summaryrefslogtreecommitdiffstats
path: root/flaskr/views/auth.py
diff options
context:
space:
mode:
authorMitsuo Tokumori <[email protected]>2023-10-29 07:41:04 -0500
committerMitsuo Tokumori <[email protected]>2023-10-29 07:41:04 -0500
commit43f9d78f8c00e13732b809519f0529ac293fd5ab (patch)
treed9779a6d4b511dd27cfe80b3f8d0ad2e5ef5d7da /flaskr/views/auth.py
parentde8b3d760a37fc54645a2588b062f85963146070 (diff)
downloadustayml-43f9d78f8c00e13732b809519f0529ac293fd5ab.tar.gz
ustayml-43f9d78f8c00e13732b809519f0529ac293fd5ab.tar.bz2
ustayml-43f9d78f8c00e13732b809519f0529ac293fd5ab.zip
Rename to ustayml (u-stayML)
Diffstat (limited to 'flaskr/views/auth.py')
-rw-r--r--flaskr/views/auth.py102
1 files changed, 0 insertions, 102 deletions
diff --git a/flaskr/views/auth.py b/flaskr/views/auth.py
deleted file mode 100644
index 2dc32af..0000000
--- a/flaskr/views/auth.py
+++ /dev/null
@@ -1,102 +0,0 @@
-"""Authentication blueprint"""
-
-import functools
-
-from flask import (
- Blueprint, flash, g, redirect, render_template, request, session, url_for
-)
-from werkzeug.security import check_password_hash, generate_password_hash
-from flaskr.db import get_db
-
-bp = Blueprint('auth', __name__, url_prefix='/auth')
-
[email protected]('/register', methods=('GET', 'POST'))
-def register():
- if request.method == 'POST':
- # Form validation
- username = request.form['username']
- password = request.form['password']
- db = get_db()
- error = None
-
- if not username:
- error = 'Username is required.'
- elif not password:
- error = 'Password is required.'
-
- if error is None:
- try:
- # NOTE: don't use f-string here. Use `?` placeholders so that
- # database library can escape the fields
- # (otherwise SQL injection vulnerability)
- db.execute(
- "INSERT INTO user (username, password) VALUES (?, ?)",
- (username, generate_password_hash(password))
- )
- db.commit()
- except db.IntegrityError:
- error = f"User {username} is already registered."
- else:
- return redirect(url_for("auth.login"))
-
- flash(error)
-
- return render_template('auth/register.html')
-
-
[email protected]('/login', methods=('GET', 'POST'))
-def login():
- if request.method == 'POST':
- username = request.form['username']
- password = request.form['password']
- db = get_db()
- error = None
- user = db.execute(
- 'SELECT * FROM user WHERE username = ?', (username,)
- ).fetchone()
-
- if user is None:
- error = 'Incorrect username.'
- elif not check_password_hash(user['password'], password):
- error = 'Incorrect password.'
-
- if error is None:
- session.clear()
- session['user_id'] = user['id']
- return redirect(url_for('index'))
-
- flash(error)
-
- return render_template('auth/login.html')
-
-
-# runs before the view function, no matter what URL is requested
[email protected]_app_request
-def load_logged_in_user():
- user_id = session.get('user_id')
-
- if user_id is None:
- g.user = None
- else:
- g.user = get_db().execute(
- 'SELECT * FROM user WHERE id = ?', (user_id,)
- ).fetchone()
-
-
-def logout():
- session.clear()
- return redirect(url_for('index'))
-
-
-# Define decorator to require authentication in other views
-def login_required(view):
- """view is a function that returns HTML (and is part of a blueprint)"""
- @functools.wraps(view)
- def wrapped_view(**kwargs):
- if g.user is None:
- return redirect(url_for('auth.login'))
-
- return view(**kwargs)
-
- return wrapped_view \ No newline at end of file