Commit inicial - upload de todos os arquivos da pasta

app/routes/auth_routes.py

@@ -0,0 +1,45 @@
+"""Rotas de login/logout."""
+
+from __future__ import annotations
+
+from fastapi import APIRouter, Form, Request
+from starlette.responses import RedirectResponse
+
+from .. import auth
+from ..templating import flash, render
+
+router = APIRouter()
+
+
+@router.get("/login")
+def login_form(request: Request):
+    if auth.current_user(request):
+        return RedirectResponse("/", status_code=303)
+    return render(request, "login.html", hide_nav=True)
+
+
+@router.post("/login")
+def login_submit(
+    request: Request,
+    username: str = Form(...),
+    password: str = Form(...),
+    csrf_token: str = Form(""),
+):
+    if not auth.check_csrf(request, csrf_token):
+        flash(request, "Sessão expirada. Tente novamente.", "error")
+        return RedirectResponse("/login", status_code=303)
+
+    if auth.authenticate(username.strip(), password):
+        auth.login_session(request, username.strip())
+        flash(request, "Bem-vindo de volta.", "success")
+        return RedirectResponse("/", status_code=303)
+
+    flash(request, "Usuário ou senha inválidos.", "error")
+    return RedirectResponse("/login", status_code=303)
+
+
+@router.post("/logout")
+def logout(request: Request, csrf_token: str = Form("")):
+    if auth.check_csrf(request, csrf_token):
+        auth.logout_session(request)
+    return RedirectResponse("/login", status_code=303)