Update app.py

app.py

@@ -40,17 +40,17 @@ app = demo.app
 def cookie(req: Request) -> str:
     return req.cookies.get("vesta_session", "")
 
-@app.get("/")
-async def root(req: Request):
+@app.get("/login")
+async def login_get(req: Request):
     t = cookie(req)
     if check_token(t):
         return RedirectResponse(url="/px/")
-    return HTMLResponse(LOGIN.replace('action="/do-login"', 'action="/login"'))
+    return HTMLResponse(LOGIN)
 
 @app.post("/login")
 async def do_login(user: str = Form(...), passw: str = Form(...)):
     if user.lower() != "admin" or passw != ADMIN_TOKEN:
-        return RedirectResponse(url="/?error=1", status_code=303)
+        return RedirectResponse(url="/login?error=1", status_code=303)
     token = make_token()
     r = RedirectResponse(url="/px/", status_code=303)
     r.set_cookie("vesta_session", token, max_age=86400, path="/", httponly=True)
@@ -58,7 +58,7 @@ async def do_login(user: str = Form(...), passw: str = Form(...)):
 
 @app.get("/logout")
 async def logout():
-    r = RedirectResponse(url="/")
+    r = RedirectResponse(url="/login")
     r.delete_cookie("vesta_session", path="/")
     return r
 
@@ -66,7 +66,7 @@ async def logout():
 async def proxy(req: Request, rest: str = ""):
     t = cookie(req)
     if not check_token(t):
-        return RedirectResponse(url="/")
+        return RedirectResponse(url="/login")
     path = "/" + rest
     try:
         async with httpx.AsyncClient(timeout=30) as c: