aboutsummaryrefslogtreecommitdiffstats
path: root/jm2l/auth.py
blob: c3332d3ea9545759a7fa10081753b47a05328761 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
from pyramid.view import view_config
from pyramid.security import remember, forget
from pyramid.httpexceptions import HTTPFound
from .models import User, DBSession

@view_config(route_name='auth', match_param="action=login", renderer="jm2l:templates/login.mako")
def login(request):
    return {}

@view_config(route_name='bymail', renderer="string")    
def bymail(request):
    myhash = request.matchdict.get('hash', "")
    user = User.by_hash(myhash)
    if user:
        user.last_logged=datetime.datetime.now()
        DBSession.merge(user)
        headers = remember(request, user.uid)
        return HTTPFound(location=request.route_url('jm2l'),
                            headers=headers)
    else:
        headers = forget(request)
    return HTTPFound(location=request.route_url('auth', action='login'),
                     headers=headers)

@view_config(route_name='auth', match_param="action=in", renderer="string",
             request_method="POST")
@view_config(route_name='auth', match_param="action=out", renderer="string")
def sign_in_out(request):
    username = request.POST.get('username')
    if username:
        user = User.by_name(username)
        if user and user.verify_password(request.POST.get('password')):
            user.last_logged=datetime.datetime.now()
            DBSession.merge(user)
            headers = remember(request, user.uid)
            return HTTPFound(location=request.route_url('jm2l'),
                             headers=headers)
        else:
            headers = forget(request)
    else:
        headers = forget(request)
    return HTTPFound(location=request.route_url('home'),
                     headers=headers)