def login():
	if session.get('user_id'):
		return redirect(url_for('topic.tab_view'))
	error = None
	if request.method == 'POST':
		if '@' in request.form['username']:
			user = User.query.filter_by(email=request.form['username']).first()
			if user is None:
				error = u'用户名错误！'
			elif not check_password_hash(user.password,request.form['password']):
				error = u'密码错误！'
			else:
				flash(u'登录成功！')
				session['user_id'] = user.id
				return redirect(url_for('topic.tab_view'))
		else:
			user = User.query.filter_by(name=request.form['username']).first()
			if user is None:
				error = u'用户名错误！'
			elif not check_password_hash(user.password,request.form['password']):
				error = u'密码错误！'
			else:
				flash(u'登录成功！')
				session['user_id'] = user.id
				session.permanent = True
				return redirect(url_for('topic.tab_view'))
	return render_template('login.html', error=error)

	def test_users_account_route_account(self):
		"""Ensure users account actually create the user"""

		# add user to database
		user = User(username='john', password=generate_password_hash('a'), email='[email protected]')
		db.session.add(user)
		db.session.commit()
		self.login(email='[email protected]', password='a')

		response = self.app.post('/users/account/', data=dict(
			username='tomeker',
			email='[email protected]',
			password='aaaaaa',
			confirm='aaaaaa',
			old_password='a'
		), follow_redirects=True)

		self.assertTrue(response.status_code == 200)
		self.assertTemplateUsed('users/account.html')
		self.assertIn(b'The changes have been saved', response.data)

		updated_user = User.query.filter_by(username='tomeker').first()
		self.assertTrue(updated_user is not None)
		self.assertTrue(updated_user.email == '[email protected]')
		self.assertTrue(check_password_hash(updated_user.password, 'aaaaaa'))

		old_user = User.query.filter_by(username='john').first()
		self.assertTrue(old_user is None)


		# SECOND USER - ONLY USERNAME
		self.logout()

		# add user to database
		second_user = User(username='john', password=generate_password_hash('a'), email='[email protected]')
		db.session.add(second_user)
		db.session.commit()
		self.login(email='[email protected]', password='a')

		response = self.app.post('/users/account/', data=dict(
			username='tomekerer',
			email='[email protected]',
			password='',
			confirm='',
			old_password=''
		), follow_redirects=True)

		self.assertTrue(response.status_code == 200)
		self.assertTemplateUsed('users/account.html')
		self.assertIn(b'The changes have been saved', response.data)

		updated_user = User.query.filter_by(username='tomekerer').first()
		self.assertTrue(updated_user is not None)
		self.assertTrue(updated_user.email == '[email protected]')
		self.assertTrue(check_password_hash(updated_user.password, 'a'))

    def authenticate(self, identifier, secret):
        user = User.query.filter(
            db.or_(User.username == identifier, User.email == identifier)
        ).first()

        if user is not None:
            if check_password_hash(user.password, secret):
                return user
            return None

        check_password_hash("dummy password", secret)
        return None

def extauth():
    app.logger.info(repr(request.form))
    email = request.form['email']
    password = request.form['password']
    eid = int(request.form['eid'])
    user = User.query.filter_by(email=email).first()
    if user:
        if check_password_hash(user.pwdhash, password):
            d = dict(user.__dict__)
            d.pop('_sa_instance_state')
            d['success'] = True
            e = user.events.all()
            eids = [i.id for i in e]
            if eid in eids:
                d['event_registered'] = True
            else:
                d['event_registered'] = False
                r = Registration(user.id,eid)
                db.session.add(r)
                db.session.commit()

            return jsonify(d)
        else:
            return jsonify({'success':False})
    else:
        return jsonify(success = False)

def landing_page():
    if session.get('logged_in'):
        return redirect(url_for('users.show_entries'))

    if not session.get('logged_in'):
        """
    Login form
    """
    form = LoginForm(request.form)
    # make sure data are valid, but doesn't validate password is right
    if form.validate_on_submit():
        user = User.query.filter_by(email=form.email.data).first()
        # we use werzeug to validate user's password
        if user and check_password_hash(user.password, form.password.data):
            # the session can't be modified as it's signed,
            # it's a safe place to store the user id
            session['user_id'] = user.id
            session['logged_in'] = True
            flash('Welcome %s' % user.name)
            return redirect(url_for('users.show_entries'))
        flash('Wrong email or password', 'error-message')
    return (
            render_template(
                'base.html', form=form)
            )

 def check_password(self, password):
     """
     Check passwords. If passwords match it returns true, else false
     """
     if self.password is None:
         return False
     return check_password_hash(self.password, password)

def validateLogin():
	try:
		_username = request.form['inputEmail']
		_password = request.form['inputPassword']

		conn = mysql.connect()
		cursor = conn.cursor()
		#cursor.callproc('sp_validateLogin',(_username,))
		cursor.execute("SELECT * FROM tbl_user where user_username='" + _username + "'")
		data = cursor.fetchall()

		if len(data) > 0:
			row = data[0]
			if check_password_hash(str(data[0][3]),_password):
				session['user'] = row[0]
				session['username'] = row[1]
				return redirect('/showDashboard')
			else:
				return render_template('error.html',error = 'Wrong Email address or Password!')
		else:
			return render_template('error.html',error = 'Len not 0 Wrong Email address or Password!')

	except Exception as e:
		return render_template('error.html',error = str(e))

	finally:
		cursor.close()
		conn.close()

def login():
  """ logs in the user. if the username doesn't exist creates the account """
  
  if not request.form['username']:
    flash('You have to enter a username')
  elif not request.form['password']:
    flash('You have to enter a password')
  elif get_user_id(request.form['username']) is not None:
    # username already exists, fetch all of its attributes
    user = query_db('''select * from user where
          username = ?''', [request.form['username']], one=True)
    if check_password_hash(user['pw_hash'], request.form['password']):
      # password is correct, log in the user
      session['user_id'] = get_user_id(request.form['username'])
      flash('User ' + request.form['username'] + ' logged in.')
    else:
      # incorrect password
      flash('User ' + request.form['username'] + ' already exists, wrong password.')
  else:
    # create account and log in
    creation_time = int(time.time())
    g.db.execute('''insert into user (username, pw_hash, creation_time) values (?, ?, ?)''',
      [request.form['username'], 
      generate_password_hash(request.form['password']), 
      creation_time])
    user_id = g.db.execute('select last_insert_rowid()').fetchall()[0][0]
    g.db.commit()

    session['user_id'] = user_id
    flash('New account %s created' % (request.form['username'], ))
  
  return redirect(url_for('intmain'))

def login():
    """
    We had to do some extra work to route the user back to
    his or her original place before logging in
    """
    if g.user:
        return redirect(url_for('frontends.home'))

    next = ''
    if request.method == 'GET':
        if 'next' in request.args:
            next = request.args['next']

    form = LoginForm(request.form)
    # make sure data is valid, but doesn't validate password is right
    if form.validate_on_submit():
        # continue where we left off if so
        user = User.query.filter_by(email=form.email.data).first()
        # we use werzeug to validate user's password
        if user and check_password_hash(user.password, form.password.data):
            # the session can't be modified as it's signed,
            # it's a safe place to store the user id
            session['user_id'] = user.id

            if 'next' in request.form and request.form['next']:
                return redirect(request.form['next'])
            return redirect(url_for('frontends.home'))

        flash('Wrong email or password', 'danger')
    return render_template("login.html", form=form, next=next)

def login():
	"""Logs the user in."""
	if g.user:
		return redirect(url_for('wordlist'))
	error = None
	if request.method == 'POST':
		user = query_db('''select * from user where
			username = ?''', [request.form['username']], one=True)
		if user is None:
			error = 'Invalid username'
		elif not check_password_hash(user['pw_hash'],
									 request.form['password']):
			error = 'Invalid password'
		else:
			flash('You were logged in')
			session['user_id'] = user['user_id']
			if user['wbtoken'] is None:
				return redirect(url_for('linkwb'))
			session['wbtoken'] = user['wbtoken']
			session['wbtokenexpire'] = user['wbtokenexpire']
			if user['dict'] is None:
				return redirect(url_for('choosedict'))
			session['dict']= user['dict']
			session['wordnum']=100
			return redirect(url_for('wordlist'))
	return render_template('login.html', error=error)

def login():
    if current_user.is_authenticated():
        return jsonify(result="Already logged in.")

