implement security

eveai_app/views/user_views.py

@@ -1,15 +1,18 @@
 # from . import user_bp
 from datetime import datetime as dt, timezone as tz
-from flask import request, redirect, url_for, flash, render_template, Blueprint
+from flask import request, redirect, url_for, flash, render_template, Blueprint, session
+from flask_jwt_extended import verify_jwt_in_request, get_jwt, get_jwt_identity, jwt_required
 from ..models.user import User, Tenant
 from ..extensions import db, bcrypt
 from .user_forms import TenantForm, UserForm
 from ..utils.database import Database
+from ..utils.security import admin_required, super_required, tester_required
 
 user_bp = Blueprint('user_bp', __name__, url_prefix='/user')
 
 
 @user_bp.route('/tenant', methods=['GET', 'POST'])
+@super_required
 def tenant():
     if request.method == 'POST':
         # Handle the required attributes
@@ -62,6 +65,8 @@ def tenant():
 
 
 @user_bp.route('/user', methods=['GET', 'POST'])
+@admin_required
+@jwt_required()
 def user():
     if request.method == 'POST':
         # Handle the required attributes