def login(): if request.method == 'GET': return render_template('auth/login.html', title='Log In', form=LoginForm()) form = LoginForm() username = form.username.data password = form.password.data if form.validate_on_submit(): user = mongo.db.users.find_one({'_id': username}) if user and User.verify_password(user['password'], password): user_obj = User(user['_id']) login_user(user_obj) return redirect(request.args.get("next") or url_for("main.home")) flash("Wrong username or password.", category='error') return render_template('auth/login.html', title='Log In', form=form)