检查用户是否获取角色

from flask import Flask, request, jsonify

app = Flask(__name__)

# 模拟用户数据库
users = {
    'user1': {'password': 'pass1', 'roles': ['admin']},
    'user2': {'password': 'pass2', 'roles': ['user']}
}

def authenticate(username, password):
    if username in users and users[username]['password'] == password:
        return users[username]
    return None

def check_role(user, role):
    return role in user['roles']

@app.route('/login', methods=['POST'])
def login():
    data = request.get_json()
    username = data['username']
    password = data['password']
    user = authenticate(username, password)
    if user:
        return jsonify({'message': 'Login successful', 'user': user}), 200
    else:
        return jsonify({'message': 'Invalid credentials'}), 401

@app.route('/check_role', methods=['POST'])
def check_role_route():
    data = request.get_json()
    username = data['username']
    role = data['role']
    user = authenticate(username, data['password'])
    if user and check_role(user, role):
        return jsonify({'message': f'{username} has the {role} role'}), 200
    else:
        return jsonify({'message': f'{username} does not have the {role} role'}), 403

if __name__ == '__main__':
    app.run(debug=True)