用户访问管理试用

from flask import Flask, request, jsonify
from functools import wraps

app = Flask(__name__)

# 模拟用户数据库
users = {
    'user1': {'password': 'pass1', 'role': 'admin'},
    'user2': {'password': 'pass2', 'role': 'user'}
}

def require_role(role):
    def decorator(f):
        @wraps(f)
        def decorated_function(*args, **kwargs):
            username = request.authorization.username
            password = request.authorization.password
            if username in users and users[username]['password'] == password:
                if users[username]['role'] == role:
                    return f(*args, **kwargs)
                else:
                    return jsonify({'message': 'Unauthorized'}), 403
            else:
                return jsonify({'message': 'Forbidden'}), 401
        return decorated_function
    return decorator

@app.route('/admin')
@require_role('admin')
def admin_only():
    return jsonify({'message': 'Welcome, Admin!'})

@app.route('/user')
@require_role('user')
def user_only():
    return jsonify({'message': 'Welcome, User!'})

if __name__ == '__main__':
    app.run(debug=True)