Initial commit - Bolsa app avec Tailwind et authentification

app/routes.py

@@ -0,0 +1,56 @@
+from flask import Blueprint, render_template, request, redirect, url_for, session, flash
+from werkzeug.security import check_password_hash
+from sqlalchemy import text
+from app import db
+from datetime import datetime
+
+main = Blueprint('main', __name__)
+
+@main.route('/', methods=['GET', 'POST'])
+def index():
+    if 'user_id' in session:
+        return redirect(url_for('main.menu'))
+
+    if 'login_attempts' not in session:
+        session['login_attempts'] = 0
+
+    if request.method == 'POST':
+        user_login = request.form.get('login')
+        user_pass = request.form.get('pass')
+
+        query = text("SELECT id, pass AS user_pass, nom, prenom FROM login WHERE login = :login AND actif = 1")
+        result = db.session.execute(query, {"login": user_login}).fetchone()
+
+        if result and check_password_hash(result.user_pass, user_pass):
+            session.pop('login_attempts', None)
+            session['user_id'] = result.id
+            session['user_name'] = f"{result.prenom} {result.nom}"
+            return redirect(url_for('main.menu'))
+        else:
+            session['login_attempts'] += 1
+            
+            if session['login_attempts'] >= 3:
+                session.pop('login_attempts', None)
+                return redirect('https://giraud-finance.com')
+            
+            essais_restants = 3 - session['login_attempts']
+            flash(f"Identifiant ou mot de passe incorrect. Il vous reste {essais_restants} essai(s).", "danger")
+
+    return render_template('index.html')
+
+@main.route('/menu')
+def menu():
+    if 'user_id' not in session:
+        return redirect(url_for('main.index'))
+    return render_template('menu.html')
+
+@main.route('/logout')
+def logout():
+    session.clear()
+    return redirect(url_for('main.index'))
+
+@main.route('/gestion-utilisateurs')
+def gestion_utilisateurs():
+    if 'user_id' not in session:
+        return redirect(url_for('main.index'))
+    return render_template('gestion_utilisateurs.html')