from flask import Flask, request, jsonify app = Flask(__name__) # 模拟数据库 users = {} @app.route('/register', methods=['POST']) def register(): username = request.json['username'] password = request.json['password'] if username in users: return jsonify({'message': 'User already exists'}), 409 users[username] = password return jsonify({'message': 'User registered successfully'}), 201 @app.route('/login', methods=['POST']) def login(): username = request.json['username'] password = request.json['password'] if username not in users or users[username] != password: return jsonify({'message': 'Invalid credentials'}), 401 return jsonify({'message': 'Login successful'}), 200 if __name__ == '__main__': app.run(debug=True)
def require_permission(permission): def decorator(func): def wrapper(*args, **kwargs): user = get_current_user() if user['permission'] < permission: return jsonify({'message': 'Insufficient permissions'}), 403 return func(*args, **kwargs) return wrapper return decorator