账号安全服务如何搭建

pip install flask flask-login passlib bcrypt

from flask import Flask, request, redirect, url_for
from flask_login import LoginManager, UserMixin, login_user, login_required, current_user
from passlib.hash import bcrypt

app = Flask(__name__)
app.secret_key = 'your_secret_key'

login_manager = LoginManager()
login_manager.init_app(app)

class User(UserMixin):
    def __init__(self, id, username, password_hash):
        self.id = id
        self.username = username
        self.password_hash = password_hash

users = {
    1: User(1, 'user1', bcrypt.hash('password1')),
    2: User(2, 'user2', bcrypt.hash('password2'))
}

@login_manager.user_loader
def load_user(user_id):
    return users.get(int(user_id))

@app.route('/login', methods=['GET', 'POST'])
def login():
    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        user = next((user for user in users.values() if user.username == username), None)
        if user and bcrypt.verify(password, user.password_hash):
            login_user(user)
            return redirect(url_for('protected'))
    return '''
        <form method="post">
            Username: <input type="text" name="username"><br>
            Password: <input type="password" name="password"><br>
            <input type="submit" value="Login">
        </form>
    '''

@app.route('/protected')
@login_required
def protected():
    return f'Hello, {current_user.username}! This is a protected page.'

if __name__ == '__main__':
    app.run(debug=True)