cato447/tutor-tool
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

i am smort

Browse Source
This commit is contained in:
cato447
2026-02-20 03:36:06 +01:00
parent e111a876f7
commit 7226c0c698
1 changed files with 12 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
app/routes.py
View File

@@ -41,7 +41,7 @@ from .utils import (
get_course, get_course,
token_required, token_required,
get_cached_deck_info, get_cached_deck_info,
is_safe_url is_safe_url,
) )
@@ -138,7 +138,7 @@ def set_cookie(token):
resp = make_response(redirect(next_url)) resp = make_response(redirect(next_url))
resp.set_cookie( resp.set_cookie(
"access_token", serialize_token(token), httponly=True, samesite="Lax", path="/" "access_token", serialize_token(token), httponly=True, samesite="Lax", path="/", max_age=31536000
) )
return resp return resp
@@ -222,12 +222,15 @@ def register():
def logout(): def logout():
token = get_token() token = get_token()
user_name = token.name if token else "Unknown" user_name = token.name if token else "Unknown"
if flask_login.current_user.is_authenticated:
current_app.logger.info(f"Admin logout: {flask_login.current_user.id}")
flask_login.logout_user()
current_app.logger.info(f"User logout: {user_name}") current_app.logger.info(f"User logout: {user_name}")
resp = make_response( resp = make_response(redirect(url_for("main.index")))
redirect(url_for("main.index")) resp.set_cookie("access_token", "", expires=0)
) # Redirect to a safe page, e.g., index or login
resp.set_cookie("access_token", "", expires=0) # Clears the cookie
return resp return resp
@@ -266,7 +269,9 @@ def admin_login():
next_page = request.args.get("next") next_page = request.args.get("next")
if next_page and not is_safe_url(next_page): if next_page and not is_safe_url(next_page):
current_app.logger.warning(f"Blocked unsafe redirect attempt to: {next_page}") current_app.logger.warning(
f"Blocked unsafe redirect attempt to: {next_page}"
)
return abort(400) return abort(400)
if next_page: if next_page: