File size: 2,384 Bytes
0bdcf2c c8091de 0bdcf2c c8091de 0bdcf2c | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 | from flask import Blueprint, render_template, request, redirect, url_for, flash, session
from api.models import db, User
from functools import wraps
auth_bp = Blueprint("auth", __name__)
@auth_bp.route("/signup", methods=["GET", "POST"])
def signup():
if request.method == "POST":
first_name = request.form.get("first_name")
last_name = request.form.get("last_name")
email = request.form.get("email")
password = request.form.get("password")
confirm_password = request.form.get("confirm_password")
if password != confirm_password:
flash("Passwords do not match!")
return redirect(url_for("auth.signup"))
if User.query.filter_by(email=email).first():
flash("Email already registered!")
return redirect(url_for("auth.signup"))
user = User(first_name=first_name, last_name=last_name, email=email)
user.set_password(password=password)
db.session.add(user)
db.session.commit()
session['user_id'] = user.id
session['user_name'] = user.first_name
session['last_name'] = user.last_name
flash("Login Successful!")
return render_template("signup.html")
return render_template("signup.html")
@auth_bp.route("/login", methods=["GET", "POST"])
def login():
if request.method == "POST":
email = request.form.get("email")
password = request.form.get("password")
user = User.query.filter_by(email=email).first()
if user and user.check_password(password):
session['user_id'] = user.id
session['user_name'] = user.first_name
session['last_name'] = user.last_name
flash("Login Successful!")
return render_template("login.html")
else:
flash("Invalid email or password.")
return redirect(url_for("auth.login"))
return render_template("login.html")
@auth_bp.route("/logout")
def logout():
session.pop('user_id', None)
session.pop('user_name', None)
return redirect(url_for("home"))
def login_required(f):
@wraps(f)
def decorated_function(*args, **kwargs):
if "user_id" not in session:
return redirect(url_for("auth.login"))
return f(*args, **kwargs)
return decorated_function |