user.py 文件源码

def post(self):
    parser = reqparse.RequestParser()
    parser.add_argument('username', type=str, required=True)
    parser.add_argument('password', type=str, required=True)
    reqdata = parser.parse_args(strict=True)

    user = User.query.filter_by(login = reqdata['username']).first()
    if not user:
      abort(401, message = 'Wrong credentials')

    if not Security.check_password(user.password, reqdata['password']):
      abort(401, message = 'Wrong credentials')
    user.scopes = Scope.query.all()

    enc_jwt = jwt.encode({'user' : UserSchema().dump(user).data}, Security.get_jwt_skey(), algorithm='HS256')

    return { 
      'response' : { 
        'token' : enc_jwt
      }
    }