foo

gistfile1.py

def authenticated(func):
    def wrapped_func():
        if 'userid' in session:
            return func(user=db_session.query(User).filter(User.id == session['userid']).one())
        else:
            return redirect('/user/login')
    return wrapped_func

@app.route('/')
@authenticated
def index(**vars):
    print "Index"
    return render_template('index.html', title="Home", **vars)

@app.route('/user/login', methods=["GET", "POST"])
def login():
    if request.method == 'POST':
        name = request.form['username']
        try:
            user = db_session.query(User).filter(User.name == name).one()
        except NoResultFound:
            root = Category('Root', 'Root category')
            db_session.add(root)
            user = User(name, root)
            db_session.add(user)
            db_session.commit()
        session['userid'] = user.id
        return redirect('/')
    else:
        return render_template('login.html', title="Login")

@app.route('/user/logout', methods=["GET"])
@authenticated
def logout(**vars):
    print "Logging out"
    del(session['userid'])
    return redirect('/user/login')