66 lines
2.9 KiB
Python
66 lines
2.9 KiB
Python
from datetime import datetime as dt, timezone as tz
|
|
from flask import request, redirect, url_for, flash, render_template, Blueprint, jsonify, session
|
|
from ..models.user import User, Tenant
|
|
from ..extensions import db, bcrypt
|
|
from .auth_forms import LoginForm
|
|
from flask_jwt_extended import (create_access_token, create_refresh_token, set_access_cookies, set_refresh_cookies,
|
|
unset_jwt_cookies)
|
|
|
|
auth_bp = Blueprint('auth_bp', __name__)
|
|
|
|
|
|
@auth_bp.route('/login', methods=['GET', 'POST'])
|
|
def login():
|
|
if request.method == 'POST':
|
|
email = request.form.get('email')
|
|
password = request.form.get('password')
|
|
# remember_me = True if request.form.get('remember_me') else False
|
|
|
|
user = User.query.filter_by(email=email).first()
|
|
tenant = Tenant.query.filter_by(id=user.tenant_id).first()
|
|
if user:
|
|
if user.is_active:
|
|
if bcrypt.check_password_hash(user.password, password):
|
|
response = jsonify({'msg': 'Login Successful'})
|
|
flash('Logged in successfully!', category='success')
|
|
|
|
# set session information
|
|
# session['user_id'] = user.id
|
|
# session['user_name'] = user.user_name
|
|
# session['email'] = user.email
|
|
# session['tenant_id'] = user.tenant_id
|
|
# session['tenant_name'] = tenant.name
|
|
|
|
# set JWT header information
|
|
additional_claims = {'tenant': user.tenant_id,
|
|
'is_super': user.is_super,
|
|
'is_admin': user.is_admin,
|
|
'is_tester': user.is_tester}
|
|
access_token = create_access_token(
|
|
identity=user.id,
|
|
additional_claims=additional_claims)
|
|
refresh_token = create_refresh_token(
|
|
identity=user.id,
|
|
additional_claims=additional_claims)
|
|
set_access_cookies(response, access_token)
|
|
set_refresh_cookies(response, refresh_token)
|
|
response.headers['Location'] = url_for('user_bp.user')
|
|
|
|
return response, 302
|
|
else:
|
|
flash('Incorrect email/password combination, try again.', category='error')
|
|
else:
|
|
flash('Account disabled. Please contact your administrator.', category='error')
|
|
else:
|
|
flash('Incorrect email/password combination, try again.', category='error')
|
|
|
|
form = LoginForm()
|
|
return render_template('login.html', form=form)
|
|
|
|
|
|
@auth_bp.route('/logout', methods=['POST'])
|
|
def logout():
|
|
response = jsonify({'msg': 'Logout Successful'})
|
|
unset_jwt_cookies(response)
|
|
return redirect(url_for('/'))
|