фикс учетки 2
This commit is contained in:
83
app.py
83
app.py
@@ -815,39 +815,25 @@ def admin_db_create_account(
|
|||||||
return RedirectResponse(url="/login", status_code=303)
|
return RedirectResponse(url="/login", status_code=303)
|
||||||
|
|
||||||
username = username.strip()
|
username = username.strip()
|
||||||
password = password.strip()
|
|
||||||
role = (role or "operator").strip().lower()
|
role = (role or "operator").strip().lower()
|
||||||
|
|
||||||
if not username:
|
if not username:
|
||||||
return render_admin_db_index(
|
return render_admin_db_index(request, account_output="Логин обязателен.", account_success=False)
|
||||||
request,
|
|
||||||
account_output="Логин обязателен.",
|
|
||||||
account_success=False,
|
|
||||||
)
|
|
||||||
|
|
||||||
if not password:
|
if not password:
|
||||||
return render_admin_db_index(
|
return render_admin_db_index(request, account_output="Пароль обязателен.", account_success=False)
|
||||||
request,
|
|
||||||
account_output="Пароль обязателен.",
|
if len(password) < 6:
|
||||||
account_success=False,
|
return render_admin_db_index(request, account_output="Пароль должен быть не короче 6 символов.", account_success=False)
|
||||||
)
|
|
||||||
|
|
||||||
if role not in {"admin", "operator"}:
|
if role not in {"admin", "operator"}:
|
||||||
return render_admin_db_index(
|
return render_admin_db_index(request, account_output="Роль должна быть admin или operator.", account_success=False)
|
||||||
request,
|
|
||||||
account_output="Роль должна быть admin или operator.",
|
|
||||||
account_success=False,
|
|
||||||
)
|
|
||||||
|
|
||||||
password_hash = hash_password(password)
|
password_hash = hash_password(password)
|
||||||
conn = get_connection()
|
conn = get_connection()
|
||||||
success = True
|
|
||||||
messages: list[str] = []
|
|
||||||
|
|
||||||
try:
|
try:
|
||||||
with conn:
|
|
||||||
with conn.cursor() as cur:
|
with conn.cursor() as cur:
|
||||||
try:
|
|
||||||
cur.execute(
|
cur.execute(
|
||||||
"""
|
"""
|
||||||
INSERT INTO admin_users (username, password_hash, role, is_active)
|
INSERT INTO admin_users (username, password_hash, role, is_active)
|
||||||
@@ -857,53 +843,32 @@ def admin_db_create_account(
|
|||||||
""",
|
""",
|
||||||
(username, password_hash, role),
|
(username, password_hash, role),
|
||||||
)
|
)
|
||||||
|
row = cur.fetchone()
|
||||||
|
conn.commit()
|
||||||
|
|
||||||
|
if row:
|
||||||
|
return render_admin_db_index(
|
||||||
|
request,
|
||||||
|
account_output=f"Пользователь создан: {username} (id={row[0]})\nРоль: {role}",
|
||||||
|
account_success=True,
|
||||||
|
)
|
||||||
|
|
||||||
|
return render_admin_db_index(
|
||||||
|
request,
|
||||||
|
account_output=f"Пользователь '{username}' уже существует.",
|
||||||
|
account_success=False,
|
||||||
|
)
|
||||||
|
|
||||||
except Exception:
|
except Exception:
|
||||||
conn.rollback()
|
conn.rollback()
|
||||||
with conn:
|
|
||||||
with conn.cursor() as fallback_cur:
|
|
||||||
fallback_cur.execute(
|
|
||||||
"""
|
|
||||||
INSERT INTO admin_users (username, password_hash, is_active)
|
|
||||||
VALUES (%s, %s, TRUE)
|
|
||||||
ON CONFLICT (username) DO NOTHING
|
|
||||||
RETURNING id;
|
|
||||||
""",
|
|
||||||
(username, password_hash),
|
|
||||||
)
|
|
||||||
row = fallback_cur.fetchone()
|
|
||||||
if row:
|
|
||||||
messages.append(f"Пользователь создан: {username} (id={row[0]})")
|
|
||||||
messages.append("Примечание: колонка role в БД не найдена, роль не сохранена.")
|
|
||||||
else:
|
|
||||||
success = False
|
|
||||||
messages.append(f"Пользователь '{username}' уже существует.")
|
|
||||||
return render_admin_db_index(
|
return render_admin_db_index(
|
||||||
request,
|
request,
|
||||||
account_output="\n".join(messages),
|
account_output="Ошибка при создании аккаунта:\n" + traceback.format_exc(),
|
||||||
account_success=success,
|
account_success=False,
|
||||||
)
|
)
|
||||||
|
|
||||||
row = cur.fetchone()
|
|
||||||
if row:
|
|
||||||
messages.append(f"Пользователь создан: {username} (id={row[0]})")
|
|
||||||
messages.append(f"Роль: {role}")
|
|
||||||
else:
|
|
||||||
success = False
|
|
||||||
messages.append(f"Пользователь '{username}' уже существует.")
|
|
||||||
except Exception:
|
|
||||||
success = False
|
|
||||||
messages.append("Ошибка при создании аккаунта:")
|
|
||||||
messages.append(traceback.format_exc())
|
|
||||||
finally:
|
finally:
|
||||||
conn.close()
|
conn.close()
|
||||||
|
|
||||||
return render_admin_db_index(
|
|
||||||
request,
|
|
||||||
account_output="\n".join(messages).strip(),
|
|
||||||
account_success=success,
|
|
||||||
)
|
|
||||||
|
|
||||||
|
|
||||||
@app.get("/admin/db/players", response_class=HTMLResponse)
|
@app.get("/admin/db/players", response_class=HTMLResponse)
|
||||||
def admin_db_players(request: Request, q: str = Query(default="")):
|
def admin_db_players(request: Request, q: str = Query(default="")):
|
||||||
# denied = require_role(request, {"admin"})
|
# denied = require_role(request, {"admin"})
|
||||||
|
|||||||
Reference in New Issue
Block a user