created step-10

README.md

@@ -1,3 +1,5 @@
-### Step #9
+### Step #10
 
-A better login page using request.method and request.form (A MultiDict with the parsed form data from POST or PUT requests), whereas request.values combines both form and args.
+Now we write a simple function that checks for the right password and if not return an error context. We're also now using request.form.get()
+
+Also changed the HTML field to password.

hello.py

@@ -3,9 +3,20 @@
 
 @app.route('/login', methods=['POST', 'GET'])
 def login():
+    error = None
     if request.method == 'POST':
-            return "User %s logged in" % request.form['username']
-    return render_template('login.html')
+        if valid_login(request.form.get('username'),
+                        request.form.get('password')):
+            return "Welcome back, %s" % request.form.get('username')
+        else:
+            error = "Incorrect username and password"
+    return render_template('login.html', error=error)
+
+def valid_login(username, password):
+    if username == password:
+        return True
+    else:
+        return False
 
 if __name__ == '__main__':
     app.debug = True

templates/login.html

@@ -3,14 +3,19 @@
 
 <form action="/login" method="POST">
 
+    {% if error %}
+    <p style="color:red;">
+      {{ error }}
+    </p>
+    {% endif %}
+
     <p>
       Username: <input type="text" name="username" />
     </p>
     <p>
-      Password: <input type="text" name="password" />
+      Password: <input type="password" name="password" />
     </p>
 
     <button type="Submit">Login</button>
 
-
 </form>