We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 405f2a4 commit 0770697Copy full SHA for 0770697
1 file changed
cms/server/contest/handlers/api.py
@@ -45,7 +45,22 @@ class ApiLoginHandler(ContestHandler):
45
"""
46
@multi_contest
47
def post(self):
48
+ current_user = self.get_current_user()
49
+
50
username = self.get_argument("username", "")
51
52
+ if current_user is not None:
53
+ if username != "" and current_user.user.username != username:
54
+ self.json(
55
+ {"error": f"Logged in as {current_user.user.username} but trying to login as {username}"}, 400)
56
+ else:
57
+ cookie_name = self.contest.name + "_login"
58
+ cookie = self.get_secure_cookie(cookie_name)
59
+ self.json({"login_data": self.request.headers.get(
60
+ "X-CMS-Authorization", cookie if cookie is not None else "Already-Logged-In")})
61
62
+ return
63
64
password = self.get_argument("password", "")
65
66
try:
0 commit comments