fix: keep buypid when wrong touchkey is entered
All checks were successful
/ test (push) Successful in 1m3s
/ codestyle (push) Successful in 1m24s

This commit is contained in:
s3lph 2024-12-07 22:15:48 +01:00
parent 8879add39b
commit e9b05fa4f4
Signed by: s3lph
GPG key ID: 0AA29A52FB33CFB5

View file

@ -45,7 +45,10 @@ def touchkey_page():
user: User = db.login(str(request.params.username), touchkey=str(request.params.touchkey))
except AuthenticationError:
# Reload the touchkey login page on failure
redirect(f'/touchkey?uid={str(request.params.uid)}&username={str(request.params.username)}')
url = f'/touchkey?uid={str(request.params.uid)}&username={str(request.params.username)}'
if request.params.buypid:
url += f'&buypid={request.params.buypid}'
redirect(url)
# Set the user ID session variable
session.put(session_id, 'authenticated_user', user.id)
# Set the authlevel session variable (0 = none, 1 = touchkey, 2 = password login)