Spaces:
Sleeping
Sleeping
deploy at 2024-08-25 08:02:27.625024
Browse files
main.py
CHANGED
|
@@ -469,9 +469,10 @@ async def login(request: Request):
|
|
| 469 |
if username == ADMIN_NAME and compare_digest(ADMIN_PWD.encode("utf-8"), password.encode("utf-8")):
|
| 470 |
request.session["auth"] = True
|
| 471 |
response = RedirectResponse("/admin", status_code=303)
|
|
|
|
| 472 |
response.set_cookie(
|
| 473 |
-
"
|
| 474 |
-
request.session,
|
| 475 |
max_age=3600,
|
| 476 |
httponly=True,
|
| 477 |
samesite='Lax', # Try 'Lax' if 'None' doesn't work
|
|
@@ -684,7 +685,7 @@ def download_csv(request: Request):
|
|
| 684 |
|
| 685 |
@app.route("/admin")
|
| 686 |
async def admin(request: Request):
|
| 687 |
-
auth = request.cookies.get("
|
| 688 |
if auth is None:
|
| 689 |
return RedirectResponse("/login", status_code=303)
|
| 690 |
|
|
|
|
| 469 |
if username == ADMIN_NAME and compare_digest(ADMIN_PWD.encode("utf-8"), password.encode("utf-8")):
|
| 470 |
request.session["auth"] = True
|
| 471 |
response = RedirectResponse("/admin", status_code=303)
|
| 472 |
+
# Set "set-cookie" in header
|
| 473 |
response.set_cookie(
|
| 474 |
+
"session",
|
| 475 |
+
request.session["auth"],
|
| 476 |
max_age=3600,
|
| 477 |
httponly=True,
|
| 478 |
samesite='Lax', # Try 'Lax' if 'None' doesn't work
|
|
|
|
| 685 |
|
| 686 |
@app.route("/admin")
|
| 687 |
async def admin(request: Request):
|
| 688 |
+
auth = request.cookies.get("session", None)
|
| 689 |
if auth is None:
|
| 690 |
return RedirectResponse("/login", status_code=303)
|
| 691 |
|