auth.py 文件源码

def post(self):
        form = await self.request.post()
        identity = config.admin['identity']
        # account = await self.redis.get('User')
        response = web.HTTPFound('/manage')

        if config.admin['u2f'] and '_method' not in form:
            users = await self.redis.get('Auth.U2F') or {}
            users[identity], ok = await verify(users[identity], dict(await self.request.post()))
            if ok:
                await self.redis.set('Auth.U2F', users, many=False)
                await remember(self.request, response, identity)
                return response
        elif form['_method'] == 'common':
            method = check_method(form.get('email').lower())
            # TODO:????????
            if await check_credentials(self.redis, identity, form.get('password')):
                await remember(self.request, response, identity)
                return response
        return web.HTTPFound('/auth/login')