feat: let flask manage invalid methods on routes

This commit is contained in:
ka 2024-06-15 14:20:13 -03:00
parent 54d8ad46f8
commit 3867885b89
Signed by: ka
GPG Key ID: 77D32BB1496F3FD1

View File

@ -15,7 +15,7 @@ app = Flask(__name__)
app.secret_key = "#^A549639t5@#&$p" app.secret_key = "#^A549639t5@#&$p"
db: Database | None = None db: Database | None = None
@app.route('/auth') @app.get('/auth')
def auth(): def auth():
session["state"] = secrets.token_urlsafe(16) session["state"] = secrets.token_urlsafe(16)
@ -26,11 +26,8 @@ def auth():
"state": session["state"] "state": session["state"]
}) })
@app.route('/callback', methods = ["GET"]) @app.get('/callback')
def callback(): def callback():
if request.method != "GET":
return "I curse you!", 403
if request.args.get("state") != session.pop("state", "fartnugget"): if request.args.get("state") != session.pop("state", "fartnugget"):
return "I banish thee, to the state of Ohio", 403 return "I banish thee, to the state of Ohio", 403