def login():
if request.method == 'GET':
return render_template('auth/login.html', title='Log In', form=LoginForm())
form = LoginForm()
username = form.username.data
password = form.password.data
if form.validate_on_submit():
user = mongo.db.users.find_one({'_id': username})
if user and User.verify_password(user['password'], password):
user_obj = User(user['_id'])
login_user(user_obj)
return redirect(request.args.get("next") or url_for("main.home"))
flash("Wrong username or password.", category='error')
return render_template('auth/login.html', title='Log In', form=form)
