async def authenticate(*, email, sha1_pw):
check_email_and_password(email, sha1_pw)
users = await User.findAll('email = ?', [email])
if len(users) == 0:
raise APIValueError('email', 'Email not exist.')
user = users[0]
# check password
if not user.verify_password(sha1_pw):
raise APIValueError('password', 'Invalid password')
# authenticate ok, signin
return user.signin(web.json_response({'signin user': user.name}))
async def register(*, name, email, sha1_pw, oid=None, image=None):
check_string(name=name)
check_email_and_password(email, sha1_pw)
users = await User.findAll('email = ?', [email])
if users:
raise APIValueError('email', 'Email is already in used.')
user = User(name=name.strip(),
email=email,
password=sha1_pw,
image=image or '/static/img/user.png')
await user.save()
if oid:
o = Oauth(id=oid, user_id=user.id)
await o.save()
# register ok, signin
return user.signin(web.json_response({'signin user': user.name}))