125 lines
5.0 KiB
Python
125 lines
5.0 KiB
Python
import logging
|
|
from datetime import datetime
|
|
from flask import Blueprint, render_template, redirect, url_for, flash, request
|
|
from flask_login import login_user, logout_user, login_required, current_user
|
|
from app import db
|
|
from app.models import User, UserRole
|
|
from app.services.log_service import log_action
|
|
|
|
auth_bp = Blueprint('auth', __name__, url_prefix='/auth')
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
@auth_bp.route('/login', methods=['GET', 'POST'])
|
|
def login():
|
|
if current_user.is_authenticated:
|
|
return redirect(url_for('tickets.dashboard'))
|
|
|
|
if request.method == 'POST':
|
|
email = request.form.get('email', '').strip().lower()
|
|
password = request.form.get('password', '')
|
|
remember = bool(request.form.get('remember'))
|
|
|
|
user = User.query.filter_by(email=email).first()
|
|
if user and user.check_password(password) and user.is_active:
|
|
login_user(user, remember=remember)
|
|
user.last_login = datetime.utcnow()
|
|
db.session.commit()
|
|
log_action(user.id, 'user_login', 'user', user.id, f'email={email}')
|
|
logger.info(f'[AUTH LOGIN] user_id={user.id} email={email}')
|
|
next_page = request.args.get('next')
|
|
return redirect(next_page or url_for('tickets.dashboard'))
|
|
else:
|
|
logger.warning(f'[AUTH FAILED] email={email} ip={request.remote_addr}')
|
|
flash('Invalid credentials or account disabled.', 'danger')
|
|
|
|
return render_template('auth/login.html')
|
|
|
|
|
|
@auth_bp.route('/register', methods=['GET', 'POST'])
|
|
def register():
|
|
if current_user.is_authenticated:
|
|
return redirect(url_for('tickets.dashboard'))
|
|
|
|
if request.method == 'POST':
|
|
email = request.form.get('email', '').strip().lower()
|
|
username = request.form.get('username', '').strip()
|
|
full_name = request.form.get('full_name', '').strip()
|
|
department = request.form.get('department', '').strip()
|
|
phone = request.form.get('phone', '').strip()
|
|
password = request.form.get('password', '')
|
|
confirm = request.form.get('confirm_password', '')
|
|
|
|
if User.query.filter_by(email=email).first():
|
|
flash('Email already registered.', 'danger')
|
|
elif User.query.filter_by(username=username).first():
|
|
flash('Username already taken.', 'danger')
|
|
elif password != confirm:
|
|
flash('Passwords do not match.', 'danger')
|
|
elif len(password) < 8:
|
|
flash('Password must be at least 8 characters.', 'danger')
|
|
else:
|
|
user = User(
|
|
email = email,
|
|
username = username,
|
|
full_name = full_name,
|
|
department = department,
|
|
phone = phone,
|
|
role = UserRole.EMPLOYEE,
|
|
)
|
|
user.set_password(password)
|
|
db.session.add(user)
|
|
db.session.commit()
|
|
log_action(user.id, 'user_register', 'user', user.id, f'email={email}')
|
|
logger.info(f'[AUTH REGISTER] user_id={user.id} email={email}')
|
|
flash('Account created! You may now log in.', 'success')
|
|
return redirect(url_for('auth.login'))
|
|
|
|
return render_template('auth/register.html')
|
|
|
|
|
|
@auth_bp.route('/logout')
|
|
@login_required
|
|
def logout():
|
|
log_action(current_user.id, 'user_logout', 'user', current_user.id)
|
|
logger.info(f'[AUTH LOGOUT] user_id={current_user.id}')
|
|
logout_user()
|
|
flash('You have been logged out.', 'info')
|
|
return redirect(url_for('auth.login'))
|
|
|
|
|
|
@auth_bp.route('/profile', methods=['GET', 'POST'])
|
|
@login_required
|
|
def profile():
|
|
if request.method == 'POST':
|
|
full_name = request.form.get('full_name', '').strip()
|
|
department = request.form.get('department', '').strip()
|
|
phone = request.form.get('phone', '').strip()
|
|
email_notif= bool(request.form.get('email_notif'))
|
|
web_notif = bool(request.form.get('web_notif'))
|
|
new_pw = request.form.get('new_password', '')
|
|
confirm_pw = request.form.get('confirm_password', '')
|
|
|
|
current_user.full_name = full_name
|
|
current_user.department = department
|
|
current_user.phone = phone
|
|
current_user.email_notif= email_notif
|
|
current_user.web_notif = web_notif
|
|
|
|
if new_pw:
|
|
if new_pw != confirm_pw:
|
|
flash('Passwords do not match.', 'danger')
|
|
return render_template('auth/profile.html')
|
|
if len(new_pw) < 8:
|
|
flash('Password must be at least 8 characters.', 'danger')
|
|
return render_template('auth/profile.html')
|
|
current_user.set_password(new_pw)
|
|
logger.info(f'[AUTH PASSWORD CHANGE] user_id={current_user.id}')
|
|
|
|
db.session.commit()
|
|
log_action(current_user.id, 'user_profile_update', 'user', current_user.id)
|
|
logger.info(f'[AUTH PROFILE UPDATE] user_id={current_user.id}')
|
|
flash('Profile updated successfully.', 'success')
|
|
|
|
return render_template('auth/profile.html')
|