codeex-12/auth.py at main · HEOSTER-1/codeex-12 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
from flask import Blueprint, render_template, request, flash, redirect, url_for
from flask_login import login_user, logout_user, login_required, current_user
from models import User, db
from werkzeug.security import check_password_hash

auth_bp = Blueprint('auth', __name__)

@auth_bp.route('/login', methods=['GET', 'POST'])
def login():
    if request.method == 'POST':
        roll_no = request.form.get('roll_no')
        grade = request.form.get('grade')
        section = request.form.get('section')
        password = request.form.get('password')
        is_admin = request.form.get('is_admin') == 'on'

        if is_admin:
            # Admin login - check for admin users
            user = User.query.filter_by(is_admin=True).first()
            if user and user.check_password(password):
                login_user(user)
                return redirect(url_for('admin.dashboard'))
            else:
                flash('Invalid admin credentials', 'error')
        else:
            # Student login
            if not all([roll_no, grade, section]):
                flash('Please fill all fields', 'error')
                return render_template('login.html')

            try:
                roll_no = int(roll_no)
                grade = int(grade)
            except ValueError:
                flash('Invalid roll number or grade', 'error')
                return render_template('login.html')

            user = User.query.filter_by(
                roll_no=roll_no,
                grade=grade,
                section=section.upper(),
                is_admin=False
            ).first()

            if user and user.check_password(password):
                login_user(user)
                return redirect(url_for('student.dashboard'))
            else:
                flash('Invalid student credentials', 'error')

    return render_template('login.html')

@auth_bp.route('/register', methods=['GET', 'POST'])
def register():
    if request.method == 'POST':
        name = request.form.get('name')
        roll_no = request.form.get('roll_no')
        grade = request.form.get('grade')
        section = request.form.get('section')
        password = request.form.get('password')
        confirm_password = request.form.get('confirm_password')

        # Validation
        if not all([name, roll_no, grade, section, password]):
            flash('Please fill all fields', 'error')
            return render_template('register.html')

        if password != confirm_password:
            flash('Passwords do not match', 'error')
            return render_template('register.html')

        try:
            roll_no = int(roll_no)
            grade = int(grade)
        except ValueError:
            flash('Invalid roll number or grade', 'error')
            return render_template('register.html')

        # Check valid grades
        if grade not in [6, 7, 8, 9, 11]:
            flash('Invalid grade. Only grades 6, 7, 8, 9, and 11 are allowed.', 'error')
            return render_template('register.html')

        # Check valid section
        if section.upper() not in ['A', 'B']:
            flash('Invalid section. Only sections A and B are allowed.', 'error')
            return render_template('register.html')

        # Check valid roll number range
        if roll_no < 1 or roll_no > 100:
            flash('Roll number must be between 1 and 100', 'error')
            return render_template('register.html')

        # Check if roll number already exists in the same grade and section
        existing_user = User.query.filter_by(
            roll_no=roll_no,
            grade=grade,
            section=section.upper()
        ).first()

        if existing_user:
            flash('Roll number already exists in this grade and section', 'error')
            return render_template('register.html')

        # Create new user
        user = User(
            name=name,
            roll_no=roll_no,
            grade=grade,
            section=section.upper(),
            is_admin=False
        )
        user.set_password(password)

        db.session.add(user)
        db.session.commit()

        flash('Registration successful! Please login.', 'success')
        return redirect(url_for('auth.login'))

    return render_template('register.html')

@auth_bp.route('/logout')
@login_required
def logout():
    logout_user()
    flash('You have been logged out successfully', 'info')
    return redirect(url_for('index'))