40 lines
1.3 KiB
Python
40 lines
1.3 KiB
Python
from __future__ import annotations
|
|
|
|
from urllib.parse import urlsplit
|
|
|
|
from flask import Blueprint, flash, redirect, render_template, request, url_for
|
|
from flask_login import current_user, login_required, login_user, logout_user
|
|
|
|
from app.auth.forms import LoginForm
|
|
from app.models import Account
|
|
|
|
bp = Blueprint("auth", __name__, url_prefix="/auth")
|
|
|
|
|
|
@bp.route("/login", methods=["GET", "POST"])
|
|
def login():
|
|
if current_user.is_authenticated:
|
|
return redirect(url_for("main.dashboard"))
|
|
|
|
form = LoginForm()
|
|
if form.validate_on_submit():
|
|
username = form.username.data.strip().lower()
|
|
account = Account.query.filter_by(username=username).first()
|
|
if account and account.active and account.check_password(form.password.data):
|
|
login_user(account, remember=form.remember.data)
|
|
next_url = request.args.get("next")
|
|
if not next_url or urlsplit(next_url).netloc:
|
|
next_url = url_for("main.dashboard")
|
|
return redirect(next_url)
|
|
flash("Invalid username or password.", "danger")
|
|
|
|
return render_template("auth/login.html", form=form)
|
|
|
|
|
|
@bp.post("/logout")
|
|
@login_required
|
|
def logout():
|
|
logout_user()
|
|
flash("You have been signed out.", "info")
|
|
return redirect(url_for("auth.login"))
|