Create main.py

custom_auth/controllers/main.py

@@ -0,0 +1,121 @@
+# custom_auth/controllers/main.py
+
+from odoo import http, _
+from odoo.http import request
+from werkzeug.utils import redirect
+
+class CustomAuthController(http.Controller):
+
+    # -------------------------
+    # SIGNUP PAGE
+    # -------------------------
+    @http.route(['/custom/signup'], type='http', auth='public', website=True)
+    def signup_page(self, **kw):
+        return request.render('custom_auth.signup_template', {})
+
+    @http.route(['/custom/signup/submit'], type='http', methods=['POST'], auth='public', website=True, csrf=True)
+    def signup_submit(self, **post):
+        name = post.get('name', '').strip()
+        login = post.get('login', '').strip()
+        password = post.get('password', '')
+        confirm = post.get('confirm_password', '')
+
+        errors = []
+
+        # Simple validation
+        if not name:
+            errors.append(_("Name is required"))
+        if not login:
+            errors.append(_("Email is required"))
+        if not password:
+            errors.append(_("Password is required"))
+        if password != confirm:
+            errors.append(_("Passwords do not match"))
+
+        # Email already exists?
+        existing_user = request.env['res.users'].sudo().search([('login', '=', login)], limit=1)
+        if existing_user:
+            errors.append(_("A user with this email already exists."))
+
+        if errors:
+            return request.render('custom_auth.signup_template', {
+                'errors': errors,
+                'values': post
+            })
+
+        # Create partner
+        Partner = request.env['res.partner'].sudo().create({
+            'name': name,
+            'email': login,
+        })
+
+        # Create user
+        try:
+            User = request.env['res.users'].sudo().create({
+                'name': name,
+                'login': login,
+                'email': login,
+                'partner_id': Partner.id,
+                'password': password,
+            })
+
+            # Add user to portal group
+            portal_group = request.env.ref('base.group_portal')
+            User.sudo().write({'groups_id': [(4, portal_group.id)]})
+
+        except Exception as e:
+            errors.append(_("Error creating user: %s") % e)
+            return request.render('custom_auth.signup_template', {
+                'errors': errors,
+                'values': post
+            })
+
+        # Auto login
+        try:
+            db = request.session.db
+            request.session.authenticate(db, login, password)
+        except:
+            return redirect('/custom/login?signup=ok')
+
+        return redirect('/')
+
+    # -------------------------
+    # LOGIN PAGE
+    # -------------------------
+    @http.route(['/custom/login'], type='http', auth='public', website=True)
+    def login_page(self, **kw):
+        message = None
+        if kw.get("signup") == "ok":
+            message = _("Signup successful. Please log in.")
+        return request.render("custom_auth.login_template", {'message': message})
+
+    @http.route(['/custom/login/submit'], type='http', methods=['POST'], auth='public', website=True, csrf=True)
+    def login_submit(self, **post):
+        login = post.get('login', '').strip()
+        password = post.get('password', '')
+
+        if not login or not password:
+            return request.render('custom_auth.login_template', {
+                'errors': [_("Enter both email and password.")],
+                'values': post
+            })
+
+        db = request.session.db
+        try:
+            request.session.authenticate(db, login, password)
+        except:
+            return request.render('custom_auth.login_template', {
+                'errors': [_("Incorrect email or password.")],
+                'values': post
+            })
+
+        next_url = post.get('redirect') or '/'
+        return redirect(next_url)
+
+    # -------------------------
+    # LOGOUT
+    # -------------------------
+    @http.route(['/custom/logout'], type='http', auth='user', website=True)
+    def logout(self, **kw):
+        request.session.logout(keep_db=True)
+        return redirect('/')