From d1ac07a066fd8acee76fc7dfaa7dd73c7450e2c6 Mon Sep 17 00:00:00 2001
From: Sharad Ahlawat <sharad@ahlawat.com>
Date: Tue, 10 Mar 2020 09:40:19 -0700
Subject: [PATCH] login and logout

---
 accounts/templates/accounts/login.html | 19 ++++++++++++++++++-
 accounts/views.py                      | 14 ++++++++++++--
 producthunt/templates/base.html        | 12 ++++++++++--
 products/templates/products/home.html  |  6 +++++-
 4 files changed, 45 insertions(+), 6 deletions(-)

diff --git a/accounts/templates/accounts/login.html b/accounts/templates/accounts/login.html
index 8e81099..31eb78f 100644
--- a/accounts/templates/accounts/login.html
+++ b/accounts/templates/accounts/login.html
@@ -1,4 +1,21 @@
 {% extends 'base.html' %}
 {% block content %}
-    HI
+    {% if error %}
+        {{ error }}
+        <br />
+        <br />
+    {% endif %}
+    <h1>Login</h1>
+    <form method="POST" action="{% url 'login' %}">
+        {% csrf_token %}
+        Username:
+        <br/>
+        <input type="text" name="username"/>
+        <br/>
+        Password:
+        <br/>
+        <input type="password" name="password"/>
+        <br/><br />
+        <input type="submit" value="Login" class="btn btn-primary">
+    </form>
 {% endblock %}
diff --git a/accounts/views.py b/accounts/views.py
index 03da391..fdccbe0 100644
--- a/accounts/views.py
+++ b/accounts/views.py
@@ -20,8 +20,18 @@ def signup(request):
 
 
 def login(request):
-    return render(request, 'accounts/login.html')
+    if request.method == 'POST':
+        user = auth.authenticate(username=request.POST['username'], password=request.POST['password'])
+        if user is not None:
+            auth.login(request, user)
+            return redirect('home')
+        else:
+            return render(request, 'accounts/login.html', {'error': 'username or password incorrect'})
+    else:
+        return render(request, 'accounts/login.html')
 
 
 def logout(request):
-    return render(request, '/accounts/login.html')
+    if request.method == 'POST':
+        auth.logout(request)
+        return redirect('home')
diff --git a/producthunt/templates/base.html b/producthunt/templates/base.html
index 7531969..3501321 100644
--- a/producthunt/templates/base.html
+++ b/producthunt/templates/base.html
@@ -50,8 +50,16 @@
         </button>
         <div class="collapse navbar-collapse" id="navbarNavAltMarkup">
             <div class="navbar-nav ml-auto">
-                <a class="nav-item nav-link" href="{% url 'home' %}">Sign Up</a>
-                <a class="nav-item nav-link" href="{% url 'home' %}">Login</a>
+                {% if user.is_authenticated %}
+                <a class="nav-item nav-link" href="javascript:{document.getElementById('logout').submit()}">Logout</a>
+                    <form id="logout"  method="POST" action="{% url 'logout' %}">
+                    {% csrf_token %}
+                    <input type="hidden" />
+                    </form>
+                {% else %}
+                <a class="nav-item nav-link" href="{% url 'signup' %}">Sign Up</a>
+                <a class="nav-item nav-link" href="{% url 'login' %}">Login</a>
+                {% endif %}
             </div>
         </div>
     </div>
diff --git a/products/templates/products/home.html b/products/templates/products/home.html
index 8e81099..c2402fa 100644
--- a/products/templates/products/home.html
+++ b/products/templates/products/home.html
@@ -1,4 +1,8 @@
 {% extends 'base.html' %}
 {% block content %}
-    HI
+    {% if error %}
+        {{ error }}
+        <br/>
+        <br/>
+    {% endif %}
 {% endblock %}