blob: 808c2ec2e8b8c9ecc8d59df0e9bab72281b4287f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
"""Authentication routes."""
from __future__ import annotations
from starlette.requests import Request
from starlette.responses import JSONResponse
from ..auth import clear_auth_cookies, is_authenticated, set_auth_cookies
async def login(request: Request) -> JSONResponse:
try:
body = await request.json()
except Exception: # noqa: BLE001
body = {}
pin = str(body.get("pin", ""))
if pin != request.app.state.settings.pin:
return JSONResponse({"authenticated": False, "error": "Invalid PIN"}, status_code=401)
response = JSONResponse({"authenticated": True})
csrf = set_auth_cookies(response, request.app.state.settings.secret_key)
response.headers["X-CSRF-Token"] = csrf
return response
async def logout(request: Request) -> JSONResponse:
response = JSONResponse({"authenticated": False})
clear_auth_cookies(response)
return response
async def status(request: Request) -> JSONResponse:
return JSONResponse({"authenticated": is_authenticated(request)})
|
