forked from mrlan/EnglishPal
176 lines
6.3 KiB
Python
176 lines
6.3 KiB
Python
from flask import *
|
||
from Login import check_username_availability, verify_user, add_user, get_expiry_date, change_password
|
||
import re
|
||
# 初始化蓝图
|
||
accountService = Blueprint("accountService", __name__)
|
||
|
||
def password_check(password):
|
||
"""
|
||
Verify the strength of 'password'
|
||
Returns a dict indicating the wrong criteria
|
||
A password is considered strong if:
|
||
8 characters length or more
|
||
1 digit or more
|
||
1 symbol or more
|
||
1 uppercase letter or more
|
||
1 lowercase letter or more
|
||
"""
|
||
|
||
# calculating the length
|
||
length_error = len(password) < 8
|
||
|
||
# searching for digits
|
||
digit_error = re.search(r"\d", password) is None
|
||
|
||
# searching for uppercase
|
||
uppercase_error = re.search(r"[A-Z]", password) is None
|
||
|
||
# searching for lowercase
|
||
lowercase_error = re.search(r"[a-z]", password) is None
|
||
|
||
# searching for symbols
|
||
symbol_error = re.search(r"\W", password) is None
|
||
|
||
# overall result
|
||
password_ok = not ( length_error or digit_error or uppercase_error or lowercase_error or symbol_error )
|
||
|
||
return {
|
||
'password_ok' : password_ok,
|
||
'length_error' : length_error,
|
||
'digit_error' : digit_error,
|
||
'uppercase_error' : uppercase_error,
|
||
'lowercase_error' : lowercase_error,
|
||
'symbol_error' : symbol_error,
|
||
}
|
||
|
||
### Sign-up, login, logout ###
|
||
@accountService.route("/signup", methods=['GET', 'POST'])
|
||
def signup():
|
||
'''
|
||
注册
|
||
:return: 根据注册是否成功返回不同界面
|
||
'''
|
||
if request.method == 'GET':
|
||
# GET方法直接返回注册页面
|
||
return render_template('signup.html')
|
||
elif request.method == 'POST':
|
||
# POST方法需判断是否注册成功，再根据结果返回不同的内容
|
||
username = escape(request.form['username'])
|
||
password = escape(request.form['password'])
|
||
passwordCheck = password_check(password=password)
|
||
is_password_ok = passwordCheck['password_ok']
|
||
length_error = 'At Least 8 Characters Required , ' if passwordCheck['length_error'] == True else ''
|
||
digit_error = 'At Least 1 Number Required , ' if passwordCheck['digit_error'] == True else ''
|
||
uppercase_error = 'At Least 1 Upper Case Letter Required , ' if passwordCheck['uppercase_error'] == True else ''
|
||
lowercase_error ='At Least 1 Lower Case Letter Required , 'if passwordCheck['lowercase_error'] == True else ''
|
||
symbol_error = 'At Least 1 Sysmbol Required' if passwordCheck['symbol_error'] == True else ''
|
||
password_errors = length_error + digit_error + uppercase_error + lowercase_error + symbol_error
|
||
available = check_username_availability(username)
|
||
print(password_errors)
|
||
if not available: # 用户名不可用
|
||
flash('用户名 %s 已经被注册。' % (username))
|
||
return render_template('signup.html')
|
||
elif not is_password_ok: # 密码过短
|
||
flash (password_errors)
|
||
return render_template('signup.html')
|
||
else: # 添加账户信息
|
||
add_user(username, password)
|
||
verified = verify_user(username, password)
|
||
if verified:
|
||
# 写入session
|
||
session['logged_in'] = True
|
||
session[username] = username
|
||
session['username'] = username
|
||
session['expiry_date'] = get_expiry_date(username)
|
||
session['articleID'] = None
|
||
return '<p>恭喜，你已成功注册， 你的用户名是 <a href="%s">%s</a>。</p>\
|
||
<p><a href="/%s">开始使用</a> <a href="/">返回首页</a><p/>' % (username, username, username)
|
||
else:
|
||
return '用户名密码验证失败。'
|
||
|
||
|
||
@accountService.route("/login", methods=['GET', 'POST'])
|
||
def login():
|
||
'''
|
||
登录
|
||
:return: 根据登录是否成功返回不同页面
|
||
'''
|
||
if request.method == 'GET':
|
||
# GET请求
|
||
if not session.get('logged_in'):
|
||
# 未登录，返回登录页面
|
||
return render_template('login.html')
|
||
else:
|
||
# 已登录，提示信息并显示登出按钮
|
||
return '你已登录 <a href="/%s">%s</a>。 登出点击<a href="/logout">这里</a>。' % (
|
||
session['username'], session['username'])
|
||
elif request.method == 'POST':
|
||
# POST方法用于判断登录是否成功
|
||
# check database and verify user
|
||
username = escape(request.form['username'])
|
||
password = escape(request.form['password'])
|
||
verified = verify_user(username, password)
|
||
if verified:
|
||
# 登录成功，写入session
|
||
session['logged_in'] = True
|
||
session[username] = username
|
||
session['username'] = username
|
||
user_expiry_date = get_expiry_date(username)
|
||
session['expiry_date'] = user_expiry_date
|
||
session['articleID'] = None
|
||
return redirect(url_for('user_bp.userpage', username=username))
|
||
else:
|
||
return '无法通过验证。'
|
||
|
||
|
||
@accountService.route("/logout", methods=['GET', 'POST'])
|
||
def logout():
|
||
'''
|
||
登出
|
||
:return: 重定位到主界面
|
||
'''
|
||
# 将session标记为登出状态
|
||
session['logged_in'] = False
|
||
return redirect(url_for('mainpage'))
|
||
|
||
|
||
@accountService.route("/reset", methods=['GET', 'POST'])
|
||
def reset():
|
||
'''
|
||
重设密码
|
||
:return: 返回适当的页面
|
||
'''
|
||
# 下列方法用于防止未登录状态下的修改密码
|
||
if not session.get('logged_in'):
|
||
return render_template('login.html')
|
||
username = session['username']
|
||
if username == '':
|
||
return redirect('/login')
|
||
if request.method == 'GET':
|
||
# GET请求返回修改密码页面
|
||
return render_template('reset.html', username=session['username'], state='wait')
|
||
else:
|
||
# POST请求用于提交修改后信息
|
||
old_password = escape(request.form['old-password'])
|
||
new_password = escape(request.form['new-password'])
|
||
flag = change_password(username, old_password, new_password) # flag表示是否修改成功
|
||
if flag:
|
||
session['logged_in'] = False
|
||
return \
|
||
'''
|
||
<script>
|
||
alert('密码修改成功，请重新登录。');
|
||
window.location.href="/login";
|
||
</script>
|
||
|
||
'''
|
||
|
||
else:
|
||
return \
|
||
'''
|
||
<script>
|
||
alert('密码修改失败');
|
||
window.location.href="/reset";
|
||
</script>
|
||
|
||
''' |