revi-archive/xygt
1
0
Fork 0
mirror of https://github.com/jackeilles/xygt.git synced 2024-11-08 16:02:37 +01:00
Code Issues Projects Releases Packages Wiki Activity

fixes to authentication system

Browse source
This commit is contained in:
jackeilles 2024-02-25 23:43:42 +00:00
parent 587fd56256
commit c9d8cc16f8
No known key found for this signature in database
GPG key ID: 7822D1CB748879A9
1 changed files with 26 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
app/routes.py
View file

@ -43,6 +43,7 @@ def load_user(userid):
user = User.get(userid)
return user
### THIS ENDPOINT CAN ONLY BE USED FOR CLI, ENDPOINT FOR FORM IS BELOW
@csrf.exempt
@app.route('/', methods=["GET", "POST"])
def index():
@ -63,6 +64,9 @@ def index():
# If not then return a 0
ip = 0
# Now check the userid and idpass against the db
if Config.users.find({"userid": request.form["userid"]}) and Config.users.find({"idpass": request.form["idpass"]}):
# Init variables before they're passed
userid = request.form.get("userid") if request.form.get("userid") else None
filename = request.form.get("filename") if request.form.get("filename") else None
@ -190,7 +194,7 @@ def delete(id):
Config.files.delete_one({"id": id})
return "URL deleted."
elif data["userid"] == request.form.get("userid") and bcrypt.check_password_hash(Config.user.find_one({"userid": data["userid"]})["idpass"], request.form.get("idpass")):
elif data["userid"] == request.form.get("userid") and bcrypt.check_password_hash(Config.users.find_one({"userid": data["userid"]})["idpass"], request.form.get("idpass")):
Config.files.delete_one({"id": id})
return "URL deleted."