5c16092b1c
Added `featuredCategories` section, Added personalised variations of HomePage contents; - Removal of redundant/unused files from backend; - Update to README: Updated to current method for deploying; - Known bug: StreamsContext is being called before AuthContext, leading to unpersonalised streams & categories each time, even when logged in;
161 lines
4.2 KiB
Python
161 lines
4.2 KiB
Python
from flask import Blueprint, session, request, jsonify
|
|
from werkzeug.security import generate_password_hash, check_password_hash
|
|
from flask_cors import cross_origin
|
|
from database.database import Database
|
|
from blueprints.utils import login_required
|
|
|
|
auth_bp = Blueprint("auth", __name__)
|
|
|
|
|
|
@auth_bp.route("/signup", methods=["POST"])
|
|
@cross_origin(supports_credentials=True)
|
|
def signup():
|
|
if not request.is_json:
|
|
return jsonify({"message": "Expected JSON data"}), 400
|
|
|
|
data = request.get_json()
|
|
|
|
# Extract data from request
|
|
username = data.get('username')
|
|
email = data.get('email')
|
|
password = data.get('password')
|
|
|
|
# Basic server-side validation
|
|
if not all([username, email, password]):
|
|
return jsonify({
|
|
"account_created": False,
|
|
"message": "Missing required fields"
|
|
}), 400
|
|
|
|
db = Database()
|
|
cursor = db.create_connection()
|
|
|
|
try:
|
|
# Check for duplicate email/username
|
|
dup_email = cursor.execute(
|
|
"SELECT * FROM users WHERE email = ?",
|
|
(email,)
|
|
).fetchone()
|
|
|
|
dup_username = cursor.execute(
|
|
"SELECT * FROM users WHERE username = ?",
|
|
(username,)
|
|
).fetchone()
|
|
|
|
if dup_email is not None:
|
|
return jsonify({
|
|
"account_created": False,
|
|
"errors": {"email": "Email already taken"}
|
|
}), 400
|
|
|
|
if dup_username is not None:
|
|
return jsonify({
|
|
"account_created": False,
|
|
"errors": {"username": "Username already taken"}
|
|
}), 400
|
|
|
|
# Create new user
|
|
cursor.execute(
|
|
"""INSERT INTO users
|
|
(username, password, email, num_followers, isPartenered, bio)
|
|
VALUES (?, ?, ?, ?, ?, ?)""",
|
|
(
|
|
username,
|
|
generate_password_hash(password),
|
|
email,
|
|
0,
|
|
0,
|
|
"This user does not have a Bio."
|
|
)
|
|
)
|
|
db.commit_data()
|
|
|
|
# Create session for new user
|
|
session.clear()
|
|
session["username"] = username
|
|
|
|
return jsonify({
|
|
"account_created": True,
|
|
"message": "Account created successfully"
|
|
}), 201
|
|
|
|
except Exception as e:
|
|
print(f"Error during signup: {e}") # Log the error
|
|
return jsonify({
|
|
"account_created": False,
|
|
"message": "Server error occurred: " + str(e)
|
|
}), 500
|
|
|
|
finally:
|
|
db.close_connection()
|
|
|
|
|
|
@auth_bp.route("/login", methods=["POST"])
|
|
@cross_origin(supports_credentials=True)
|
|
def login():
|
|
if not request.is_json:
|
|
return jsonify({"message": "Expected JSON data"}), 400
|
|
|
|
data = request.get_json()
|
|
|
|
# Extract data from request
|
|
username = data.get('username')
|
|
password = data.get('password')
|
|
|
|
# Basic server-side validation
|
|
if not all([username, password]):
|
|
return jsonify({
|
|
"logged_in": False,
|
|
"message": "Missing required fields"
|
|
}), 400
|
|
|
|
db = Database()
|
|
cursor = db.create_connection()
|
|
|
|
try:
|
|
# Check if user exists
|
|
user = cursor.execute(
|
|
"SELECT * FROM users WHERE username = ?",
|
|
(username,)
|
|
).fetchone()
|
|
|
|
if not user:
|
|
return jsonify({
|
|
"logged_in": False,
|
|
"errors": {"general": "Invalid username or password"}
|
|
}), 401
|
|
|
|
# Verify password
|
|
if not check_password_hash(user["password"], password):
|
|
return jsonify({
|
|
"logged_in": False,
|
|
"errors": {"general": "Invalid username or password"}
|
|
}), 401
|
|
|
|
# Set up session
|
|
session.clear()
|
|
session["username"] = username
|
|
|
|
return jsonify({
|
|
"logged_in": True,
|
|
"message": "Login successful",
|
|
"username": username
|
|
}), 200
|
|
|
|
except Exception as e:
|
|
print(f"Error during login: {e}") # Log the error
|
|
return jsonify({
|
|
"logged_in": False,
|
|
"message": "Server error occurred"
|
|
}), 500
|
|
|
|
finally:
|
|
db.close_connection()
|
|
|
|
|
|
@auth_bp.route("/logout")
|
|
@login_required
|
|
def logout():
|
|
session.clear()
|
|
return {"logged_in": False}
|