Refactor routes Flask en Blueprints

app/routes/auth.py

@@ -0,0 +1,57 @@
+from flask import Blueprint, flash, redirect, render_template, request, session, url_for
+from sqlalchemy import text
+from werkzeug.security import check_password_hash
+
+from app import db
+
+auth_bp = Blueprint("auth", __name__)
+
+
+@auth_bp.route("/", methods=["GET", "POST"])
+def index():
+    if "user_id" in session:
+        return redirect(url_for("menu.menu"))
+
+    if "login_attempts" not in session:
+        session["login_attempts"] = 0
+
+    if request.method == "POST":
+        user_login = request.form.get("login")
+        user_pass = request.form.get("pass")
+
+        query = text(
+            "SELECT id, pass AS user_pass, nom, prenom FROM login "
+            "WHERE login = :login AND actif = 1"
+        )
+        result = db.session.execute(query, {"login": user_login}).fetchone()
+
+        if result and check_password_hash(result.user_pass, user_pass):
+            # Régénération de session : protection contre la fixation de session
+            session.clear()
+            session["user_id"] = result.id
+            session["user_name"] = f"{result.prenom} {result.nom}"
+            session["login_attempts"] = 0
+            return redirect(url_for("menu.menu"))
+        else:
+            session["login_attempts"] += 1
+            essais = session["login_attempts"]
+            if essais >= 3:
+                session["login_attempts"] = 0
+                flash(
+                    "Trop de tentatives. Réessayez dans quelques instants.",
+                    "danger",
+                )
+            else:
+                flash(
+                    f"Identifiant ou mot de passe incorrect. "
+                    f"Il vous reste {3 - essais} essai(s).",
+                    "danger",
+                )
+
+    return render_template("index.html")
+
+
+@auth_bp.route("/logout")
+def logout():
+    session.clear()
+    return redirect(url_for("auth.index"))