mirror of
https://github.com/Project-Redacted/Highscores-Server.git
synced 2025-05-14 07:32:15 +00:00
91 lines
2.7 KiB
Python
91 lines
2.7 KiB
Python
import re
|
|
|
|
from flask import Blueprint, render_template, request, flash, redirect, url_for
|
|
from flask_login import login_required, login_user, logout_user, current_user
|
|
from werkzeug.security import generate_password_hash, check_password_hash
|
|
|
|
from server.extensions import db
|
|
from server.models import Users, Tokens
|
|
|
|
|
|
blueprint = Blueprint('auth', __name__)
|
|
|
|
|
|
@blueprint.route('/auth', methods=['GET'])
|
|
def auth():
|
|
return render_template('auth.html')
|
|
|
|
|
|
@blueprint.route('/account', methods=['GET'])
|
|
@login_required
|
|
def account():
|
|
token_list = Tokens.query.filter_by(holder=current_user.id).all()
|
|
return render_template('account.html', token_list=token_list)
|
|
|
|
|
|
@blueprint.route('/register', methods=['POST'])
|
|
def register():
|
|
# Get the form data
|
|
username = request.form["username"].strip()
|
|
password = request.form["password"].strip()
|
|
username_regex = re.compile(r"\b[A-Za-z0-9._-]+\b")
|
|
|
|
error = []
|
|
|
|
# Validate the form
|
|
if not username or not username_regex.match(username):
|
|
error.append("Username is empty or invalid! Must be alphanumeric, and can contain ._-")
|
|
if not password:
|
|
error.append("Password is empty!")
|
|
elif len(password) < 8:
|
|
error.append("Password is too short! Must be at least 8 characters long.")
|
|
if Users.query.filter_by(username=username).first():
|
|
error.append("Username already exists!")
|
|
|
|
# If there are errors, return them
|
|
if error:
|
|
for err in error:
|
|
flash(err, "error")
|
|
return redirect(url_for("auth.auth"))
|
|
|
|
register_user = Users(username=username, password=generate_password_hash(password, method="scrypt"))
|
|
db.session.add(register_user)
|
|
db.session.commit()
|
|
|
|
flash("Successfully registered!", "success")
|
|
return redirect(url_for("auth.auth"))
|
|
|
|
|
|
@blueprint.route('/login', methods=['POST'])
|
|
def login():
|
|
# Get the form data
|
|
username = request.form["username"].strip()
|
|
password = request.form["password"].strip()
|
|
username_regex = re.compile(r"\b[A-Za-z0-9._-]+\b")
|
|
|
|
error = []
|
|
|
|
# Validate the form
|
|
if not username or not username_regex.match(username) or not password:
|
|
error.append("Username or Password is incorrect!")
|
|
|
|
user = Users.query.filter_by(username=username).first()
|
|
|
|
if not user or not check_password_hash(user.password, password):
|
|
error.append("Username or Password is incorrect!")
|
|
|
|
# If there are errors, return them
|
|
if error:
|
|
for err in error:
|
|
flash(err, "error")
|
|
return redirect(url_for("auth.account"))
|
|
|
|
login_user(user, remember=True)
|
|
return redirect(url_for("views.index"))
|
|
|
|
|
|
@blueprint.route('/logout', methods=['GET'])
|
|
@login_required
|
|
def logout():
|
|
logout_user()
|
|
return redirect(url_for("views.index"))
|