nathanwoodburn/hnshosting-wp
nathanwoodburn/hnshosting-wp
1
0
Fork 0
Code Issues Pull Requests Actions 28 Packages Projects Releases Wiki Activity

main: Add failed login page
All checks were successful
Build Docker / Build Bot (push) Successful in 22s
Details
Build Docker / Build Master (push) Successful in 28s
Details

Browse Source
This commit is contained in:
Nathan Woodburn 2023-08-25 16:47:22 +10:00
parent 843d2d12a0
commit 9853214d83
Signed by: nathanwoodburn
GPG Key ID: 203B000478AD0EF1
1 changed files with 19 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
master/main.py
View File

@ -462,11 +462,12 @@ def admin():
@app.route('/login', methods=['POST']) @app.route('/login', methods=['POST'])
def login(): def login():
if request.method == 'POST':
# Handle login # Handle login
print('Login attempt', flush=True) print('Login attempt', flush=True)
password = request.form['password'] password = request.form['password']
print('Password: ' + password, flush=True)
if os.getenv('ADMIN_KEY') == password: if os.getenv('ADMIN_KEY') == password:
print('Login success', flush=True)
# Generate login key # Generate login key
login_key = os.urandom(32).hex() login_key = os.urandom(32).hex()
logins.append(login_key) logins.append(login_key)
@ -474,6 +475,12 @@ def login():
resp = make_response(redirect('/admin')) resp = make_response(redirect('/admin'))
resp.set_cookie('login_key', login_key) resp.set_cookie('login_key', login_key)
return resp return resp
print('Login failed', flush=True)
return redirect('/failed-login')
@app.route('/failed-login')
def failed_login():
return "<h1>Failed login</h1><br><form action='/login' method='POST'><input type='password' name='Master API'><input type='submit' value='Login'></form>"