rewrite
This commit is contained in:
@@ -43,14 +43,14 @@ def login():
|
|||||||
if 'user_id' in session:
|
if 'user_id' in session:
|
||||||
return redirect(url_for('main.index'))
|
return redirect(url_for('main.index'))
|
||||||
|
|
||||||
return render_template('auth/login.html')
|
return render_template('login.html')
|
||||||
|
|
||||||
# POST - process login
|
# POST - process login
|
||||||
username = request.form.get('username', '').strip()
|
username = request.form.get('username', '').strip()
|
||||||
password = request.form.get('password', '').strip()
|
password = request.form.get('password', '').strip()
|
||||||
|
|
||||||
if not username or not password:
|
if not username or not password:
|
||||||
return render_template('auth/login.html', error='Username and password required'), 400
|
return render_template('login.html', error='Username and password required'), 400
|
||||||
|
|
||||||
try:
|
try:
|
||||||
# Find user
|
# Find user
|
||||||
@@ -58,12 +58,12 @@ def login():
|
|||||||
|
|
||||||
if not user:
|
if not user:
|
||||||
logger.warning(f"[AUTH] Login failed - user '{username}' not found", flush=True)
|
logger.warning(f"[AUTH] Login failed - user '{username}' not found", flush=True)
|
||||||
return render_template('auth/login.html', error='Invalid credentials'), 401
|
return render_template('login.html', error='Invalid credentials'), 401
|
||||||
|
|
||||||
# Check password
|
# Check password
|
||||||
if not user.check_password(password):
|
if not user.check_password(password):
|
||||||
logger.warning(f"[AUTH] Login failed - wrong password for '{username}'", flush=True)
|
logger.warning(f"[AUTH] Login failed - wrong password for '{username}'", flush=True)
|
||||||
return render_template('auth/login.html', error='Invalid credentials'), 401
|
return render_template('login.html', error='Invalid credentials'), 401
|
||||||
|
|
||||||
session.clear()
|
session.clear()
|
||||||
session['user_id'] = user.id
|
session['user_id'] = user.id
|
||||||
|
|||||||
Reference in New Issue
Block a user