From 472dace1566581ccc6b2332778daa925e1ba0c01 Mon Sep 17 00:00:00 2001
From: Benjamyn Love <benjamyn.love@gmail.com>
Date: Wed, 8 Mar 2023 11:43:10 +1100
Subject: [PATCH] It works

---
 .gitignore                           |   8 ++
 __init__.py                          |  42 ++++++++
 __pycache__/__init__.cpython-310.pyc | Bin 0 -> 742 bytes
 __pycache__/auth.cpython-310.pyc     | Bin 0 -> 673 bytes
 __pycache__/main.cpython-310.pyc     | Bin 0 -> 542 bytes
 __pycache__/models.cpython-310.pyc   | Bin 0 -> 500 bytes
 auth.py                              |  67 ++++++++++++
 chatbot.py                           | 132 ++++++++++++++++++++++++
 config/__init__.py                   |   0
 config/db.py.sample                  |   1 +
 main.py                              | 146 +++------------------------
 models.py                            |   9 ++
 requirements.txt                     |   5 +-
 templates/base.html                  |  56 ++++++++++
 templates/index.html                 |  10 ++
 templates/login.html                 |  36 +++++++
 templates/profile.html               |   8 ++
 templates/signup.html                |  42 ++++++++
 18 files changed, 427 insertions(+), 135 deletions(-)
 create mode 100644 __init__.py
 create mode 100644 __pycache__/__init__.cpython-310.pyc
 create mode 100644 __pycache__/auth.cpython-310.pyc
 create mode 100644 __pycache__/main.cpython-310.pyc
 create mode 100644 __pycache__/models.cpython-310.pyc
 create mode 100644 auth.py
 create mode 100644 chatbot.py
 create mode 100644 config/__init__.py
 create mode 100644 config/db.py.sample
 create mode 100644 models.py
 create mode 100644 templates/base.html
 create mode 100644 templates/index.html
 create mode 100644 templates/login.html
 create mode 100644 templates/profile.html
 create mode 100644 templates/signup.html

diff --git a/.gitignore b/.gitignore
index 1da188f..ec9d63a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,8 +1,16 @@
 # Configs
 config/service-acct.json
+config/db.py
 
 # Logs
 *.log
 
 # JetBrains stuff
 .idea/
+
+# Python stuff
+__pycache__/
+venv/
+
+# Secrets
+*.secret
diff --git a/__init__.py b/__init__.py
new file mode 100644
index 0000000..3c60dd7
--- /dev/null
+++ b/__init__.py
@@ -0,0 +1,42 @@
+from flask import Flask
+from flask_sqlalchemy import SQLAlchemy
+from flask_login import LoginManager
+from .config import db as db_config
+
+db = SQLAlchemy()
+
+def create_app():
+    app = Flask(__name__)
+
+    app.config['SECRET_KEY'] = '//'
+    app.config["SQLALCHEMY_DATABASE_URI"] = db_config.SQL_URI
+
+    db.init_app(app)
+    login_manager = LoginManager()
+    login_manager.login_view = 'auth.login'
+    login_manager.init_app(app)
+
+    from .models import User
+
+    @login_manager.user_loader
+    def load_user(user_id):
+        return User.query.get(int(user_id))
+    
+    from . import models
+    with app.app_context():
+        print("Applying the DB models")
+        db.create_all()
+
+    # blueprint for auth routes in our app
+    from .auth import auth as auth_blueprint
+    app.register_blueprint(auth_blueprint)
+
+    # blueprint for non-auth parts of app
+    from .main import main as main_blueprint
+    app.register_blueprint(main_blueprint)
+
+    # blueprint for chatbot
+    from .chatbot import chatbot as chatbot_blueprint
+    app.register_blueprint(chatbot_blueprint)
+
+    return app
diff --git a/__pycache__/__init__.cpython-310.pyc b/__pycache__/__init__.cpython-310.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..35d6fc6a31e27d2bcdc865cab0a72bf75c93922b
GIT binary patch
literal 742
zcmYjP&2G~`5T5m49LKFnIUpfkAPCh0ZYZiqQzH<if~E+?LRvZAZR4{3VZ9Nga!%on
z#1k|}UddNZeT80N)&<(NX8i5WH#^^qw%FM40N2MWhfNKDUwU(U;Tb$fs~)0bz=(j1
zM1*K;2qQBilK?kY5LwJ*);EZ3W{;uoTp}O(q_JO!xcY>^8^1dkie$#KMWSQ>mW9AY
z8=+M{&?!)4MV45rhBJd117K#0tN|$V!m44d>)Xr`cIGS**KpBU!*`$PxVr`dA5fo#
z-wM^`?qjGPeL<f7CTN)35#6l2G}>IRHvZn|ieA=RVh-Nu)uukJ0lVoQo*O}cErg?^
z@R+_1C+Byo&mvX)Sr7zlx^umW?&%&6MlZuR6S_Y<9_|gtA$@=J>XKkzI0Gju7#9^H
zE1s*F{%3KT_kF47+_;qHamFcaoTSK4($mIZ)5uNpRMEIB8<38s^$=4eDE?JNULtv{
zIE{sn9Ua}4{4}i;mvk!Typ(CKq@HizYD`RQuZT8v`5QvCsb$>ke}de?l&hz~tjKsU
z<$17QB=d~tstVr9;*2LPNE5!;E7X&K(pDthDHqLuMP;ewR`=1l#4|iJUwiW4w{LmG
zH$7q*avQ^keW$Tc^h0R}5pA`Y;#A}77b8t%$)0wa->SRi?%-MD4sg12!FTnrE8VgW
IK5?+-9~$Ygvj6}9

literal 0
HcmV?d00001

diff --git a/__pycache__/auth.cpython-310.pyc b/__pycache__/auth.cpython-310.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..9a55c0495f02b64804407ec7b2e02b6382a24385
GIT binary patch
literal 673
zcma)3Jx{|h5Vf7}q#p==MV3ZlMhF$=3W+UCNMq9m;v{mMp<T-lfsw!Dm8mlW5))@f
zDqRqqbmzO%v){XOGaiQs?CjH}3yjdaE{@HD;tIUGhd>d<72-I>oTLOJN~l#?+)izb
z7^XIJb|iI~`{GgO6;qdb&uE8J-*kNF1T-|Az;q($jOf^OLOQua@pKO?C?+bHS3PS*
zSxYq)tfow4lJU06CEJ5c6k|o`QrUSg*IPHKnpIgB`tGq2D6YXjd<YV>?=WzX#Wpnf
z*;?}I4GTTu8xjE=CVVByy5THYvO2kGik`DtcFC=19$8_MvS6EeBhM4fK5IA1G4HvW
zN^|-|L~v}qq$^i--~K90cmUIaq5)_W39a@=&5-F&Qtp7#xftm%h5#(U-t_VxECcW_
zmH{<6u;^?NN6LAq^6p9K3C+$F5)S0b&$2q_EX#!6fN}(gVP*qHpfE2TwtF;>f598t
XSL{;%Xm<+X1dVV=d=g^c(mui8c@l?$

literal 0
HcmV?d00001

diff --git a/__pycache__/main.cpython-310.pyc b/__pycache__/main.cpython-310.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..b4cce961642c0b89fe9d0de0374d03cbac1d6880
GIT binary patch
literal 542
zcmZ`#y-ve05VoD4I%!&XjV_JEj1Vf!6%t#PD2=abAWkADk!aWQATahxcn7acosk$S
z2F|7u9pEJ2&!@ZlzH>bqg#_*G(-&VD-%W994i?w=+BrHw1TBfA36(5iln5rA(vfcB
zQUX-C;B8srga0xR-YXTp7(A0LO}IrkB7q1k5{ThFnM8ZsNhVAOv$BUq6;-Ft6jTCK
z+JS7!tb;u@EmSkH(5}pi>OkY%jGY?8;s)ObN7tdqEyeY0z6lFl_B35}vfNQ+ZrKrK
z4z}(P$E#XGynrgct@B<&)wS`RsvjV?Ns+^PR(BV%A)YpC?b&_4p)#DDsR+Y{$Bn9&
zMG5~ZQ%0Fl6dgOQCKVw1tLG;hBBlq&Hmh}Hy2j|{lTdrhGHV}|p|=NVqC7Lf)3nMY
oq^UCUw5RI611ryt{>j2GWi9#=uFNO5hT)t<G-RBGlsjYk4S+FnR{#J2

literal 0
HcmV?d00001

diff --git a/__pycache__/models.cpython-310.pyc b/__pycache__/models.cpython-310.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..c92bc2e854be2279f756804d2e91a9f679f993b1
GIT binary patch
literal 500
zcmY*WJxc>Y5Z&GT$eBb?5r2T)H6B`vgeZuGArNh@SuU9&Uc8TFH;1Iw*8h-{{-teg
z%umqD**oxK;LXl^yN{V=%H7>Iqv(J7VCa0e<Zrk{dIWt;2^jE<<viw`T{95iyfAQ(
z&&0D6JK&C3=xsSY47m|7o>28KJYqe99#TRUb6~MRXXX+-;2>T_>^FSf0%yZXb4d%(
zS<{<F+wgejhkF}NybV6JZW;Gpqq?K!ow-W$M6Ki_uC_qUNb{>AT~wHUIE)R#jtQhJ
zk{qQpZ7K5-s?641DHm0eH8)C-)%cfXR^^3h-4silqB0@{<BygqEvCl9JV`SX%oDAj
zN(IKX);Fg1$y%qc)99hhF&bkLU6qq6$6~3Yp(<xMsf%=itA4pWi)aYU^vQgsXhdeA
r?Q#OP#}Bzhtq(%iux2vv);enSw_j5okkJI^&A%?}PPAQRmmP_3v@m%4

