def do_login(self, username, password):
username = self.sanitize(username)
password = Sha256Hash(password, SALT_KEY, 2048).toBase64()
user = _subject()
session = user.getSession()
if not user.isAuthenticated():
token = UsernamePasswordToken(username, password)
token.setRememberMe(True) # By default, Shiro's session expire is 30 min.
try:
user.login(token)
except IncorrectCredentialsException, e:
return False
def GET(self): _subject().logout() raise web.seeother(web.ctx.homedomain)
def GET(self):
web.header('Content-Type', 'text/html; charset=UTF-8')
user = _subject()
return render.login(user)
