4a4d693d72
- Fixed the `AttributeError: 'User' object has no attribute '_password'` by properly mapping the `_password` attribute to the `password` column in the database. - Updated the `User` model to ensure passwords are only hashed once during creation and not re-hashed when retrieved or updated. - Improved the `check_password` method to correctly compare hashed passwords. - Verified the signup and login flow to ensure consistent behavior
36 lines
No EOL
1.2 KiB
Python
36 lines
No EOL
1.2 KiB
Python
# routes/auth.py
|
|
from flask import Blueprint, request, jsonify, session
|
|
from services.UserService.user import UserService
|
|
|
|
auth_bp = Blueprint('auth', __name__)
|
|
user_service = UserService()
|
|
|
|
@auth_bp.route('/signup', methods=['POST'])
|
|
def signup():
|
|
data = request.get_json()
|
|
try:
|
|
new_user = user_service.create_user(data['username'], data['password'])
|
|
return jsonify({"message": "User created successfully", "username": new_user.username}), 201
|
|
except ValueError as e:
|
|
return jsonify({"message": str(e)}), 400
|
|
|
|
@auth_bp.route('/login', methods=['POST'])
|
|
def login():
|
|
data = request.get_json()
|
|
username = data.get('username')
|
|
password = data.get('password')
|
|
|
|
print(f"Login attempt: username={username}, password={password}")
|
|
|
|
try:
|
|
user = user_service.verify_user(data['username'], data['password'])
|
|
session['user_id'] = user.id
|
|
return jsonify({"message": "Login successful", "user_id": user.id}), 200
|
|
except ValueError as e:
|
|
print(f"Login failed: {str(e)}")
|
|
return jsonify({"error": str(e)}), 401
|
|
|
|
@auth_bp.route('/logout', methods=['POST'])
|
|
def logout():
|
|
session.clear()
|
|
return jsonify({"message": "Logout successful"}), 200 |