literal 0
HcmV?d00001

diff --git a/auth.py b/auth.py
new file mode 100644
index 0000000..32ce9f0
--- /dev/null
+++ b/auth.py
@@ -0,0 +1,67 @@
+from flask import Blueprint, render_template, redirect, url_for, request, flash
+from werkzeug.security import generate_password_hash, check_password_hash
+from flask_login import login_user, login_required, logout_user
+from .models import User
+from . import db
+
+auth = Blueprint('auth', __name__)
+
+@auth.route('/login')
+def login():
+    return render_template('login.html')
+
+@auth.route('/login', methods=['POST'])
+def login_post():
+    email = request.form.get('email')
+    password = request.form.get('password')
+    remember = True if request.form.get('remember') else False
+
+    user = User.query.filter_by(email=email).first()
+
+    # Check if the user actually exists
+    # Take the supplied password and hash it, compare it to the hashed password
+    # If they match we gucci
+    if not user or not check_password_hash(user.password, password):
+        flash('Please check your login details and try again')
+        return redirect(url_for('auth.login'))
+
+    # If we get here we are gucci
+    login_user(user, remember=remember)
+    return redirect(url_for('main.profile'))
+
+
+@auth.route('/signup')
+def signup():
+    return render_template('signup.html')
+
+@auth.route('/signup', methods=['POST'])
+def signup_post():
+    email = request.form.get('email')
+    name = request.form.get('name')
+    password = request.form.get('password')
+    google_id = request.form.get('google_id')
+
+    user = User.query.filter_by(email=email).first()
+
+    if user:
+        flash('Email already exists for user')
+        return redirect(url_for('auth.signup'))
+
+    user = User.query.filter_by(google_id=google_id).first()
+    
+    if user:
+        flash('Google ID already in use')
+        return redirect(url_for('auth.signup'))
+
+    new_user = User(email=email, name=name, password=generate_password_hash(password, method='sha256'), google_id=google_id)
+
+    db.session.add(new_user)
+    db.session.commit()
+    # Code to validate and add the user to the database
+    return redirect(url_for('auth.login'))
+
+@auth.route('/logout')
+@login_required
+def logout():
+    logout_user()
+    return redirect(url_for('main.index'))
diff --git a/chatbot.py b/chatbot.py
new file mode 100644
index 0000000..7369ed0
--- /dev/null
+++ b/chatbot.py
@@ -0,0 +1,132 @@
+# Copyright 2017 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# pylint: disable=invalid-name
+"""
+Hangouts Chat bot that responds to events and messages from a room asynchronously.
+"""
+
+# [START async-bot]
+
+
+import logging
+from os import environ
+
+from flask import Blueprint, render_template, request, json
+from google.oauth2 import service_account
+from googleapiclient.discovery import build
+
+logging.basicConfig(filename='example.log', level=logging.DEBUG)
+
+chatbot = Blueprint('chatbot', __name__)
+
+
+scopes = ['https://www.googleapis.com/auth/chat.bot']
+credentials = service_account.Credentials.from_service_account_file('./config/service-acct.json')
+# credentials, project_id = google.auth.default()
+credentials = credentials.with_scopes(scopes=scopes)
+chat = build('chat', 'v1', credentials=credentials)
+
+
+@chatbot.route('/bot/', methods=['POST'])
+def home_post():
+    """Respond to POST requests to this endpoint.
+
+    All requests sent to this endpoint from Hangouts Chat are POST
+    requests.
+    """
+
+    event_data = request.get_json()
+    logging.debug(event_data)
+    resp = None
+
+    # If the bot is removed from the space, it doesn't post a message
+    # to the space. Instead, log a message showing that the bot was removed.
+    if event_data['type'] == 'REMOVED_FROM_SPACE':
+        logging.info('Bot removed from  %s', event_data['space']['name'])
+        return json.jsonify({})
+
+    resp = format_response(event_data)
+    space_name = event_data['space']['name']
+    send_async_response(resp, space_name)
+
+    # Return empty jsom response since message already sent via REST API
+    return json.jsonify({})
+
+
+# [START async-response]
+
+def send_async_response(response, space_name):
+    """Sends a response back to the Hangouts Chat room asynchronously.
+
+    Args:
+      response: the response payload
+      space_name: The URL of the Hangouts Chat room
+
+    """
+    chat.spaces().messages().create(
+        parent=space_name,
+        body=response).execute()
+
+
+# [END async-response]
+
+def format_response(event):
+    """Determine what response to provide based upon event data.
+
+    Args:
+      event: A dictionary with the event data.
+
+    """
+
+    event_type = event['type']
+
+    text = ""
+    sender_name = event['user']['displayName']
+
+    # Case 1: The bot was added to a room
+    if event_type == 'ADDED_TO_SPACE' and event['space']['type'] == 'ROOM':
+        text = 'Thanks for adding me to {}!'.format(event['space']['displayName'])
+
+    # Case 2: The bot was added to a DM
+    elif event_type == 'ADDED_TO_SPACE' and event['space']['type'] == 'DM':
+        text = 'Thanks for adding me to a DM, {}!'.format(sender_name)
+
+    elif event_type == 'MESSAGE':
+        text = 'Your message, {}: "{}"'.format(sender_name, event['message']['text'])
+
+    response = {'text': text}
+
+    # The following three lines of code update the thread that raised the event.
+    # Delete them if you want to send the message in a new thread.
+    if event_type == 'MESSAGE' and event['message']['thread'] is not None:
+        thread_id = event['message']['thread']
+        response['thread'] = thread_id
+
+    return response
+
+
+# [END async-bot]
+
+@chatbot.route('/bot/', methods=['GET'])
+def home_get():
+    """Respond to GET requests to this endpoint.
+
+    This function responds to requests with a simple HTML landing page for this
+    application Engine instance.
+    """
+
+    return render_template('home.html')
+
+
diff --git a/config/__init__.py b/config/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/config/db.py.sample b/config/db.py.sample
new file mode 100644
index 0000000..759d215
--- /dev/null
+++ b/config/db.py.sample
@@ -0,0 +1 @@
+SQL_URI = "sqlite:///database.db"
diff --git a/main.py b/main.py
index ac2b4ee..e9d9d4e 100644
--- a/main.py
+++ b/main.py
@@ -1,137 +1,15 @@
-# Copyright 2017 Google Inc.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# pylint: disable=invalid-name
-"""
-Hangouts Chat bot that responds to events and messages from a room asynchronously.
-"""
+from flask import Blueprint, render_template
+from flask_login import login_required, current_user
+from . import db
 
