def decorated(*args, **kwargs):
if not global_state.get_auth_settings()["active"]:
return f(*args, **kwargs)
if request.path in ["/login", "/logout"]:
return f(*args, **kwargs)
if request.path.startswith("/dtale/static"):
return f(*args, **kwargs)
if not session.get("logged_in") or not session.get("username"):
session["next"] = request.url
return redirect(url_for("login"))
return f(*args, **kwargs)
def load_auth_settings(config):
if config is None:
return
curr_auth_settings = global_state.get_auth_settings()
active = get_config_val(
config, curr_auth_settings, "active", section="auth", getter="getboolean"
)
username = get_config_val(config, curr_auth_settings, "username", section="auth")
password = get_config_val(config, curr_auth_settings, "password", section="auth")
global_state.set_auth_settings(
dict(
active=active,
username=username,
password=password,
)
)
def setup_auth(app):
if not global_state.get_auth_settings()["active"]:
return
@app.route("/login", methods=["GET", "POST"])
def login():
if request.method == "POST":
username, password = (request.form.get(p)
for p in ["username", "password"])
if not authenticate(username, password):
return render_template("dtale/login.html",
error="Invalid credentials!",
page="login")
session["logged_in"] = True
session["username"] = request.form["username"]
return redirect(session.get("next") or "/")
return render_template("dtale/login.html", page="login")
@app.route("/logout")
def logout():
session.clear()
return redirect(url_for("login"))
def authenticate(username, password):
auth_settings = global_state.get_auth_settings()
if username == auth_settings["username"] and password == auth_settings[
"password"]:
return True
return False