rework session handling

2026-04-17 05:25:14 +03:00
parent 9c4f271259
commit 7c0cb623e3
2 changed files with 12 additions and 5 deletions
--- a/app/routes/users.py
+++ b/app/routes/users.py
@@ -13,12 +13,15 @@ def log_in_page():
 def log_in_post():
    user = Users.find({'username': request.form['username']})
    if not user:
-        return "no user"
+        return 'no user'
    if not verify(user.password_hash, request.form['password']):
-        return "no"
+        return 'no'

    sess = create_session(user.id)
    session['pyrom_session_key'] = sess.key
+    session['remember'] = request.form.get('remember') == 'on'
+    if session['remember']:
+        session.permanent = True
    return redirect(request.form['return_to'])

@bp.get('/<username>')