auth.py 文件源码

def login():
    if request.method == 'GET':
        return redirect(url_for('auth_view.authenticate'))
    login_form = LoginForm()
    if login_form.validate() and login_form.email.data:
        user = NodeDefender.db.user.get(login_form.email.data)
        if user is None:
            flash('Email or Password Wrong', 'error')
            return redirect(url_for('auth_view.login'))

        if not user.verify_password(login_form.password.data):
            flash('Email or Password Wrong', 'error')
            return redirect(url_for('auth_view.login'))

        if not user.enabled:
            flash('Account Locked', 'error')
            return redirect(url_for('auth_view.login'))

        if login_form.remember():
            login_user(user, remember = True)
        else:
            login_user(user)

    return redirect(url_for('index'))