Browse Source

feat: 登录鉴权

SongZihuan 2 years ago
parent
commit
21f23d4547
3 changed files with 10 additions and 4 deletions
  1. 2 0
      app/archive.py
  2. 6 0
      app/auth.py
  3. 2 4
      app/comment.py

+ 2 - 0
app/archive.py

@@ -2,6 +2,7 @@ from flask import Blueprint, render_template, request, url_for, redirect
 from flask_wtf import FlaskForm
 from wtforms import StringField, SubmitField
 from wtforms.validators import DataRequired, Length, ValidationError
+from flask_login import login_required
 
 from .db import db, Archive
 
@@ -38,6 +39,7 @@ def list_all_page():
 
 
 @archive.route("/create", methods=["GET", "POST"])
+@login_required
 def create_page():
     form = CreateArchiveForm()
     if form.validate_on_submit():

+ 6 - 0
app/auth.py

@@ -287,6 +287,7 @@ def user_page():
 
 
 @auth.route("/follower/list")
+@login_required
 def follower_page():
     if current_user.follower_count == 0:
         return render_template("auth/no_follow.html", title="粉丝", msg="你暂时一个粉丝都没有哦。")
@@ -300,6 +301,7 @@ def follower_page():
 
 
 @auth.route("/followed/list")
+@login_required
 def followed_page():
     if current_user.followed_count == 0:
         return render_template("auth/no_follow.html", title="关注", msg="你暂时未关注任何人。")
@@ -313,6 +315,7 @@ def followed_page():
 
 
 @auth.route("/followed/follow")
+@login_required
 def set_follow_page():
     user_id = request.args.get("user", None, type=int)
     if not user_id or user_id == current_user.id:
@@ -334,6 +337,7 @@ def set_follow_page():
 
 
 @auth.route("/followed/unfollow")
+@login_required
 def set_unfollow_page():
     user_id = request.args.get("user", None, type=int)
     if not user_id or user_id == current_user.id:
@@ -350,6 +354,7 @@ def set_unfollow_page():
 
 
 @auth.route("/block")
+@login_required
 def set_block_page():
     user_id = request.args.get("user", None, type=int)
     if not user_id or user_id == current_user.id:
@@ -370,6 +375,7 @@ def set_block_page():
 
 
 @auth.route('/role/user', methods=['GET', 'POST'])
+@login_required
 def change_role_page():
     form = ChangeRoleForm()
     if form.validate_on_submit():

+ 2 - 4
app/comment.py

@@ -2,7 +2,7 @@ from flask import Blueprint, render_template, request, abort, flash, redirect, u
 from flask_wtf import FlaskForm
 from wtforms import TextAreaField, StringField, SelectMultipleField, SubmitField, ValidationError
 from wtforms.validators import DataRequired, Length
-from flask_login import current_user
+from flask_login import current_user, login_required
 
 
 from .db import db, Comment, Archive, User
@@ -106,6 +106,7 @@ def user_page():
 
 
 @comment.route("/create", methods=["GET", "POST"])
+@login_required
 def create_page():
     father_id = request.args.get("father", None, type=int)
 
@@ -131,6 +132,3 @@ def create_page():
         flash("讨论发表成功")
         return redirect(url_for("comment.comment_page", comment=cm.id))
     return render_template("comment/create.html", form=form, father=father)
-
-
-