45 lines
1.2 KiB
Python
45 lines
1.2 KiB
Python
from flask_login import login_user, logout_user
|
|
from app.bp import bp
|
|
from flask import Response, jsonify, request
|
|
from app.errors import error_response
|
|
from flask_login import current_user
|
|
|
|
from app import login
|
|
from app.models import User
|
|
|
|
|
|
@login.user_loader
|
|
def load_user(user_id):
|
|
return User.query.get(user_id)
|
|
|
|
|
|
@bp.route("/login", methods=["POST"])
|
|
def login_route():
|
|
data = request.get_json()
|
|
|
|
if current_user.is_authenticated:
|
|
return error_response(400, 'A user is already logged in!')
|
|
|
|
if not data.get("user_id") or not data.get("password"):
|
|
return error_response(400, "Must supply user_id and password")
|
|
|
|
user = User.query.get(data.get("user_id"))
|
|
if not user:
|
|
return error_response(400, "User not found")
|
|
|
|
if not user.check_password(data.get("password")):
|
|
return error_response(400, "Invalid password")
|
|
|
|
login_user(user)
|
|
resp = jsonify(user.to_dict())
|
|
resp.status_code = 200
|
|
return resp
|
|
|
|
@bp.route("/logout", methods=["POST"])
|
|
def logout_route():
|
|
if not current_user.is_authenticated:
|
|
return error_response(400, "No users are logged in!")
|
|
|
|
logout_user()
|
|
return Response(status=200)
|