mirror of
https://github.com/StefBuwalda/WebTech.git
synced 2025-10-30 11:19:58 +00:00
121 lines
4.0 KiB
Python
121 lines
4.0 KiB
Python
from flask import Blueprint, render_template, redirect, url_for, flash
|
|
|
|
from application import db
|
|
from application.auth.models import User
|
|
from application.auth.forms import LoginForm
|
|
from flask_login import ( # type: ignore
|
|
login_user, # type: ignore
|
|
logout_user,
|
|
current_user,
|
|
)
|
|
from werkzeug.security import check_password_hash, generate_password_hash
|
|
from application.decorators import admin_required, login_required
|
|
from application.auth.forms import RegisterForm, UpdateForm
|
|
|
|
auth_blueprint = Blueprint("auth", __name__, template_folder="templates")
|
|
|
|
|
|
# Add user
|
|
@auth_blueprint.route("/register_user", methods=["GET", "POST"])
|
|
@admin_required
|
|
def register():
|
|
register_form = RegisterForm()
|
|
|
|
if register_form.validate_on_submit(): # type: ignore
|
|
username = register_form.username.data
|
|
password = register_form.password.data
|
|
confirm_password = register_form.confirm_password.data
|
|
is_admin = register_form.is_admin.data
|
|
if confirm_password != password:
|
|
return render_template(
|
|
"register_user.html",
|
|
form=register_form,
|
|
feedback="Passwords don't match, please try again",
|
|
active_page="register",
|
|
)
|
|
if User.query.filter_by(username=username).first():
|
|
return render_template(
|
|
"register_user.html",
|
|
form=register_form,
|
|
feedback="Username is already taken",
|
|
active_page="register",
|
|
)
|
|
new_user = User(
|
|
username=username, # type: ignore
|
|
password=generate_password_hash(password), # type: ignore
|
|
is_admin=is_admin,
|
|
)
|
|
db.session.add(new_user)
|
|
db.session.commit()
|
|
return render_template(
|
|
"register_user.html",
|
|
form=RegisterForm(formdata=None),
|
|
feedback="User succesfully added",
|
|
active_page="register",
|
|
)
|
|
return render_template(
|
|
"register_user.html", form=register_form, active_page="register"
|
|
)
|
|
|
|
|
|
# Update user (specifically password)
|
|
@auth_blueprint.route("/update_user", methods=["GET", "POST"])
|
|
@login_required
|
|
def update():
|
|
form = UpdateForm(username=current_user.username)
|
|
if form.validate_on_submit(): # type: ignore
|
|
if not check_password_hash(
|
|
current_user.password, form.current_password.data # type: ignore
|
|
):
|
|
return render_template(
|
|
"update_user.html",
|
|
form=form,
|
|
feedback="Current password incorrect",
|
|
active_page="update",
|
|
)
|
|
if form.password.data != form.confirm_password.data:
|
|
return render_template(
|
|
"update_user.html",
|
|
form=form,
|
|
feedback="New password mismatched",
|
|
active_page="update",
|
|
)
|
|
current_user.password = generate_password_hash(
|
|
form.password.data # type: ignore
|
|
)
|
|
db.session.commit()
|
|
logout_user()
|
|
return redirect(url_for("auth.login"))
|
|
return render_template("update_user.html", form=form, active_page="update")
|
|
|
|
|
|
# Login as user or admin
|
|
@auth_blueprint.route("/login", methods=["GET", "POST"])
|
|
def login():
|
|
login_form = LoginForm()
|
|
feedback = None
|
|
|
|
if login_form.validate_on_submit(): # type: ignore
|
|
username = login_form.username.data
|
|
password = login_form.password.data
|
|
user = User.query.filter_by(username=username).first() # type: ignore
|
|
|
|
if user and check_password_hash(
|
|
user.password, password # type: ignore
|
|
):
|
|
login_user(user) # type: ignore
|
|
return redirect("/")
|
|
else:
|
|
feedback = "Username or password is incorrect"
|
|
|
|
return render_template("login.html", form=login_form, feedback=feedback)
|
|
|
|
|
|
# Logout
|
|
@auth_blueprint.route("/logout")
|
|
@login_required
|
|
def logout():
|
|
logout_user()
|
|
flash("Logged out succesfully")
|
|
return redirect(url_for("index"))
|