Flask文件目录----- auth/blog 文件

import functools
from flask import (Blueprint, flash, g, redirect, render_template, url_for, request, session)
from werkzeug.security import check_password_hash, generate_password_hash

from flaskr.db import get_db

bp = Blueprint('auth', name, url_prefix='/auth')

注册视图

@bp.route('/register', methods=('GET', 'POST'))
def register():
if request.method == 'POST':
# 获取用户提交的表单信息
username = request.form.get('username')
password = request.form.get('password')
# 连接数据库
db = get_db()
# 定义错误信息
error = None
# 逻辑判断
if not username:
error = 'Username is required.'
elif not password:
error = 'Password is required.'
# 查询用户名是否已经存在
elif db.execute(
'SELECT id FROM user WHERE username = ?',(username, )
).fetchone() is not None:
error = 'User {} is already registered'.format(username)
# 用户提交表单信息经过验证后执行, 向数据库中插入数据, 对密码进行加密
if error is None:
db.execute(
'INSERT INTO user (username, password) VALUES (?, ?)',
(username, generate_password_hash(password))
)
return redirect(url_for('auth.login'))
# 将错误信息flash到下一个呈现的模板内, 模板中使用 get_flashed_messages 方法
flash(error)

return render_template('auth/register.html')

登录视图

@bp.route('/login', methods=('GET', 'POST'))
def login():
if request.method == 'POST':
# 取出用户提交的form表单数据
username = request.form.get('username')
password = request.form.get('password')
print(username, password)
# 连接数据库
db = get_db()
# 定义错误信息
error = None
# 在数据库中查询用户(execute方法防止SQL注入)
user = db.execute(
'SELECT * FROM user WHERE username = ?' ,(username, )
).fetchone()
print(user)
# 逻辑判断
if user is None:
error = 'Incorrect username.'
elif not check_password_hash(user['password'], password):
error = 'Incorrect password.'
if error is None:
session.clear()
session['user_id'] = user['id']
return redirect(url_for('index'))
# 将错误信息flash 到下一次呈现的模板中 (get_flashed_message 方法)
flash(error)

return render_template('auth/login.html')

在本次请求注册一个g.user对象方便以后调用, 'g': 上下文中存储数据的一个对象

@bp.before_app_request
def load_logged_in_user():
user_id = session.get('user_id')

if user_id is None:
    g.user = None
else:
    g.user = get_db().execute(
        'SELECT * FROM user WHERE id = ?', (user_id, )
    ).fetchone()

注销视图

@bp.route('/logout')
def logout():
session.clear()
return redirect(url_for('index'))

对是否登陆进行认证的装饰器

def login_required(view):
# 保留装饰器装饰的函数的原始名字
@functools.wraps(view)
def wrapped_view(**kwargs):
if g.user is None:
return redirect(url_for('auth.login'))