-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathauth.py
73 lines (52 loc) · 1.92 KB
/
auth.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
from flask import Blueprint,render_template,url_for,redirect,request,flash
from .models import User
from .extensions import db
# Essentials For Login Creation
from werkzeug.security import generate_password_hash,check_password_hash
from flask_login import login_user, login_required, logout_user
auth = Blueprint("auth",__name__)
# Routes
@auth.route("/login")
def login():
return render_template("login.html")
@auth.route("/login",methods=["POST"])
def login_post():
if request.method == "POST":
# Get values from Form
email = request.form.get("email")
name = request.form.get("name")
password = request.form.get("password")
remember = request.form.get("remember")
# if it returns a user then email already exist and user exist hence check for password
user = User.query.filter_by(email=email).first()
# if password doesn't match then redirect
if not user or not check_password_hash(user.password,password):
flash("Please check your login details and try again")
return redirect(url_for('auth.login'))
login_user(user,remember=remember)
# if the password is valid for the user we redirect to the main app
return redirect(url_for('index'))
@auth.route("/signup")
def signup():
return render_template("signup.html")
@auth.route("/signup",methods=["POST"])
def signup_post():
# Get values from form
email = request.form.get("email")
name = request.form.get("name")
password = request.form.get("password")
# if it returns a user then email already exist hence redirect
user = User.query.filter_by(email=email).first()
if user:
return redirect(url_for("login"))
# else create a new user
new_user = User(email=email,name=name,password=generate_password_hash(password,method='sha256'))
# add new user to DB
db.session.add(new_user)
db.session.commit()
return redirect(url_for("auth.login"))
@auth.route('/logout')
@login_required
def logout():
logout_user()
return redirect(url_for('home_page'))