|
|
from flask import Blueprint, render_template, request, redirect, url_for
|
|
|
from werkzeug.security import generate_password_hash, check_password_hash
|
|
|
from flask_login import login_user, logout_user, login_required
|
|
|
from datetime import datetime, timedelta
|
|
|
from flask_jwt_extended import create_access_token
|
|
|
from flask import jsonify
|
|
|
|
|
|
import random
|
|
|
|
|
|
from .models import db, User
|
|
|
from .email import send_otp
|
|
|
|
|
|
auth = Blueprint("auth", __name__, url_prefix="/auth")
|
|
|
|
|
|
def gen_otp():
|
|
|
return str(random.randint(100000, 999999))
|
|
|
|
|
|
|
|
|
@auth.route("/register", methods=["GET", "POST"])
|
|
|
def register():
|
|
|
if request.method == "POST":
|
|
|
otp = gen_otp()
|
|
|
user = User(
|
|
|
email=request.form["email"],
|
|
|
password=generate_password_hash(request.form["password"]),
|
|
|
otp=otp,
|
|
|
otp_expiry=datetime.now() + timedelta(minutes=5)
|
|
|
)
|
|
|
db.session.add(user)
|
|
|
db.session.commit()
|
|
|
send_otp(user.email, otp)
|
|
|
return redirect(url_for("auth.verify", email=user.email))
|
|
|
return render_template("auth/register.html")
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@auth.route("/verify/<email>", methods=["GET", "POST"])
|
|
|
def verify(email):
|
|
|
user = User.query.filter_by(email=email).first()
|
|
|
|
|
|
if request.method == "POST":
|
|
|
if user.otp != request.form["otp"]:
|
|
|
return render_template("auth/verify_otp.html", error="Invalid OTP")
|
|
|
|
|
|
if user.otp_expiry < datetime.now():
|
|
|
return render_template("auth/verify_otp.html", error="OTP expired")
|
|
|
|
|
|
user.is_verified = True
|
|
|
user.otp = None
|
|
|
db.session.commit()
|
|
|
|
|
|
return render_template(
|
|
|
"auth/login.html",
|
|
|
success="Email verified successfully"
|
|
|
)
|
|
|
|
|
|
return render_template("auth/verify_otp.html")
|
|
|
|
|
|
|
|
|
@auth.route("/login", methods=["GET", "POST"])
|
|
|
def login():
|
|
|
if request.method == "POST":
|
|
|
user = User.query.filter_by(email=request.form["email"]).first()
|
|
|
|
|
|
if user and check_password_hash(user.password, request.form["password"]) and user.is_verified:
|
|
|
login_user(user)
|
|
|
|
|
|
token = create_access_token(identity=user.id)
|
|
|
|
|
|
return jsonify({
|
|
|
"message": "login success",
|
|
|
"access_token": token
|
|
|
})
|
|
|
|
|
|
return render_template("auth/login.html")
|
|
|
|
|
|
@auth.route("/logout")
|
|
|
@login_required
|
|
|
def logout():
|
|
|
logout_user()
|
|
|
return redirect("/")
|
|
|
|
