rewrite
This commit is contained in:
@@ -43,14 +43,14 @@ def login():
|
||||
if 'user_id' in session:
|
||||
return redirect(url_for('main.index'))
|
||||
|
||||
return render_template('auth/login.html')
|
||||
return render_template('login.html')
|
||||
|
||||
# POST - process login
|
||||
username = request.form.get('username', '').strip()
|
||||
password = request.form.get('password', '').strip()
|
||||
|
||||
if not username or not password:
|
||||
return render_template('auth/login.html', error='Username and password required'), 400
|
||||
return render_template('login.html', error='Username and password required'), 400
|
||||
|
||||
try:
|
||||
# Find user
|
||||
@@ -58,12 +58,12 @@ def login():
|
||||
|
||||
if not user:
|
||||
logger.warning(f"[AUTH] Login failed - user '{username}' not found", flush=True)
|
||||
return render_template('auth/login.html', error='Invalid credentials'), 401
|
||||
return render_template('login.html', error='Invalid credentials'), 401
|
||||
|
||||
# Check password
|
||||
if not user.check_password(password):
|
||||
logger.warning(f"[AUTH] Login failed - wrong password for '{username}'", flush=True)
|
||||
return render_template('auth/login.html', error='Invalid credentials'), 401
|
||||
return render_template('login.html', error='Invalid credentials'), 401
|
||||
|
||||
session.clear()
|
||||
session['user_id'] = user.id
|
||||
|
||||
Reference in New Issue
Block a user