Spaces:
Running
Running
deploy at 2024-08-25 08:02:27.625024
Browse files
main.py
CHANGED
@@ -469,9 +469,10 @@ async def login(request: Request):
|
|
469 |
if username == ADMIN_NAME and compare_digest(ADMIN_PWD.encode("utf-8"), password.encode("utf-8")):
|
470 |
request.session["auth"] = True
|
471 |
response = RedirectResponse("/admin", status_code=303)
|
|
|
472 |
response.set_cookie(
|
473 |
-
"
|
474 |
-
request.session,
|
475 |
max_age=3600,
|
476 |
httponly=True,
|
477 |
samesite='Lax', # Try 'Lax' if 'None' doesn't work
|
@@ -684,7 +685,7 @@ def download_csv(request: Request):
|
|
684 |
|
685 |
@app.route("/admin")
|
686 |
async def admin(request: Request):
|
687 |
-
auth = request.cookies.get("
|
688 |
if auth is None:
|
689 |
return RedirectResponse("/login", status_code=303)
|
690 |
|
|
|
469 |
if username == ADMIN_NAME and compare_digest(ADMIN_PWD.encode("utf-8"), password.encode("utf-8")):
|
470 |
request.session["auth"] = True
|
471 |
response = RedirectResponse("/admin", status_code=303)
|
472 |
+
# Set "set-cookie" in header
|
473 |
response.set_cookie(
|
474 |
+
"session",
|
475 |
+
request.session["auth"],
|
476 |
max_age=3600,
|
477 |
httponly=True,
|
478 |
samesite='Lax', # Try 'Lax' if 'None' doesn't work
|
|
|
685 |
|
686 |
@app.route("/admin")
|
687 |
async def admin(request: Request):
|
688 |
+
auth = request.cookies.get("session", None)
|
689 |
if auth is None:
|
690 |
return RedirectResponse("/login", status_code=303)
|
691 |
|