From 66c9b8045da7c75574d7ac5b9a68ca0fea2227ce Mon Sep 17 00:00:00 2001 From: HibiKier <775757368@qq.com> Date: Mon, 22 Jan 2024 05:33:41 +0800 Subject: [PATCH] =?UTF-8?q?perf=F0=9F=91=8C:=20webui=E7=99=BB=E5=BD=95?= =?UTF-8?q?=E7=BB=86=E8=8A=82=E4=BC=98=E5=8C=96?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- plugins/web_ui/auth/__init__.py | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/plugins/web_ui/auth/__init__.py b/plugins/web_ui/auth/__init__.py index 0040be85..d927977f 100644 --- a/plugins/web_ui/auth/__init__.py +++ b/plugins/web_ui/auth/__init__.py @@ -5,6 +5,8 @@ import nonebot from fastapi import APIRouter, Depends from fastapi.security import OAuth2PasswordRequestForm +from configs.config import Config + from ..base_model import Result from ..utils import ( ACCESS_TOKEN_EXPIRE_MINUTES, @@ -22,13 +24,14 @@ router = APIRouter() @router.post("/login") async def login_get_token(form_data: OAuth2PasswordRequestForm = Depends()): - if user := get_user(form_data.username): - if user.password != form_data.password: - return Result.fail("真笨, 密码都能记错!", 999) - else: + username = Config.get_config("web-ui", "username") + password = Config.get_config("web-ui", "password") + if not username or not password: return Result.fail("你滴配置文件里用户名密码配置项为空", 998) + if username != form_data.username or password != form_data.password: + return Result.fail("真笨, 账号密码都能记错!", 999) access_token = create_token( - user=user, expires_delta=timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES) + user=get_user(form_data.username), expires_delta=timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES) ) token_data["token"].append(access_token) if len(token_data["token"]) > 3: