| from functools import wraps |
| from flask import redirect, url_for, flash, jsonify |
| from flask_login import current_user |
|
|
| def admin_required(f): |
| """Decorator to restrict access to admin users only.""" |
| @wraps(f) |
| def decorated_function(*args, **kwargs): |
| if not current_user.is_authenticated or current_user.role != "admin": |
| flash("You do not have permission to access this page.", "error") |
| return redirect(url_for("dashboard.index")) |
| return f(*args, **kwargs) |
| return decorated_function |
|
|
| def login_required_json(f): |
| """Decorator to require login for JSON API endpoints.""" |
| @wraps(f) |
| def decorated_function(*args, **kwargs): |
| if not current_user.is_authenticated: |
| return jsonify({"error": "Login required"}), 401 |
| return f(*args, **kwargs) |
| return decorated_function |
|
|
| def cache_response(timeout=60): |
| def decorator(f): |
| @wraps(f) |
| def decorated_function(*args, **kwargs): |
| from flask import request |
| from .. import cache |
| |
| cache_key = f"{request.path}:{request.query_string}" |
| cached_response = cache.get(cache_key) |
| if cached_response: |
| return cached_response |
| response = f(*args, **kwargs) |
| cache.set(cache_key, response, timeout=timeout) |
| return response |
| return decorated_function |
| return decorator |
