admin_api.py 文件源码

def auth(fn):
    def _decorator(*ag, **kw):
        if (request.get_cookie('session-key') is not None) and (kw['db'].query(Secret).filter_by(id=1).first().hash == request.get_cookie('session-key')):
            return fn(*ag, **kw)
        #error
        else:
            return json.dumps({'data': 'not auth.'})
    _decorator.__name__ = fn.__name__
    return _decorator