fast域名密码

from flask import Flask, request, jsonify
import random

app = Flask(__name__)

# 模拟用户数据库
users = {
    'user1': {'password': 'password1', 'otp_secret': 'secret1'}
}

@app.route('/login', methods=['POST'])
def login():
    data = request.json
    username = data['username']
    password = data['password']
    otp = data['otp']

    if username in users and users[username]['password'] == password:
        # 验证OTP
        if verify_otp(users[username]['otp_secret'], otp):
            return jsonify({'message': 'Login successful'})
        else:
            return jsonify({'message': 'Invalid OTP'}), 401
    else:
        return jsonify({'message': 'Invalid credentials'}), 401

def verify_otp(secret, otp):
    # 这里可以使用第三方库生成和验证OTP
    # 例如使用pyotp库
    # from pyotp import TOTP
    # totp = TOTP(secret)
    # return totp.verify(otp)

    # 简单示例，随机生成一个OTP进行验证
    generated_otp = str(random.randint(100000, 999999))
    return generated_otp == otp

if __name__ == '__main__':
    app.run(debug=True)