from flask import Blueprint, render_template, redirect, url_for, flash, request from flask_login import login_user, logout_user, login_required, current_user from flask_wtf import FlaskForm from wtforms import StringField, PasswordField, BooleanField, SubmitField from wtforms.validators import DataRequired, Length from app.models.user import User from app.extensions import db from datetime import datetime auth_bp = Blueprint('auth', __name__, url_prefix='/auth') class LoginForm(FlaskForm): username = StringField('Username', validators=[DataRequired(), Length(1, 64)]) password = PasswordField('Password', validators=[DataRequired()]) remember_me = BooleanField('Remember me') submit = SubmitField('Sign In') @auth_bp.route('/login', methods=['GET', 'POST']) def login(): if current_user.is_authenticated: return redirect(url_for('dashboard.index')) form = LoginForm() if form.validate_on_submit(): user = User.query.filter_by(username=form.username.data.strip()).first() if user and user.check_password(form.password.data): login_user(user, remember=form.remember_me.data) user.last_login = datetime.utcnow() db.session.commit() next_page = request.args.get('next') return redirect(next_page or url_for('dashboard.index')) flash('Invalid username or password.', 'danger') return render_template('auth/login.html', form=form) @auth_bp.route('/logout') @login_required def logout(): logout_user() flash('You have been logged out.', 'info') return redirect(url_for('auth.login'))