mirror of
https://github.com/simple-login/app.git
synced 2024-11-16 08:58:30 +01:00
71 lines
2.5 KiB
Python
71 lines
2.5 KiB
Python
from flask import request, flash, render_template, redirect, url_for
|
|
from flask_login import current_user
|
|
from flask_wtf import FlaskForm
|
|
from wtforms import StringField, validators
|
|
|
|
from app import email_utils, config
|
|
from app.auth.base import auth_bp
|
|
from app.config import URL, DISABLE_REGISTRATION
|
|
from app.email_utils import can_be_used_as_personal_email
|
|
from app.extensions import db
|
|
from app.log import LOG
|
|
from app.models import User, ActivationCode
|
|
from app.utils import random_string, encode_url
|
|
|
|
|
|
class RegisterForm(FlaskForm):
|
|
email = StringField("Email", validators=[validators.DataRequired()])
|
|
password = StringField(
|
|
"Password", validators=[validators.DataRequired(), validators.Length(min=8)]
|
|
)
|
|
|
|
|
|
@auth_bp.route("/register", methods=["GET", "POST"])
|
|
def register():
|
|
if current_user.is_authenticated:
|
|
LOG.d("user is already authenticated, redirect to dashboard")
|
|
flash("You are already logged in", "warning")
|
|
return redirect(url_for("dashboard.index"))
|
|
|
|
if config.DISABLE_REGISTRATION:
|
|
flash("Registration is closed", "error")
|
|
return redirect(url_for("auth.login"))
|
|
|
|
form = RegisterForm(request.form)
|
|
next_url = request.args.get("next")
|
|
|
|
if form.validate_on_submit():
|
|
email = form.email.data.lower()
|
|
if not can_be_used_as_personal_email(email):
|
|
flash(
|
|
"You cannot use this email address as your personal inbox.", "error",
|
|
)
|
|
else:
|
|
user = User.get_by(email=email)
|
|
|
|
if user:
|
|
flash(f"Email {email} already used", "error")
|
|
else:
|
|
LOG.debug("create user %s", form.email.data)
|
|
user = User.create(email=email, name="", password=form.password.data,)
|
|
db.session.commit()
|
|
|
|
send_activation_email(user, next_url)
|
|
|
|
return render_template("auth/register_waiting_activation.html")
|
|
|
|
return render_template("auth/register.html", form=form, next_url=next_url)
|
|
|
|
|
|
def send_activation_email(user, next_url):
|
|
# the activation code is valid for 1h
|
|
activation = ActivationCode.create(user_id=user.id, code=random_string(30))
|
|
db.session.commit()
|
|
|
|
# Send user activation email
|
|
activation_link = f"{URL}/auth/activate?code={activation.code}"
|
|
if next_url:
|
|
LOG.d("redirect user to %s after activation", next_url)
|
|
activation_link = activation_link + "&next=" + encode_url(next_url)
|
|
|
|
email_utils.send_activation_email(user.email, user.name, activation_link)
|