61 lines
No EOL
2.3 KiB
Python
61 lines
No EOL
2.3 KiB
Python
"""
|
|
Authentication routes and forms.
|
|
"""
|
|
from flask import Blueprint, render_template, redirect, url_for, flash, request
|
|
from flask_login import login_user, logout_user, login_required, current_user
|
|
from app import db
|
|
from app.models import User
|
|
from flask_wtf import FlaskForm
|
|
from wtforms import StringField, PasswordField, BooleanField, SubmitField
|
|
from wtforms.validators import DataRequired, Length, ValidationError
|
|
from functools import wraps
|
|
|
|
auth = Blueprint('auth', __name__)
|
|
|
|
# Forms
|
|
class LoginForm(FlaskForm):
|
|
username = StringField('Username', validators=[DataRequired(), Length(min=4, max=25)])
|
|
password = PasswordField('Password', validators=[DataRequired()])
|
|
remember = BooleanField('Remember Me')
|
|
submit = SubmitField('Sign In')
|
|
|
|
def validate_username(self, username):
|
|
user = User.query.filter_by(username=username.data).first()
|
|
if user is None:
|
|
raise ValidationError('Invalid username or password.')
|
|
|
|
# Routes
|
|
@auth.route('/login', methods=['GET', 'POST'])
|
|
def login():
|
|
if current_user.is_authenticated:
|
|
return redirect(url_for('inspections.dashboard'))
|
|
form = LoginForm()
|
|
if form.validate_on_submit():
|
|
user = User.query.filter_by(username=form.username.data).first()
|
|
if user is None or not user.check_password(form.password.data):
|
|
flash('Invalid username or password', 'error')
|
|
return redirect(url_for('auth.login'))
|
|
login_user(user, remember=form.remember.data)
|
|
next_page = request.args.get('next')
|
|
if not next_page or not next_page.startswith('/'):
|
|
next_page = url_for('inspections.dashboard')
|
|
flash('Logged in successfully.', 'success')
|
|
return redirect(next_page)
|
|
return render_template('login.html', form=form)
|
|
|
|
@auth.route('/logout')
|
|
@login_required
|
|
def logout():
|
|
logout_user()
|
|
flash('You have been logged out.', 'info')
|
|
return redirect(url_for('auth.login'))
|
|
|
|
# Decorator for admin-only routes
|
|
def admin_required(f):
|
|
@wraps(f)
|
|
def decorated_function(*args, **kwargs):
|
|
if not current_user.is_authenticated or not current_user.is_admin:
|
|
flash('You do not have permission to access this page.', 'error')
|
|
return redirect(url_for('inspections.dashboard'))
|
|
return f(*args, **kwargs)
|
|
return decorated_function |