summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorromangraef <roman.graef@gmail.com>2018-06-02 09:58:37 +0200
committerromangraef <roman.graef@gmail.com>2018-06-02 09:58:37 +0200
commit57a8d6c5abe24324fe21da405ecdb8632cdb8b33 (patch)
tree9ab1e295efd8cbc092a7e16e60096e750fcdffbc
parent7bed1685b66f126b7130e43304ad8f53f69a3aff (diff)
downloadmy-website-57a8d6c5abe24324fe21da405ecdb8632cdb8b33.tar.gz
my-website-57a8d6c5abe24324fe21da405ecdb8632cdb8b33.tar.bz2
my-website-57a8d6c5abe24324fe21da405ecdb8632cdb8b33.zip
Added return_url to admin login
-rw-r--r--app.py7
-rw-r--r--templates/base.html6
-rw-r--r--templates/login.html2
3 files changed, 10 insertions, 5 deletions
diff --git a/app.py b/app.py
index ae6ec36..6b3e4da 100644
--- a/app.py
+++ b/app.py
@@ -38,13 +38,14 @@ def inject():
return {
'projects': from_json(db.all(), List[Project]),
'empty_project': Project(),
- 'admin': session.get('logged_in', False)
+ 'admin': session.get('logged_in', False),
+ 'no_login': False,
}
@app.route('/admin/login/', methods=['GET'])
def login():
- return render_template('login.html')
+ return render_template('login.html', return_url=request.args.get('return_url', '/'), no_login=True)
@app.route('/admin/login', methods=['POST'])
@@ -52,7 +53,7 @@ def check_login():
if not check_password(request.form.get('pass')):
return redirect(url_for('login'))
session['logged_in'] = True
- return redirect('/')
+ return redirect(request.args.get('return_url', '/'))
@app.route('/admin/logout')
diff --git a/templates/base.html b/templates/base.html
index 9f45c87..c48d1c3 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -25,7 +25,11 @@
<a href="{{ url_for('new_project_form') }}">New Project</a>
{% block admin_footer %}{% endblock %}
{% else %}
- <a href="{{ url_for('login') }}">Admin login</a>
+ {% if no_login %}
+ <a href="{{ return_url }}">Go back</a>
+ {% else %}
+ <a href="{{ url_for('login') }}?return_url={{ request.path }}">Admin login</a>
+ {% endif %}
{% endif %}
{% block footer %}
{% endblock %}
diff --git a/templates/login.html b/templates/login.html
index 32059c6..14a22e9 100644
--- a/templates/login.html
+++ b/templates/login.html
@@ -1,6 +1,6 @@
{% extends "base.html" %}
{% block body %}
- <form method="post" action="{{ url_for('check_login') }}">
+ <form method="post" action="{{ url_for('check_login') }}?return_url={{ return_url }}">
<p style="color: red;">Admin access only</p>
<p>
<label for="user">Username</label>