48 lines
1.5 KiB
Python
48 lines
1.5 KiB
Python
import hmac
|
|
|
|
from fastapi import FastAPI, Form, Request
|
|
from fastapi.responses import HTMLResponse, RedirectResponse
|
|
from fastapi.staticfiles import StaticFiles
|
|
|
|
from app import auth
|
|
from app.config import get_settings
|
|
from app.routers import (accounts, categories, gui, imports, planning,
|
|
scenarios, transactions)
|
|
from app.routers.gui import templates
|
|
|
|
app = FastAPI(title="Finanzberatungs-Tool")
|
|
|
|
app.mount("/static", StaticFiles(directory="app/static"), name="static")
|
|
|
|
app.include_router(gui.router)
|
|
app.include_router(accounts.router)
|
|
app.include_router(transactions.router)
|
|
app.include_router(categories.router)
|
|
app.include_router(imports.router)
|
|
app.include_router(planning.router)
|
|
app.include_router(scenarios.router)
|
|
|
|
|
|
@app.get("/login")
|
|
def login_form(request: Request):
|
|
return templates.TemplateResponse(request, "login.html", {})
|
|
|
|
|
|
@app.post("/login")
|
|
def login(username: str = Form(...), password: str = Form(...)):
|
|
s = get_settings()
|
|
if not (hmac.compare_digest(username, s.gui_user)
|
|
and auth.verify_password(password, s.gui_password_hash)):
|
|
return HTMLResponse("Login fehlgeschlagen", status_code=401)
|
|
resp = RedirectResponse("/", status_code=303)
|
|
resp.set_cookie(auth.COOKIE, auth.make_session_token(), httponly=True,
|
|
max_age=auth.MAX_AGE, samesite="lax")
|
|
return resp
|
|
|
|
|
|
@app.post("/logout")
|
|
def logout():
|
|
resp = RedirectResponse("/login", status_code=303)
|
|
resp.delete_cookie(auth.COOKIE)
|
|
return resp
|