-# [START async-bot]
+main = Blueprint('main', __name__)
+
+@main.route('/')
+def index():
+    return render_template('index.html')
 
 
-import logging
-from os import environ
-
-from flask import Flask, render_template, request, json
-from google.oauth2 import service_account
-from googleapiclient.discovery import build
-
-logging.basicConfig(filename='example.log', level=logging.DEBUG)
-
-application = Flask(__name__)
-
-logging.info(environ)
-
-scopes = ['https://www.googleapis.com/auth/chat.bot']
-credentials = service_account.Credentials.from_service_account_file('./config/service-acct.json')
-# credentials, project_id = google.auth.default()
-credentials = credentials.with_scopes(scopes=scopes)
-chat = build('chat', 'v1', credentials=credentials)
-
-
-@application.route('/', methods=['POST'])
-def home_post():
-    """Respond to POST requests to this endpoint.
-
-    All requests sent to this endpoint from Hangouts Chat are POST
-    requests.
-    """
-
-    event_data = request.get_json()
-    logging.debug(event_data)
-    resp = None
-
-    # If the bot is removed from the space, it doesn't post a message
-    # to the space. Instead, log a message showing that the bot was removed.
-    if event_data['type'] == 'REMOVED_FROM_SPACE':
-        logging.info('Bot removed from  %s', event_data['space']['name'])
-        return json.jsonify({})
-
-    resp = format_response(event_data)
-    space_name = event_data['space']['name']
-    send_async_response(resp, space_name)
-
-    # Return empty jsom response since message already sent via REST API
-    return json.jsonify({})
-
-
-# [START async-response]
-
-def send_async_response(response, space_name):
-    """Sends a response back to the Hangouts Chat room asynchronously.
-
-    Args:
-      response: the response payload
-      space_name: The URL of the Hangouts Chat room
-
-    """
-    chat.spaces().messages().create(
-        parent=space_name,
-        body=response).execute()
-
-
-# [END async-response]
-
-def format_response(event):
-    """Determine what response to provide based upon event data.
-
-    Args:
-      event: A dictionary with the event data.
-
-    """
-
-    event_type = event['type']
-
-    text = ""
-    sender_name = event['user']['displayName']
-
-    # Case 1: The bot was added to a room
-    if event_type == 'ADDED_TO_SPACE' and event['space']['type'] == 'ROOM':
-        text = 'Thanks for adding me to {}!'.format(event['space']['displayName'])
-
-    # