from flask import Blueprint, session, redirect, url_for, render_template, request from flask_login import current_user, login_user, login_required, logout_user from applications.common import admin as index_curd from applications.common.admin_log import login_log from applications.common.utils.http import fail_api, success_api from applications.models import User passport_bp = Blueprint('passport', __name__, url_prefix='/passport') def register_passport_views(app): app.register_blueprint(passport_bp) # 获取验证码 @passport_bp.get('/getCaptcha') def get_captcha(): resp, code = index_curd.get_captcha() session["code"] = code return resp # 登录 @passport_bp.get('/login') def login(): if current_user.is_authenticated: return redirect(url_for('admin.index')) return render_template('admin/login.html') # 登录 @passport_bp.post('/login') def login_post(): req = request.form username = req.get('username') password = req.get('password') code = req.get('captcha') if not username or not password or not code: return fail_api(msg="用户名或密码没有输入") s_code = session.get("code", None) session["code"] = None if not all([code, s_code]): return fail_api(msg="参数错误") if code != s_code: return fail_api(msg="验证码错误") user = User.query.filter_by(username=username).first() if user is None: return fail_api(msg="不存在的用户") if user.enable is 0: return fail_api(msg="用户被暂停使用") if username == user.username and user.validate_password(password): # 登录 login_user(user) # 记录登录日志 login_log(request, uid=user.id, is_access=True) # 存入权限 index_curd.add_auth_session() return success_api(msg="登录成功") login_log(request, uid=user.id, is_access=False) return fail_api(msg="用户名或密码错误") # 退出登录 @passport_bp.post('/logout') @login_required def logout(): logout_user() session.pop('permissions') return success_api(msg="注销成功")