File size: 2,338 Bytes
b74eb81
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
import psycopg2
from ..config.db_connection import connect
from flask import (Blueprint, flash, redirect, render_template, request, session, url_for)
from ..models.user import Users
from werkzeug.security import check_password_hash, generate_password_hash

def register():

    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        school_year = request.form.get('school_year') or None
        db = connect()
        cursor = db.cursor()
        error = None

        if not username:
            error = 'Username is required.'
        elif not password:
            error = 'Password is required.'

        if error is None:
            try:
                hashed_pw = generate_password_hash(password)
                print(f"Username: {username}")
                print(f"Hashed password: {hashed_pw}")
                Users.insert_new_user(username, hashed_pw, school_year, cursor)
                db.commit()
            except psycopg2.IntegrityError:
                db.rollback()
                error = f"User {username} is already registered."
            except Exception as e:
                db.rollback()
                error = f"Error: {str(e)}"
            else:
                cursor.close()
                return redirect(url_for("auth.login"))

        flash(error)
        cursor.close()
        db.close()

    return render_template('auth/register.html')


def login():

    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        db = connect()
        cursor = db.cursor()
        error = None

        user = Users.check_existing_user(username, cursor)

        if user is None:
            error = 'Incorrect username.'
        elif not check_password_hash(user[1], password):
            error = 'Incorrect password.'

        if error is None:
            session.clear()
            session['user_id'] = user[0]
            print(user[0])
            cursor.close()
            return redirect(url_for('index'))

        flash(error)
        cursor.close()
        db.close()

    return render_template('auth/login.html')

def logout():
    """clearing the current session, including the stored user id."""
    session.clear()
    return redirect(url_for("index"))