document outlines the routes and core logic of main.py, the primary application module for pkg.bio. All routes follow the principles of authenticated user profile management and safe public viewing.

1. Authentication Routes

• GET /login
  Renders the login form.
• POST /login
  Authenticates user via Supabase, stores session tokens.
• GET /signup
  Renders the registration form.
• POST /signup
  Creates a new Supabase account. Enforces username uniqueness and basic validation.
• GET /logout
  Clears session and signs user out of Supabase.

2. Profile Setup & Editing

• GET /onboarding
  Displays onboarding form. Requires login.
• POST /onboarding
  Initializes or updates profile in Supabase. Accepts username, quote, links, avatar, and Discord ID.
• GET /dashboard
  Displays authenticated user's public-facing profile preview.
• GET /dashboard/edit
  Displays form to update bio/profile information.
• POST /dashboard/edit
  Updates profile in Supabase. Validates and persists user-provided metadata.

3. Public Pages

• GET /
  Renders the landing page.
• GET /<username>
  Renders public bio page. Looks up profile by username and optionally fetches Discord activity.

4. Developer Testing Routes

• GET /testing/basicSelect
  Renders a test page with logo selection options.
• GET /testing/activityParsing/<id>
  Fetches and parses Discord activity for a given user ID.

5. Internal Helpers

• login_required: Decorator to protect routes for authenticated users only.
• get_user_by_username(username): Fetches profile from Supabase by username.
• get_user_by_id(user_id): Fetches profile from Supabase by user ID.
• create_or_update_profile(user_id, username, **kwargs): Inserts or updates a user profile record.
• format_user_data(user_data): Normalizes Supabase data into bio config format for rendering.

helper.py functions

• parse_activity(user_data): Returns a JSON noramlized format from Lanyard.
• clean_string(string): Formats strings from the logos.json into readable human strings for rendering.
• get_discord_activity(user_id): Return parsed activity from lanyard (Used in tandem with parse_activity)

6. Token Refresh Middleware

@app.before_request – Checks for and refreshes expired Supabase access tokens using a stored refresh token.

7. Environment Requirements

• SECRET_KEY: Flask session secret (required).
• SUPABASE_URL: Supabase project base URL.
• SUPABASE_KEY: Supabase project service key.