From 5e80077fae6495901e9c7576995ded06a1dde5c8 Mon Sep 17 00:00:00 2001
From: Alon Levy <alon@pobox.com>
Date: Mon, 12 Jan 2015 12:52:40 +0200
Subject: client/server: login is using POST, so use POST, not XMLHttpRequest

TODO: Logout requires styling plus only to appear if logged in.
---
 src/server/rz_api.py | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'src/server')

diff --git a/src/server/rz_api.py b/src/server/rz_api.py
index 3b6d9585..fc2e2343 100644
--- a/src/server/rz_api.py
+++ b/src/server/rz_api.py
@@ -170,7 +170,7 @@ def index():
 def login():
 
     def sanitize_input(req):
-        req_json = request.get_json()
+        req_json = request.form.to_dict()
         u = req_json['username']
         p = req_json['password']
         return u, p
@@ -178,6 +178,10 @@ def login():
     if request.method == 'POST':
         try:
             u, p = sanitize_input(request)
+        except:
+            log.warn('failed to sanitize inputs. request: %s' % request)
+            return render_template('login.html', login_failed=True)
+        try:
             crypt_util.validate_login(flask.current_app.rz_config, u, p)
         except Exception as e:
             # login failed
-- 
cgit v1.3.1