去除首页面，优化命名，优化schema

applications/view/system/passport.py

@@ -0,0 +1,89 @@
+from flask import Blueprint, session, redirect, url_for, render_template, request
+from flask_login import current_user, login_user, login_required, logout_user
+
+from applications.common import admin as index_curd
+from applications.common.admin_log import login_log
+from applications.common.utils.http import fail_api, success_api
+from applications.models import User
+
+bp = Blueprint('passport', __name__, url_prefix='/passport')
+
+
+
+
+# 获取验证码
+@bp.get('/getCaptcha')
+def get_captcha():
+    resp, code = index_curd.get_captcha()
+    session["code"] = code
+    return resp
+
+
+# 登录
+@bp.get('/login')
+def login():
+    if current_user.is_authenticated:
+        return redirect(url_for('system.index'))
+    return render_template('system/login.html')
+
+
+# 登录
+@bp.post('/login')
+def login_post():
+    req = request.form
+    username = req.get('username')
+    password = req.get('password')
+    code = req.get('captcha').__str__().lower()
+
+    if not username or not password or not code:
+        return fail_api(msg="用户名或密码没有输入")
+    s_code = session.get("code", None)
+    session["code"] = None
+
+    if not all([code, s_code]):
+        return fail_api(msg="参数错误")
+
+    if code != s_code:
+        return fail_api(msg="验证码错误")
+    user = User.query.filter_by(username=username).first()
+
+    if not user:
+        return fail_api(msg="不存在的用户")
+
+    if user.enable == 0:
+        return fail_api(msg="用户被暂停使用")
+
+    if username == user.username and user.validate_password(password):
+        # 登录
+        login_user(user)
+        # 记录登录日志
+        login_log(request, uid=user.id, is_access=True)
+        # 授权路由存入session
+        role = current_user.role
+        user_power = []
+        for i in role:
+            if i.enable == 0:
+                continue
+            for p in i.power:
+                if p.enable == 0:
+                    continue
+                user_power.append(p.code)
+        session['permissions'] = user_power
+        # # 角色存入session
+        # roles = []
+        # for role in current_user.role.all():
+        #     roles.append(role.id)
+        # session['role'] = [roles]
+
+        return success_api(msg="登录成功")
+    login_log(request, uid=user.id, is_access=False)
+    return fail_api(msg="用户名或密码错误")
+
+
+# 退出登录
+@bp.post('/logout')
+@login_required
+def logout():
+    logout_user()
+    session.pop('permissions')
+    return success_api(msg="注销成功")