2 files changed, 102 insertions, 0 deletions
diff --git a/app/modules/auth/forms.py b/app/modules/auth/forms.py
new file mode 100644
index 0000000..c051133
--- /dev/null
+++ b/app/modules/auth/forms.py
@@ -0,0 +1,29 @@
+from flask_wtf import FlaskForm
+from wtforms import (
+    SubmitField,
+    SelectField,
+    HiddenField,
+    StringField,
+    PasswordField,
+    IntegerField,
+    FloatField,
+    BooleanField,
+    DateTimeField,
+)
+from wtforms.validators import InputRequired, Length, NumberRange
+
+
+class LoginForm(FlaskForm):
+    username = StringField("Username", validators=[InputRequired()])
+    password = PasswordField("Password", validators=[InputRequired()])
+    remember = BooleanField("Remember")
+    submit = SubmitField("Login")
+
+
+class RegisterForm(LoginForm):
+    name_first = StringField("First name")
+    name_last = StringField("Last name")
+    email = StringField("E-mail address")
+    phone_mobile = StringField("Phone number (mobile)")
+    phone_alternative = StringField("Phone number (alternative)")
+    submit = SubmitField("Register")
diff --git a/app/modules/auth/routes.py b/app/modules/auth/routes.py
new file mode 100644
index 0000000..dd9e396
--- /dev/null
+++ b/app/modules/auth/routes.py
@@ -0,0 +1,73 @@
+# -*- mode: python; -*-
+
+from flask import Blueprint, render_template, redirect, url_for, request, flash
+from flask_login import login_user, login_required, logout_user
+from werkzeug.security import generate_password_hash, check_password_hash
+
+from ... import db
+from ...models import User
+from .forms import LoginForm, RegisterForm
+
+
+auth = Blueprint("auth", __name__)
+
+
+@auth.route("/login", methods=["GET", "POST"])
+def login():
+    form = LoginForm()
+    if form.validate_on_submit():
+        req = request.form
+        # print(req["remember"])
+        remember = True if req.get("remember") else False
+        user = User.query.filter_by(username=req["username"]).first()
+        if user is None:
+            flash("User not registered.", "error")
+            return redirect(url_for("auth.register"))
+        if check_password_hash(user.hashed_password, req["password"]) is False:
+            flash("Wrong password.", "error")
+            return redirect(url_for("auth.login"))
+        login_user(user, remember=remember)
+        flash(
+            f"Logged in as user {user.username} successfully. "
+            + f"You will {'not' if remember is False else ''} be remembered next time!"
+        )
+        return redirect(url_for("main.home"))
+    return render_template("modules/login.html", form=form)
+
+
+@auth.route("/register", methods=["GET", "POST"])
+def register():
+    form = RegisterForm()
+    if form.validate_on_submit():
+        req = request.form
+        user_already_exists = User.query.filter_by(
+            name_first=req["name_first"],
+            name_last=req["name_last"],
+        ).first()
+        if user_already_exists:
+            flash(
+                f"User {req['name_first']} {req['name_last']} already exists.", "error"
+            )
+            return redirect(url_for("auth.login"))
+        new_user = User(
+            username=req["username"],
+            hashed_password=generate_password_hash(req["password"], method="sha256"),
+            name_first=req["name_first"],
+            name_last=req["name_last"],
+            email=req["email"],
+            phone_mobile=req["phone_mobile"],
+            phone_alternative=req["phone_alternative"],
+        )
+        db.session.add(new_user)
+        db.session.commit()
+        flash(f"Created user {req['name_first']} {req['name_last']} successfully.")
+        return redirect(url_for("main.home"))
+    return render_template("register.html", form=form)
+
+
+@auth.route("/logout")
+@login_required
+def logout():
+    logout_user()
+    flash(f"Logged out successfully.")
+    return redirect(url_for("main.home"))