TriHard
/
rDrama
forked from rDrama/rDrama
1
0
Fork 0
Code Pull Requests Activity

don't do it for the POST either

master
justcool393 2022-11-18 14:34:11 -06:00
parent 2c81db79ef
commit fc5d78a4a1
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
files/routes/login.py
View File

@ -16,13 +16,15 @@ from files.helpers.useractions import badge_grant
from files.routes.routehelpers import check_for_alts
from files.routes.wrappers import *
NO_LOGIN_REDIRECT_URLS = ("/login", "/logout", "/signup", "/forgot", "/reset", "/reset_2fa", "/request_2fa_disable")
@app.get("/login")
@auth_desired
def login_get(v):
NO_REDIRECT_URLS = ("/login", "/logout", "/signup", "/forgot", "/reset", "/reset_2fa", "/request_2fa_disable")
redir = request.values.get("redirect", "/").strip().rstrip('?')
if redir:
if not is_site_url(redir) or redir in NO_REDIRECT_URLS:
if not is_site_url(redir) or redir in NO_LOGIN_REDIRECT_URLS:
redir = "/"
if v: return redirect(redir)
@ -105,7 +107,7 @@ def login_post():
redir = request.values.get("redirect", "").strip().rstrip('?')
if redir:
if is_site_url(redir) and redir != "/reset_2fa":
if is_site_url(redir) and redir in NO_LOGIN_REDIRECT_URLS:
return redirect(redir)
return redirect('/')