Remplace username by userid in routes

[cavote.git] / main.py

diff --git a/main.py b/main.py
index a1048f3..7c6521d 100755 (executable)
--- a/main.py
+++ b/main.py
@@ -94,42 +94,42 @@ def password_lost():
             flash(u"Un mail a été envoyé à " + user['email'], 'info')
     return render_template('password_lost.html')
 
-@app.route('/login/<username>/<key>')
-def login_key(username, key):
-    user = query_db('select * from users where email = ? and key = ?', [username, key], one=True)
+@app.route('/login/<userid>/<key>')
+def login_key(userid, key):
+    user = query_db('select * from users where id = ? and key = ?', [userid, key], one=True)
     if user is None:
         abort(404)
     else:
         connect_user(user)
         # :TODO:maethor:120528: Remplacer la clé pour qu'elle ne puisse plus être utilisée
         flash(u"Veuillez mettre à jour votre mot de passe", 'info')
-        return redirect(url_for('user_password'), username=user['name'])
+        return redirect(url_for('user_password'), userid=user['userid'])
 
 #---------------
 # User settings
 
-@app.route('/user/<username>')
-def show_user(username):
-    if username != session.get('username'):
+@app.route('/user/<userid>')
+def show_user(userid):
+    if int(userid) != session.get('userid'):
         abort(401)
     return render_template('show_user.html')
 
-@app.route('/user/settings/<username>', methods=['GET', 'POST'])
-def user_settings(username):
-    if username != session.get('username'):
+@app.route('/user/settings/<userid>', methods=['GET', 'POST'])
+def user_settings(userid):
+    if int(userid) != session.get('userid'):
         abort(401)
     if request.method == 'POST':
         g.db.execute('update users set email = ?, name = ?, organization = ? where id = ?',
                 [request.form['email'], request.form['name'], request.form['organization'], session['userid']])
         g.db.commit()
-        disconnect_user()
+        disconnect_user() # :TODO:maethor:120528: Maybe useless, but this is simple way to refresh session :D
         flash(u'Votre profil a été mis à jour !', 'success')
         return redirect(url_for('login'))
     return render_template('user_settings.html')
 
-@app.route('/user/password/<username>', methods=['GET', 'POST'])
-def user_password(username):
-    if username != session.get('username'):
+@app.route('/user/password/<userid>', methods=['GET', 'POST'])
+def user_password(userid):
+    if int(userid) != session.get('userid'):
         abort(401)
     if request.method == 'POST':
         if request.form['password'] == request.form['password2']: