def users():
if request.method == 'GET':
if request.args:
return User.scan(username=request.args['username'])
return User.scan()
if request.method == 'POST':
return User.new(request.json['username'], request.json['password'])
def signup():
success, error = False, ''
scan = User.scan(username=request.json['username'])
if scan['Count'] == 0:
User.new(request.json['username'], request.json['password'])
else:
error = 'Username taken'
return {'success': success, 'error': error}
def login():
success, error = False, ''
username = request.json.get('username')
password = request.json.get('password')
if not username or not password:
error = 'Missing required parameters'
scan = User.scan(username=request.json['username'])
if scan['Count'] == 0:
error = 'Username not found'
else:
user = scan['Items'][0]
if user['password']['S'] == request.json['password']:
success = True
else:
error = 'Incorrect password'
return {'success': success, 'error': error}
