Add a new method to remove an entry

flaskr/flaskr.py

@@ -59,7 +59,7 @@ def close_db(error):
 @app.route('/')
 def show_entries():
     db = get_db()
-    cur = db.execute('SELECT title, text FROM entries ORDER BY id DESC')
+    cur = db.execute('SELECT id, title, text FROM entries ORDER BY id DESC')
     entries = cur.fetchall()
     return render_template('show_entries.html', entries=entries)
 
@@ -96,3 +96,14 @@ def logout():
     session.pop('logged_in', None)
     flash('You were logged out')
     return redirect(url_for('show_entries'))
+
+
+@app.route('/delete/<int:entry_id>', methods=['POST'])
+def delete_entry(entry_id):
+    if not session.get('logged_in'):
+        abort(401)
+    db = get_db()
+    db.execute('DELETE FROM entries WHERE id = ?', [entry_id])
+    db.commit()
+    flash('Entry was successfully deleted')
+    return redirect(url_for('show_entries'))

flaskr/static/style.css

@@ -176,6 +176,20 @@ input[type="submit"]:hover {
   background: var(--secondary-color);
 }
 
+.delete-entry {
+  margin-top: 0.5em;
+}
+
+.delete-entry input[type="submit"] {
+  background: var(--accent-color);
+  padding: 0.4em 0.8em;
+  font-size: 0.9em;
+}
+
+.delete-entry input[type="submit"]:hover {
+  background: #c0392b;
+}
+
 /* Responsive adjustments */
 @media (max-width: 840px) {
   .page {

flaskr/templates/show_entries.html

@@ -13,7 +13,14 @@
   {% endif %}
   <ul class=entries>
   {% for entry in entries %}
-    <li><h2>{{ entry.title }}</h2>{{ entry.text|safe }}
+    <li>
+      <h2>{{ entry.title }}</h2>{{ entry.text|safe }}
+      {% if session.logged_in %}
+        <form action="{{ url_for('delete_entry', entry_id=entry.id) }}" method=post class=delete-entry>
+          <input type=submit value="Delete" onclick="return confirm('Are you sure you want to delete this entry?');">
+        </form>
+      {% endif %}
+    </li>
   {% else %}
     <li><em>Unbelievable.  No entries here so far</em>
   {% endfor %}

tests/test_flaskr.py

@@ -144,7 +144,51 @@ def test_show_entries(self):
             # the database state is not guaranteed. In a real-world scenario,
             # you might want to set up a known database state before running this test.
 
+    def test_delete_entry_unauthorized(self):
+        """
+        Test that an unauthorized user cannot delete entries.
+        """
+        with app.test_client() as client:
+            # Try to delete an entry without being logged in
+            response = client.post('/delete/1', follow_redirects=True)
+
+            # Should get a 401 Unauthorized response
+            assert response.status_code == 401
 
+    def test_delete_entry_authorized(self):
+        """
+        Test that an authorized user can delete entries.
+        """
+        with app.test_client() as client:
+            # First, log in
+            client.post('/login', data={
+                'username': app.config['USERNAME'],
+                'password': app.config['PASSWORD']
+            })
+
+            # Add an entry to delete
+            client.post('/add', data={
+                'title': 'Test Entry to Delete',
+                'text': 'This entry will be deleted'
+            })
+
+            # Get the entries to find the ID of the one we just added
+            with app.app_context():
+                db = get_db()
+                entry = db.execute('SELECT id FROM entries WHERE title = ?', 
+                                  ['Test Entry to Delete']).fetchone()
+
+                # Now delete the entry
+                response = client.post(f'/delete/{entry["id"]}', follow_redirects=True)
+
+                # Check if deletion was successful
+                assert response.status_code == 200
+                assert b'Entry was successfully deleted' in response.data
+
+                # Verify the entry is no longer in the database
+                deleted_entry = db.execute('SELECT * FROM entries WHERE id = ?', 
+                                         [entry["id"]]).fetchone()
+                assert deleted_entry is None
 
 class AuthActions(object):