|
|
@ -13,11 +13,11 @@ def login(): |
|
|
|
|
|
|
|
|
@bp.route('/login', methods=['POST']) |
|
|
@bp.route('/login', methods=['POST']) |
|
|
def login_post(): |
|
|
def login_post(): |
|
|
email = request.form.get('email') |
|
|
|
|
|
|
|
|
username = request.form.get('username') |
|
|
password = request.form.get('password') |
|
|
password = request.form.get('password') |
|
|
remember = True if request.form.get('remember') else False |
|
|
remember = True if request.form.get('remember') else False |
|
|
|
|
|
|
|
|
user = User.query.filter_by(email=email).first() |
|
|
|
|
|
|
|
|
user = User.query.filter_by(username=username).first() |
|
|
|
|
|
|
|
|
# check if the user actually exists |
|
|
# check if the user actually exists |
|
|
# take the user-supplied password, hash it, and compare it to the hashed password in the database |
|
|
# take the user-supplied password, hash it, and compare it to the hashed password in the database |
|
|
@ -28,7 +28,7 @@ def login_post(): |
|
|
# if the above check passes, then we know the user has the right credentials |
|
|
# if the above check passes, then we know the user has the right credentials |
|
|
login_user(user, remember=remember) |
|
|
login_user(user, remember=remember) |
|
|
|
|
|
|
|
|
return redirect(url_for('reservas.misreservas')) |
|
|
|
|
|
|
|
|
return redirect(url_for('paginas.index')) |
|
|
|
|
|
|
|
|
@bp.route('/signup') |
|
|
@bp.route('/signup') |
|
|
def signup(): |
|
|
def signup(): |
|
|
@ -36,18 +36,17 @@ def signup(): |
|
|
|
|
|
|
|
|
@bp.route('/signup', methods=['POST']) |
|
|
@bp.route('/signup', methods=['POST']) |
|
|
def signup_post(): |
|
|
def signup_post(): |
|
|
email = request.form.get('email') |
|
|
|
|
|
name = request.form.get('name') |
|
|
|
|
|
|
|
|
username = request.form.get('username') |
|
|
password = request.form.get('password') |
|
|
password = request.form.get('password') |
|
|
|
|
|
|
|
|
user = User.query.filter_by(email=email).first() # if this returns a user, then the email already exists in database |
|
|
|
|
|
|
|
|
user = User.query.filter_by(username=username).first() # if this returns a user, then the user already exists in database |
|
|
|
|
|
|
|
|
if user: # if a user is found, we want to redirect back to signup page so user can try again |
|
|
if user: # if a user is found, we want to redirect back to signup page so user can try again |
|
|
flash('La dirección de correo ya existe') |
|
|
flash('La dirección de correo ya existe') |
|
|
return redirect(url_for('auth.signup')) |
|
|
return redirect(url_for('auth.signup')) |
|
|
|
|
|
|
|
|
# create a new user with the form data. Hash the password so the plaintext version isn't saved. |
|
|
# create a new user with the form data. Hash the password so the plaintext version isn't saved. |
|
|
new_user = User(email=email, name=name, password=generate_password_hash(password, method='pbkdf2:sha256')) |
|
|
|
|
|
|
|
|
new_user = User(username=username, password=generate_password_hash(password, method='pbkdf2:sha256')) |
|
|
|
|
|
|
|
|
# add the new user to the database |
|
|
# add the new user to the database |
|
|
db.session.add(new_user) |
|
|
db.session.add(new_user) |
|
|
@ -59,4 +58,4 @@ def signup_post(): |
|
|
@login_required |
|
|
@login_required |
|
|
def logout(): |
|
|
def logout(): |
|
|
logout_user() |
|
|
logout_user() |
|
|
return redirect(url_for('auth.index')) |
|
|
|
|
|
|
|
|
return redirect(url_for('paginas.index')) |