nathanwoodburn/hnshosting-wp
nathanwoodburn/hnshosting-wp
1
0
Fork 0
Code Issues Pull Requests Actions 28 Packages Projects Releases Wiki Activity

main: Add failed login page
All checks were successful
Build Docker / Build Bot (push) Successful in 22s
Details
Build Docker / Build Master (push) Successful in 28s
Details

Browse Source
This commit is contained in:
Nathan Woodburn 2023-08-25 16:47:22 +10:00
parent 843d2d12a0
commit 9853214d83
Signed by: nathanwoodburn
GPG Key ID: 203B000478AD0EF1
1 changed files with 19 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
master/main.py
View File

@ -462,18 +462,25 @@ def admin():
@app.route('/login', methods=['POST']) @app.route('/login', methods=['POST'])
def login(): def login():
if request.method == 'POST': # Handle login
# Handle login print('Login attempt', flush=True)
print('Login attempt', flush=True) password = request.form['password']
password = request.form['password'] print('Password: ' + password, flush=True)
if os.getenv('ADMIN_KEY') == password: if os.getenv('ADMIN_KEY') == password:
# Generate login key print('Login success', flush=True)
login_key = os.urandom(32).hex() # Generate login key
logins.append(login_key) login_key = os.urandom(32).hex()
# Set cookie logins.append(login_key)
resp = make_response(redirect('/admin')) # Set cookie
resp.set_cookie('login_key', login_key) resp = make_response(redirect('/admin'))
return resp resp.set_cookie('login_key', login_key)
return resp
print('Login failed', flush=True)
return redirect('/failed-login')
@app.route('/failed-login')
def failed_login():
return "<h1>Failed login</h1><br><form action='/login' method='POST'><input type='password' name='Master API'><input type='submit' value='Login'></form>"