from PDAPI import *


__metadata__ = {
    "methods": ["POST"],
    "blueprint": "GERP",
    "permission": 4.0,
    "attributes": [],
    "limit": "1 per second",
    "form": [
        {"Name": "UserUUID", "Type": "UUID"},
        {"Name": "UserPassword", "Type": "str", "MaxLen": 256},
    ]
}
def HandleRequest():
    User: GERPUser
    UserUUID = flask.request.form.get("UserUUID")
    UserPassword = flask.request.form.get("UserPassword")
    if not (User := GERPUser.query.filter(GERPUser.UserUUID == Get16toBytes(UserUUID)).first()):
        return {"code": 1, "msg": "目标用户 不存在"}
    if not User.CheckPassword(UserPassword):
        return {"code": 1, "msg": "密码错误"}
    return {"code": 0, "msg": "密码正确"}