login_logout.py 481 B

123456789101112131415
  1. from .tool.func import *
  2. async def login_logout():
  3. with get_db_connect() as conn:
  4. return_url = flask.request.args.get('return', '')
  5. if not return_url.startswith('/') or return_url.startswith('//') or '\\' in return_url:
  6. return_url = ''
  7. flask.session.pop('state', None)
  8. flask.session.pop('id', None)
  9. if return_url != '':
  10. return redirect(conn, return_url)
  11. else:
  12. return redirect(conn, '/user')