LoginHandler

#!/usr/bin/env python
# -*- coding: utf-8 -*-
# Filename      : login.py
# https://github.com/lujinda/pylot/blob/63577a249a66b18ec706a170cf668025c4b8b4d7/hao7you_admin/handler/login.py
from .public import ApiHandler
from db.account import create_default_account, check_account, lock_account
from util.error import Error
from util.enc import enc_password
from util.util import made_uuid
from util.email import send_email


class LoginHandler(ApiHandler):
    def get(self):
        create_default_account()
        self.render('login.html')

    def post(self):
        username = self.get_body_argument('username')
        password = enc_password(self.get_body_argument('password'))
        return_url = self.get_query_argument('return_url', '/')
        error = check_account(username, password)

        if error == Error.USER_NOT_EXIST:
            self.set_error('         ')
            return

        if error == Error.AUTH_FAILE:
            self.incr_login_counter(username)
            self.set_error('         ')
            return

        if error == Error.USER_LOCKED:
            self.set_error('      ，             ')
            return

        self.session['user'] = username
        self.session.save()

        self.set_result('return_url', return_url)
        self.clear_login_counter(username)

    def clear_login_counter(self, username):
        self.redis_db.delete(self.__counter_key(username))

    def __counter_key(self, username):
        return 'login:counter:' + username

    def incr_login_counter(self, username):
        counter = self.redis_db.incr(self.__counter_key(username))
        if counter == 3:  #       3 ，      ,              
            lock_account(username)
            self.send_active_email(username)

    def send_active_email(self, username):
        token = made_uuid()
        self.redis_db.set('account:active:%s' % (username,),
                          token)
        active_url = self.full_host + '/active?username={username}&token={token}'.format(username=username, token=token)
        send_email('[email protected]', subject="          ",
                   html="{url}".format(url=active_url))


from .public import BaseHandler


class LogoutHandler(BaseHandler):
    def get(self):
        self.session.logout()
        self.redirect(self.get_login_url())