This commit is contained in:
Mateusz Gruszczyński
2025-11-04 10:38:46 +01:00
parent 762e51f886
commit dd31c1bdd0

View File

@@ -43,14 +43,14 @@ def login():
if 'user_id' in session: if 'user_id' in session:
return redirect(url_for('main.index')) return redirect(url_for('main.index'))
return render_template('auth/login.html') return render_template('login.html')
# POST - process login # POST - process login
username = request.form.get('username', '').strip() username = request.form.get('username', '').strip()
password = request.form.get('password', '').strip() password = request.form.get('password', '').strip()
if not username or not password: if not username or not password:
return render_template('auth/login.html', error='Username and password required'), 400 return render_template('login.html', error='Username and password required'), 400
try: try:
# Find user # Find user
@@ -58,12 +58,12 @@ def login():
if not user: if not user:
logger.warning(f"[AUTH] Login failed - user '{username}' not found", flush=True) logger.warning(f"[AUTH] Login failed - user '{username}' not found", flush=True)
return render_template('auth/login.html', error='Invalid credentials'), 401 return render_template('login.html', error='Invalid credentials'), 401
# Check password # Check password
if not user.check_password(password): if not user.check_password(password):
logger.warning(f"[AUTH] Login failed - wrong password for '{username}'", flush=True) logger.warning(f"[AUTH] Login failed - wrong password for '{username}'", flush=True)
return render_template('auth/login.html', error='Invalid credentials'), 401 return render_template('login.html', error='Invalid credentials'), 401
session.clear() session.clear()
session['user_id'] = user.id session['user_id'] = user.id