Understanding how login Works

Akarsh_Hegde · March 4, 2016, 12:04pm

Hey,
So i wanted to do some changes to the login page, thats when i thought its better to understand how the login works . I followed three files login.py login.js login.html . I managed to follow the javascript in login.js to come across this ajax call :

   // Login
login.call = function(args) {
    frappe.freeze();
    $.ajax({
        type: "POST",
        url: "/",
        data: args,
        dataType: "json",
        statusCode: login.login_handlers
    }).always(function(){
        frappe.msgprint(__("login here"));
        frappe.unfreeze();
    });
}

I am not familiar with ajax much, but could make out the args which contains login credentials are passed as a json object. What i need to understand is where is the control passed to ? which function actually checks the validity of credentials ? Also i am unable to find the definition of frappe.unfreeze() function call ? Where are all these defined ?

It would be great if someone would help me understand this !

Many thanks!
Akarsh

rmehta · March 4, 2016, 4:05pm

Its not very straight forward but its here:

github.com

frappe/frappe/blob/develop/frappe/auth.py#L97


      
          				== saved_token
          			)
          		):
          			return
          
          		frappe.flags.disable_traceback = True
          		frappe.throw(_("Invalid Request"), frappe.CSRFTokenError)
          
          	def set_lang(self):
          		frappe.local.lang = get_language()
          
          
          class LoginManager:
          	__slots__ = ("user", "info", "full_name", "user_type", "resume")
          
          	def __init__(self):
          		self.user = None
          		self.info = None
          		self.full_name = None
          		self.user_type = None

github.com

frappe/frappe/blob/develop/frappe/website/js/website.js#L205


      
          		}
          
          		if (opts.always) {
          			opts.always(data);
          		}
          	},
          	show_message: function (text, icon) {
          		if (!icon) icon = "fa fa-refresh fa-spin";
          		frappe.hide_message();
          		$('<div class="message-overlay"></div>')
          			.html(
          				'<div class="content"><i class="' +
          					icon +
          					' text-muted"></i><br>' +
          					text +
          					"</div>"
          			)
          			.appendTo(document.body);
          	},
          	has_permission: function (doctype, docname, perm_type, callback) {
          		return frappe.call({

Akarsh_Hegde · March 4, 2016, 8:42pm

Thanks @rmehta . i could make some sense out of auth.py file, but where does the redirection to the “/desk” take place? i would like to redirect to a another page before the desk.

yashodhan · March 6, 2016, 6:00am

github.com

frappe/frappe/blob/ab8c1affa0fee2a86aed2ede41c3ce8b4d1a785d/frappe/templates/pages/login.py#L16


      
          import frappe.utils
          from frappe.utils.oauth import get_oauth2_authorize_url, get_oauth_keys, login_via_oauth2, login_oauth_user as _login_oauth_user, redirect_post_login
          import json
          from frappe import _
          from frappe.auth import LoginManager
          
          no_cache = True
          
          def get_context(context):
          	if frappe.session.user != "Guest" and frappe.session.data.user_type=="System User":
          		frappe.local.flags.redirect_location = "/desk"
          		raise frappe.Redirect
          
          	# get settings from site config
          	context["title"] = "Login"
          	context["disable_signup"] = frappe.utils.cint(frappe.db.get_value("Website Settings", "Website Settings", "disable_signup"))
          
          	for provider in ("google", "github", "facebook"):
          		if get_oauth_keys(provider):
          			context["{provider}_login".format(provider=provider)] = get_oauth2_authorize_url(provider)
          			context["social_login"] = True

Akarsh_Hegde · March 6, 2016, 1:02pm

Hey @yashodhan I did come across that, but i commented the two lines and gave a ‘return’ instead . The redirection still happens. Any idea why? I was expecting some error instead.

Mohammed_Redha · May 8, 2016, 7:58pm

did you figure out what how to do it?

_Sid · March 22, 2019, 6:09am

Similar topic discussed here.
It lists where the redirection happens, and how to go about changing it.