76 lines
No EOL
2.7 KiB
Python
76 lines
No EOL
2.7 KiB
Python
from flask import Blueprint, render_template, redirect, url_for, flash, request
|
|
from flask_login import login_user, logout_user, current_user, login_required
|
|
from werkzeug.security import generate_password_hash, check_password_hash
|
|
from app.core.extensions import db
|
|
from app.core.auth import User
|
|
|
|
bp = Blueprint('auth', __name__, url_prefix='/auth')
|
|
|
|
@bp.route('/login', methods=['GET', 'POST'])
|
|
def login():
|
|
# If already logged in, redirect to dashboard
|
|
if current_user.is_authenticated:
|
|
return redirect(url_for('dashboard.dashboard_home'))
|
|
|
|
if request.method == 'POST':
|
|
email = request.form.get('email')
|
|
password = request.form.get('password')
|
|
remember = 'remember' in request.form
|
|
|
|
user = User.query.filter_by(email=email).first()
|
|
|
|
if user and user.check_password(password):
|
|
login_user(user, remember=remember)
|
|
next_page = request.args.get('next')
|
|
if next_page:
|
|
return redirect(next_page)
|
|
return redirect(url_for('dashboard.dashboard_home'))
|
|
|
|
flash('Invalid email or password', 'danger')
|
|
|
|
return render_template('auth/login.html', title='Login')
|
|
|
|
@bp.route('/register', methods=['GET', 'POST'])
|
|
def register():
|
|
# If already logged in, redirect to dashboard
|
|
if current_user.is_authenticated:
|
|
return redirect(url_for('dashboard.dashboard_home'))
|
|
|
|
if request.method == 'POST':
|
|
email = request.form.get('email')
|
|
password = request.form.get('password')
|
|
password_confirm = request.form.get('password_confirm')
|
|
|
|
# Check if email already exists
|
|
existing_user = User.query.filter_by(email=email).first()
|
|
if existing_user:
|
|
flash('Email already registered', 'danger')
|
|
return render_template('auth/register.html', title='Register')
|
|
|
|
# Check if passwords match
|
|
if password != password_confirm:
|
|
flash('Passwords do not match', 'danger')
|
|
return render_template('auth/register.html', title='Register')
|
|
|
|
# Create new user
|
|
user = User(email=email)
|
|
user.set_password(password)
|
|
|
|
# Make first user an admin
|
|
if User.query.count() == 0:
|
|
user.is_admin = True
|
|
|
|
db.session.add(user)
|
|
db.session.commit()
|
|
|
|
flash('Registration successful! Please log in.', 'success')
|
|
return redirect(url_for('auth.login'))
|
|
|
|
return render_template('auth/register.html', title='Register')
|
|
|
|
@bp.route('/logout')
|
|
@login_required
|
|
def logout():
|
|
logout_user()
|
|
flash('You have been logged out', 'info')
|
|
return redirect(url_for('auth.login')) |