File size: 2,282 Bytes
b5cb408 |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 |
# auth.py
from flask import Blueprint, render_template, request, jsonify, redirect, url_for
from flask_login import login_user, logout_user, login_required, current_user
from misc.extensions import db
from misc.models import User
auth_bp = Blueprint("auth", __name__)
@auth_bp.route("/login", methods=["GET", "POST"])
def login():
if request.method == "GET":
return render_template("login.html")
data = request.get_json(silent=True) or request.form
email = (data.get("email") or "").strip().lower()
password = data.get("password") or ""
user = User.query.filter_by(email=email).first()
if not user or not user.check_password(password):
if request.is_json:
return jsonify({"ok": False, "error": "Invalid credentials"}), 401
return render_template("login.html", error="Invalid credentials"), 401
login_user(user)
if request.is_json:
return jsonify({"ok": True, "user": {"email": user.email, "name": user.name}})
return redirect(url_for("home"))
@auth_bp.route("/signup", methods=["GET", "POST"])
def signup():
if request.method == "GET":
return render_template("signup.html")
data = request.get_json(silent=True) or request.form
email = (data.get("email") or "").strip().lower()
name = data.get("name") or ""
password = data.get("password") or ""
if not email or not password:
return jsonify({"ok": False, "error": "Missing fields"}), 400
if User.query.filter_by(email=email).first():
return jsonify({"ok": False, "error": "Email already registered"}), 409
u = User(email=email, name=name)
u.set_password(password)
db.session.add(u); db.session.commit()
return jsonify({"ok": True})
@auth_bp.route("/api/logout", methods=["POST"])
@login_required
def api_logout():
logout_user()
return jsonify({"ok": True})
@auth_bp.route("/api/reset", methods=["POST"])
def api_reset():
return jsonify({"ok": True})
@auth_bp.route("/logout", methods=["POST"])
@login_required
def logout_post():
logout_user()
return jsonify({"ok": True}), 200
@auth_bp.route("/logout", methods=["GET"])
@login_required
def logout_get():
logout_user()
return redirect("/")
|