完成后端架构重构等

backend/blueprints/auth.py

@@ -5,7 +5,7 @@ from flask import Blueprint, request, redirect, url_for, session, jsonify
 from werkzeug.security import check_password_hash
 
 from utils.db import get_db
-from utils.auth import login_required, is_session_user_valid, is_current_user_admin
+from utils.auth import login_required, is_session_user_valid
 from utils.render import render_html
 
 auth = Blueprint('auth', __name__, url_prefix='')
@@ -13,7 +13,7 @@ auth = Blueprint('auth', __name__, url_prefix='')
 
 @auth.route('/login', methods=['GET', 'POST'])
 def login():
-    if session.get('user_id') and is_session_user_valid() and is_current_user_admin():
+    if session.get('user_id') and is_session_user_valid():
         return redirect(url_for('main.admin_page'))
     if request.method == 'POST':
         data = request.get_json() if request.is_json else request.form
@@ -31,22 +31,17 @@ def login():
                     (username,)
                 )
                 row = cur.fetchone()
+            conn.close()
             if row and check_password_hash(row['password_hash'], password):
                 session.permanent = True
                 session['user_id'] = row['id']
                 session['username'] = username
-                if not row.get('is_admin'):
-                    session.clear()
-                    if request.is_json:
-                        return jsonify({'success': False, 'error': '需要管理员权限'}), 403
-                    return render_html('login.html', error='需要管理员权限')
                 if request.is_json:
                     return jsonify({'success': True, 'redirect': url_for('main.admin_page')})
                 return redirect(url_for('main.admin_page'))
-            conn.close()
-        except Exception as e:
+        except Exception as exc:
             if request.is_json:
-                return jsonify({'success': False, 'error': str(e)})
+                return jsonify({'success': False, 'error': str(exc)})
             return render_html('login.html', error='登录失败，请稍后重试')
         if request.is_json:
             return jsonify({'success': False, 'error': '用户名或密码错误'})
@@ -57,7 +52,7 @@ def login():
 @auth.route('/api/auth/check')
 @login_required
 def api_auth_check():
-    """校验登录状态，用于页面加载时判断是否已登录"""
+    """校验登录状态，用于页面加载时判断是否已登录。"""
     if not session.get('user_id'):
         return jsonify({'logged_in': False})
     try:
@@ -66,7 +61,7 @@ def api_auth_check():
             cur.execute("SELECT machine, is_admin FROM users WHERE id = %s", (session['user_id'],))
             row = cur.fetchone()
         conn.close()
-        if not row or not row.get('is_admin'):
+        if not row:
             return jsonify({'logged_in': False})
     except Exception:
         return jsonify({'logged_in': False})