    if request.method == "POST" and "username" in request.json:

        username = request.json["username"]
        password = request.json["password"]

        if not username or not password:
            return jsonify(result="Empty username or password.")
        else:
            try:
                user_record = User.objects.get(username=username)
            except:
                user_record = None

            if user_record is None:
                return jsonify(result="Please check you username or password.")
            elif not check_password_hash(user_record['pw_hash'], password):
                return jsonify(result="Please check you username or password.")
            else:
                user_record.date_logged_in = datetime.now()
                user_record.save()
                usr_obj = UserLogin(user_record)

                if login_user(usr_obj):
                    return json_response(str(current_user))
                    # return jsonify(result="authorized")
                else:
                    return jsonify(result="Invalid password.")

 def password_is(self, password):
     if self.pw_hash is None:
         return False
     if self.pw_hash.startswith('sha1$'):
         return check_password_hash(self.pw_hash, password)
     else:
         return bcrypt.hashpw(password, self.pw_hash) == self.pw_hash

def login():
    if request.method == 'POST':
        try:
            username = request.form['username']
            password = request.form['password']
            
            db      = mysql.connect()
            cursor  = db.cursor()
            cursor.callproc('validateLogin',(username))
            data    = cursor.fetchall()
            
            if len(data) > 0:
                if check_password_hash(str(data[0][3]),password):
                    session['user'] = data[0][0]
                    return redirect('/')
                else:
                    return render_template('error.html',error = 'Wrong username or Password.')
            else:
                return render_template('error.html',error = 'Wrong username or Password.')
                
        except Exception as e:
            return render_template('error.html',error = str(e))
        finally:
            cursor.close()
            db.close()
    
    if session.get('user'):
        return render_template('userHome.html')
    else:
        return render_template('signin.html')

def save_user():
    users = get_all_users()
    if request.method == 'POST':
        next_user_id = len(users) + 1
        username = request.form['username']
        password = request.form['password']
        input_password = password
        password = set_password(password)
        found_user = get_user_with_username(username)
        if len(found_user) != 0:
            ans_password = found_user['password']
            if check_password_hash(ans_password, input_password):
                session['logged_in'] = True
                session['user_id'] = str(next_user_id)
                session['username'] = username
                return redirect('/')
            else :
                posts = get_all_posts()
                ret_posts = get_all_post_information(posts)
                return render_template('/signup.html',ret_posts=ret_posts,error_message=u'비밀번호가 틀리셨어요!')

        created_at = datetime.datetime.now()
        s = '%d %s %s %s\n'%(next_user_id,username,password,str(created_at))
        base_path = '/var/www/flask_blog/flask_blog/post/'
        user_path = base_path + 'user'
        with open(user_path,'a') as fp:
            fp.write(s)
        session['logged_in'] = True
        session['user_id'] = str(next_user_id)
        session['username'] = username

        return redirect('/')

def login():
    if current_user.is_authenticated():
        return redirect(url_for('home'))

    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']

        user=User.query.filter(User.code_name==username).first()

        if username is None or user is None:
            flash(u'无效用户名!')
            return redirect(url_for('login'))
        else:
            auth = check_password_hash(user.password, password)

        if not auth: 
            flash(u'无效密码!')
            return redirect(url_for('login'))
        else:
            # 用户信息放入session
            login_user(user)
            
            # navbar放入session
            session['navbar'] = current_user_navbar(current_user.id)
            return redirect(url_for('home'))

    return render_template('index.html')

def manage_user():
    if request.method == 'POST':
        first_name = request.form['signUp_firstName']
        last_name = request.form['signUp_lastName'] or None
        username = request.form['signUp_username']
        password = request.form['signUp_password']

