mirror of
https://github.com/Xevion/runnerspace.git
synced 2025-12-06 07:16:13 -06:00
- Rename blueprint route 'main.user' to 'main.view_user' for clarity - Rename 'forms.py' to 'route_forms.py'
64 lines
2.1 KiB
Python
64 lines
2.1 KiB
Python
from flask import Blueprint, flash, redirect, request, url_for
|
|
from flask_login import login_required, login_user, logout_user, current_user
|
|
from werkzeug.security import check_password_hash, generate_password_hash
|
|
|
|
from forms import LoginForm, RegistrationForm, EditProfileForm
|
|
from models import User
|
|
from database import db
|
|
|
|
blueprint = Blueprint('auth', __name__)
|
|
|
|
|
|
@blueprint.route('/user/<username>', methods=['POST'])
|
|
def edit_profile_post(username: str):
|
|
form = EditProfileForm(request.form)
|
|
user = User.query.filter_by(username=username).first_or_404()
|
|
|
|
if current_user.is_admin or user.id == current_user.id
|
|
if form.validate():
|
|
user.about_me = form.about_me.data
|
|
db.session.commit()
|
|
|
|
return redirect(url_for('main.view_user', username=user.username))
|
|
|
|
|
|
@blueprint.route('/login', methods=['POST'])
|
|
def login_post():
|
|
form = LoginForm(request.form)
|
|
user = User.query.filter_by(username=form.data.username).first()
|
|
|
|
# check if the user actually exists, and compare password given
|
|
if not user or not check_password_hash(user.password, form.password.data):
|
|
flash('Please check your login details and try again.')
|
|
return redirect(url_for('main.login'))
|
|
|
|
login_user(user, remember=form.remember.data)
|
|
return redirect(url_for('main.index'))
|
|
|
|
|
|
@blueprint.route('/signup', methods=['POST'])
|
|
def signup_post():
|
|
# validate and add user to db
|
|
form = RegistrationForm(request.form)
|
|
|
|
user = User.query.filter_by(username=form.username.data).first() # Check if the username is already in use
|
|
if user: # redirect back to sign-up page
|
|
flash('This username is already in use.')
|
|
return redirect(url_for('main.signup'))
|
|
|
|
# Create new user with form data
|
|
new_user = User(username=form.username.data, name=form.name.data, password=generate_password_hash(form.password.data, method='sha256'))
|
|
|
|
# Add new user to db
|
|
db.session.add(new_user)
|
|
db.session.commit()
|
|
|
|
return redirect(url_for('main.login'))
|
|
|
|
|
|
@blueprint.route('/logout')
|
|
@login_required
|
|
def logout():
|
|
logout_user()
|
|
return redirect(url_for('main.index'))
|