mirror of
https://github.com/simple-login/app.git
synced 2024-11-16 17:08:30 +01:00
78 lines
2.6 KiB
Python
78 lines
2.6 KiB
Python
from flask import request, flash, render_template, redirect, url_for
|
|
from flask_login import current_user
|
|
from flask_wtf import FlaskForm
|
|
from wtforms import StringField, validators
|
|
|
|
from app import email_utils
|
|
from app.auth.base import auth_bp
|
|
from app.config import URL, EMAIL_DOMAIN
|
|
from app.email_utils import notify_admin
|
|
from app.extensions import db
|
|
from app.log import LOG
|
|
from app.models import User, ActivationCode
|
|
from app.utils import random_string, encode_url
|
|
|
|
|
|
class RegisterForm(FlaskForm):
|
|
email = StringField("Email", validators=[validators.DataRequired()])
|
|
password = StringField(
|
|
"Password", validators=[validators.DataRequired(), validators.Length(min=8)]
|
|
)
|
|
name = StringField("Name", validators=[validators.DataRequired()])
|
|
|
|
|
|
@auth_bp.route("/register", methods=["GET", "POST"])
|
|
def register():
|
|
if current_user.is_authenticated:
|
|
LOG.d("user is already authenticated, redirect to dashboard")
|
|
flash("You are already logged in", "warning")
|
|
return redirect(url_for("dashboard.index"))
|
|
|
|
form = RegisterForm(request.form)
|
|
next_url = request.args.get("next")
|
|
|
|
if form.validate_on_submit():
|
|
email = form.email.data
|
|
|
|
if email.endswith(EMAIL_DOMAIN):
|
|
flash(
|
|
"You cannot use alias as your personal inbox. Nice try though 😉",
|
|
"error",
|
|
)
|
|
|
|
user = User.filter_by(email=email).first()
|
|
|
|
if user:
|
|
flash(f"Email {form.email.data} already exists", "warning")
|
|
else:
|
|
LOG.debug("create user %s", form.email.data)
|
|
user = User.create(
|
|
email=form.email.data, name=form.name.data, password=form.password.data
|
|
)
|
|
db.session.commit()
|
|
|
|
send_activation_email(user, next_url)
|
|
notify_admin(
|
|
f"new user {user.name} {user.email} signs up via email/password",
|
|
html_content=f"""
|
|
name: {user.name} <br>
|
|
email: {user.email} <br>""",
|
|
)
|
|
|
|
return render_template("auth/register_waiting_activation.html")
|
|
|
|
return render_template("auth/register.html", form=form, next_url=next_url)
|
|
|
|
|
|
def send_activation_email(user, next_url):
|
|
# the activation code is valid for 1h
|
|
activation = ActivationCode.create(user_id=user.id, code=random_string(30))
|
|
db.session.commit()
|
|
|
|
# Send user activation email
|
|
activation_link = f"{URL}/auth/activate?code={activation.code}"
|
|
if next_url:
|
|
LOG.d("redirect user to %s after activation", next_url)
|
|
activation_link = activation_link + "&next=" + encode_url(next_url)
|
|
|
|
email_utils.send_activation_email(user.email, user.name, activation_link)
|