from flask import * from Login import check_username_availability, verify_user, add_user, get_expiry_date, change_password import re # 初始化蓝图 accountService = Blueprint("accountService", __name__) def password_check(password): """ Verify the strength of 'password' Returns a dict indicating the wrong criteria A password is considered strong if: 8 characters length or more 1 digit or more 1 symbol or more 1 uppercase letter or more 1 lowercase letter or more """ # calculating the length length_error = len(password) < 8 # searching for digits digit_error = re.search(r"\d", password) is None # searching for uppercase uppercase_error = re.search(r"[A-Z]", password) is None # searching for lowercase lowercase_error = re.search(r"[a-z]", password) is None # searching for symbols symbol_error = re.search(r"\W", password) is None # overall result password_ok = not ( length_error or digit_error or uppercase_error or lowercase_error or symbol_error ) return { 'password_ok' : password_ok, 'length_error' : length_error, 'digit_error' : digit_error, 'uppercase_error' : uppercase_error, 'lowercase_error' : lowercase_error, 'symbol_error' : symbol_error, } ### Sign-up, login, logout ### @accountService.route("/signup", methods=['GET', 'POST']) def signup(): ''' 注册 :return: 根据注册是否成功返回不同界面 ''' if request.method == 'GET': # GET方法直接返回注册页面 return render_template('signup.html') elif request.method == 'POST': # POST方法需判断是否注册成功,再根据结果返回不同的内容 username = escape(request.form['username']) password = escape(request.form['password']) passwordCheck = password_check(password=password) is_password_ok = passwordCheck['password_ok'] length_error = 'At Least 8 Characters Required , ' if passwordCheck['length_error'] == True else '' digit_error = 'At Least 1 Number Required , ' if passwordCheck['digit_error'] == True else '' uppercase_error = 'At Least 1 Upper Case Letter Required , ' if passwordCheck['uppercase_error'] == True else '' lowercase_error ='At Least 1 Lower Case Letter Required , 'if passwordCheck['lowercase_error'] == True else '' symbol_error = 'At Least 1 Sysmbol Required' if passwordCheck['symbol_error'] == True else '' password_errors = length_error + digit_error + uppercase_error + lowercase_error + symbol_error available = check_username_availability(username) print(password_errors) if not available: # 用户名不可用 flash('用户名 %s 已经被注册。' % (username)) return render_template('signup.html') elif not is_password_ok: # 密码过短 flash (password_errors) return render_template('signup.html') else: # 添加账户信息 add_user(username, password) verified = verify_user(username, password) if verified: # 写入session session['logged_in'] = True session[username] = username session['username'] = username session['expiry_date'] = get_expiry_date(username) session['articleID'] = None return '
恭喜,你已成功注册, 你的用户名是 %s。
\ ' % (username, username, username) else: return '用户名密码验证失败。' @accountService.route("/login", methods=['GET', 'POST']) def login(): ''' 登录 :return: 根据登录是否成功返回不同页面 ''' if request.method == 'GET': # GET请求 if not session.get('logged_in'): # 未登录,返回登录页面 return render_template('login.html') else: # 已登录,提示信息并显示登出按钮 return '你已登录 %s。 登出点击这里。' % ( session['username'], session['username']) elif request.method == 'POST': # POST方法用于判断登录是否成功 # check database and verify user username = escape(request.form['username']) password = escape(request.form['password']) verified = verify_user(username, password) if verified: # 登录成功,写入session session['logged_in'] = True session[username] = username session['username'] = username user_expiry_date = get_expiry_date(username) session['expiry_date'] = user_expiry_date session['articleID'] = None return redirect(url_for('user_bp.userpage', username=username)) else: return '无法通过验证。' @accountService.route("/logout", methods=['GET', 'POST']) def logout(): ''' 登出 :return: 重定位到主界面 ''' # 将session标记为登出状态 session['logged_in'] = False return redirect(url_for('mainpage')) @accountService.route("/reset", methods=['GET', 'POST']) def reset(): ''' 重设密码 :return: 返回适当的页面 ''' # 下列方法用于防止未登录状态下的修改密码 if not session.get('logged_in'): return render_template('login.html') username = session['username'] if username == '': return redirect('/login') if request.method == 'GET': # GET请求返回修改密码页面 return render_template('reset.html', username=session['username'], state='wait') else: # POST请求用于提交修改后信息 old_password = escape(request.form['old-password']) new_password = escape(request.form['new-password']) flag = change_password(username, old_password, new_password) # flag表示是否修改成功 if flag: session['logged_in'] = False return \ ''' ''' else: return \ ''' '''