diff --git a/src/__init__.py b/src/__init__.py
index 6e69bf3..e9dc5a4 100644
--- a/src/__init__.py
+++ b/src/__init__.py
@@ -1,6 +1,6 @@
import os
-from flask import Flask
+from flask import Flask, render_template
def create_app(test_config=None):
@@ -21,9 +21,11 @@ def create_app(test_config=None):
except OSError:
pass
- @app.route('/hello')
+ @app.route('/')
def hello():
- return 'Hello, World!'
+ return render_template("index.html")
from . import db
db.init_app(app)
+ from . import auth
+ app.register_blueprint(auth.bp)
return app
\ No newline at end of file
diff --git a/src/auth.py b/src/auth.py
new file mode 100644
index 0000000..0e816a9
--- /dev/null
+++ b/src/auth.py
@@ -0,0 +1,82 @@
+import functools
+from flask import Blueprint, flash, g, redirect, render_template, request, session, url_for
+from werkzeug.security import check_password_hash
+from src.db import get_db
+
+bp = Blueprint('auth', __name__, url_prefix='/auth')
+
+@bp.route('/loginuser', methods=('GET', 'POST'))
+def loginuser():
+ if request.method == 'POST':
+ username = request.form['username']
+ password = request.form['password']
+ db = get_db()
+ error = None
+ user = db.execute(
+ 'SELECT * FROM user WHERE user_name = ?', (username,)
+ ).fetchone()
+
+ if user is None:
+ error = '用户名不存在'
+ elif not check_password_hash(user['user_passwd'], password):
+ error = '密码错误'
+
+ if error is None:
+ session.clear()
+ session['user_id'] = user['user_id']
+ return redirect(url_for('index'))
+
+ flash(error)
+
+ return render_template('auth/loginuser.html')
+
+@bp.route('/loginadmin', methods=('GET', 'POST'))
+def loginadmin():
+ if request.method == 'POST':
+ password = request.form['password']
+ db = get_db()
+ error = None
+ admin = db.execute('SELECT * FROM admin limit 1').fetchone()
+
+ if admin is None:
+ error = '用户名不存在'
+ elif not check_password_hash(admin['passwd'], password):
+ error = '密码错误'
+
+ if error is None:
+ session.clear()
+ session['user_id'] = 0
+ return redirect(url_for('admin'))
+ flash(error)
+ return render_template('auth/loginadmin.html')
+
+@bp.route('/login', methods=('GET', 'POST'))
+def login():
+ return render_template("auth/loginbase.html")
+
+@bp.before_app_request
+def load_logged_in_user():
+ user_id = session.get('user_id')
+
+ if user_id is None:
+ g.user = None
+ else:
+ g.user = get_db().execute(
+ 'SELECT * FROM user WHERE user_id = ?', (user_id,)
+ ).fetchone()
+
+@bp.route('/logout')
+def logout():
+ session.clear()
+ return redirect(url_for('index'))
+
+
+def login_required(view):
+ @functools.wraps(view)
+ def wrapped_view(**kwargs):
+ if g.user is None:
+ return redirect(url_for('auth.login'))
+
+ return view(**kwargs)
+
+ return wrapped_view
\ No newline at end of file
diff --git a/src/db.py b/src/db.py
index 684e41e..6955350 100644
--- a/src/db.py
+++ b/src/db.py
@@ -1,6 +1,7 @@
import sqlite3
import click
from flask import current_app, g
+from werkzeug.security import generate_password_hash
def get_db():
if 'db' not in g:
@@ -28,6 +29,9 @@ def init_db():
click.echo("Initializing database triggers...")
with current_app.open_resource('sql/trigger_sqlite.sql') as f:
db.executescript(f.read().decode('utf8'))
+ click.echo("Initializing admin passwd...")
+ db.execute("insert into admin (passwd) values (?)", (generate_password_hash("lolicon"),))
+ db.commit()
click.echo("Initialized database.")
def init_app(app):
diff --git a/src/templates/auth/loginadmin.html b/src/templates/auth/loginadmin.html
new file mode 100644
index 0000000..85fbb23
--- /dev/null
+++ b/src/templates/auth/loginadmin.html
@@ -0,0 +1,14 @@
+{% extends 'base.html' %}
+
+{% block header %}
+ {% block title %}Log In{% endblock %}
+{% endblock %}
+
+{% block content %}
+
+{% endblock %}
\ No newline at end of file
diff --git a/src/templates/auth/loginbase.html b/src/templates/auth/loginbase.html
new file mode 100644
index 0000000..2cdab94
--- /dev/null
+++ b/src/templates/auth/loginbase.html
@@ -0,0 +1,12 @@
+{% extends 'base.html' %}
+
+{% block header %}
+ {% block title %}在访问前，需要登陆{% endblock %}
+{% endblock %}
+
+{% block content %}
+
+{% endblock %}
\ No newline at end of file
diff --git a/src/templates/auth/loginuser.html b/src/templates/auth/loginuser.html
new file mode 100644
index 0000000..b7dd5dc
--- /dev/null
+++ b/src/templates/auth/loginuser.html
@@ -0,0 +1,15 @@
+{% extends 'base.html' %}
+
+{% block header %}
+ {% block title %}Log In{% endblock %}
+{% endblock %}
+
+{% block content %}
+
+{% endblock %}
\ No newline at end of file
diff --git a/src/templates/base.html b/src/templates/base.html
new file mode 100644
index 0000000..8ef78ab
--- /dev/null
+++ b/src/templates/base.html
@@ -0,0 +1,24 @@
+
+{% block title %}{% endblock %} - DBProject
+
+
+
+
+ {% block header %}{% endblock %}
+
+ {% for message in get_flashed_messages() %}
+ {{ message }}
+ {% endfor %}
+ {% block content %}{% endblock %}
+
\ No newline at end of file
diff --git a/src/templates/index.html b/src/templates/index.html
index b39e329..b18a12d 100644
--- a/src/templates/index.html
+++ b/src/templates/index.html
@@ -8,8 +8,8 @@
简单的电子书归档系统