def login():
"""
Logs in the API client using
[HTTP Basic Auth](https://en.wikipedia.org/wiki/Basic_access_authentication).
Pass in the username and password of your account.
"""
db = get_db()
user = db.search(Query().username == request.authorization["username"])
if (user and check_password_hash(user[0]["hashed_password"],
request.authorization["password"])):
# user is verified so we can log him in from the db
user = User.from_db(user[0])
login_user(user, remember=True)
return Response(status=200)
return Response(status=401)
def login():
form = forms.UserForm()
if form.validate_on_submit():
db = get_db()
user = db.search((Query().username == form.username.data) & (Query().type == "user"))
if user and check_password_hash(user[0]["hashed_password"], form.password.data):
user = User.from_db(user[0])
login_user(user, remember=True)
flash("Login successful!", "success")
next_url = request.args.get("next")
return redirect(next_url or "/")
flash("Invalid credentials", "error")
return redirect("/login")
return render_template("users/login.html", form=form, title="Login")
def load_user(user_id):
db = helpers.get_db()
res = db.get(doc_id=int(user_id))
if res and res["type"] == "user":
return User.from_db(res)
return None