TonBERRY/microdot
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Example updates

Browse Source
This commit is contained in:
Miguel Grinberg
2024-03-27 00:28:36 +00:00
parent c7f9b3ff3b
commit 68b6cb9862
4 changed files with 33 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
examples/auth/README.md Normal file
View File

@@ -0,0 +1 @@
This directory contains examples that demonstrate basic and token authentication.

1
examples/login/README.md Normal file
View File

@@ -0,0 +1 @@
This directory contains examples that demonstrate user logins.

42
examples/auth/login.py → examples/login/login.py
View File

@@ -1,16 +1,27 @@
from hashlib import sha1
from microdot import Microdot, redirect
from microdot.session import Session
from microdot.auth import Login
from microdot.login import Login
def create_hash(password):
return sha1(password).hexdigest()
class User:
def __init__(self, id, username, password):
self.id = id
self.username = username
self.password_hash = self.create_hash(password)
def create_hash(self, password):
# note: to keep this example simple, passwords are hashed with the SHA1
# algorithm. In a real application, you should use a stronger
# algorithm, such as bcrypt.
return sha1(password.encode()).hexdigest()
def check_password(self, password):
return self.create_hash(password) == self.password_hash
USERS = {
'susan': create_hash(b'hello'),
'david': create_hash(b'bye'),
'user001': User('user001', 'susan', 'hello'),
'user002': User('user002', 'david', 'bye'),
}
app = Microdot()
@@ -20,12 +31,8 @@ auth = Login()
@auth.id_to_user
async def get_user(user_id):
return user_id
@auth.user_to_id
async def get_user_id(user):
return user
print('get_user', user_id)
return USERS.get(user_id)
@app.route('/login', methods=['GET', 'POST'])
@@ -60,9 +67,12 @@ async def login(request):
username = request.form['username']
password = request.form['password']
remember_me = bool(request.form.get('remember_me'))
if USERS.get(username) == create_hash(password.encode()):
return await auth.login_user(request, username, remember=remember_me)
else:
for user in USERS.values():
if user.username == username:
if user.check_password(password):
return await auth.login_user(request, user,
remember=remember_me)
return redirect('/login')
@@ -73,7 +83,7 @@ async def index(request):
<!doctype html>
<html>
<body>
<h1>Hello, {request.g.current_user}!</h1>
<h1>Hello, {request.g.current_user.username}!</h1>
<p>
<a href="/fresh">Click here</a> to access the fresh login page.
</p>
@@ -92,7 +102,7 @@ async def fresh(request):
<!doctype html>
<html>
<body>
<h1>Hello, {request.g.current_user}!</h1>
<h1>Hello, {request.g.current_user.username}!</h1>
<p>This page requires a fresh login session.</p>
<p><a href="/">Go back</a> to the main page.</p>
</body>

4
examples/sessions/login.py
View File

@@ -1,3 +1,7 @@
# This is a simple example that demonstrates how to use the user session, but
# is not intended as a complete login solution. See the login subdirectory for
# a more complete example.
from microdot import Microdot, Response, redirect
from microdot.session import Session, with_session