        # Validate values
        if first_name and username and password:
            hashed_password = generate_password_hash(password)
            db.create_user(first_name, last_name, username, hashed_password)
            return json.dumps({'html':'<span>All fields good !!</span>'})
        else:
            return json.dumps({'html':'<span>Enter the required fields</span>'})

    elif request.method == 'DELETE':
        # id = request.form['id']
        username = request.form['username']
        password = request.form['password']
        # Secure enough?

        if username and password:
            user = db.find_user_by_username(username)
            if check_password_hash(user.password, password):
                print('Yepp they match')
                db.delete_user(username)
                return json.dumps({'deleted': 'ok'})

        return json.dumps({'error': 'missing user or password'}), 400

 def authenticate(self, handle, password):
     """Autenticate handle using password"""
     user = self.get_user_by_handle(handle)
     if user is None:
         return None
     if check_password_hash(user[1], password):
         return {"handle": handle, "token": user[2]}

def dangnhap():
  # If user is already login then redirect user to the profile page
  if g.user is not None and g.user.is_authenticated():
    return redirect(url_for('users.home'))

  form = LoginForm(request.form)
  # make sure data are valid, but doesn't validate password is right
  if form.validate_on_submit():
    # Check if the email is in the database, do not allow register
    user = User.query.filter_by(email=form.email.data).first()
    # we use werzeug to validate user's password
    if user and check_password_hash(user.password, form.password.data):
      if user.status == 2 :
      # the session can't be modified as it's signed, 
      # it's a safe place to store the user id
        session['user_id'] = user.id
        session['username'] = user.nickname
        session['remember_me'] = form.remember_me.data

      # Get the remember_me option and save it to user, then empty it 
        remember_me = False
        if 'remember_me' in session:
          remember_me = session['remember_me']
          session.pop('remember_me', None)
      
      # log the user in using Flask-Login
        login_user(user, remember = remember_me)

        flash(u'Đăng nhập thành công. Xin chào %s' % user.fullname)
        return redirect(url_for('users.home'))
      else :
        flash(u'Tài Khoan Của Bạn Chưa Xác Thực', 'error-message')
        return render_template("users/login.html", form=form)
    flash(u'Sai Email hoặc Mật khẩu', 'error-message')
  return render_template("users/login.html", form=form)

def validateLogin():
    try:
        _username = request.form["inputEmail"]
        _password = request.form["inputPassword"]

        # connect to mysql

        con = mysql.connect()
        cursor = con.cursor()
        cursor.callproc("sp_validateLogin", (_username,))
        data = cursor.fetchall()

        if len(data) > 0:
            if check_password_hash(str(data[0][3]), _password):
                session["user"] = data[0][0]
                return redirect("/userHome")
            else:
                return render_template("error.html", error="Wrong Email address or Password.")
        else:
            return render_template("error.html", error="Wrong Email address or Password.")

    except Exception as e:
        return render_template("error.html", error=str(e))
    finally:
        cursor.close()
        con.close()

def login():
    """
    Login form
    """
    site_title = gettext('Log in')

    form = LoginForm(request.form)

    # make sure data are valid, but doesn't validate password is right
    if form.validate_on_submit():
        user = User.query.filter_by(email=form.email.data).first()
        # we first test if the user was not found
        if user is None:
            flash(gettext('Unknown user !'), 'error-message')
            return render_template("users/login.html", form=form,
                user=g.user, site_title=site_title)
        # then we check the password
        elif check_password_hash(user.password, form.password.data):
            # the session can't be modified as it's signed,
            # it's a safe place to store the user id
            session['user_id'] = user.id
            flash(gettext("You're logged in, %(name)s", name=user.name))
            return redirect(request.args.get("next")
                or url_for('users.home'))
        else:
            # if we get here, that means the user is in the db,
            # but the entered password was wrong
            flash(gettext('Wrong password'), 'error-message')
            return render_template("users/login.html", form=form,
                user=g.user, site_title=site_title)
    return render_template("users/login.html", form=form,
        user=g.user, site_title=site_title)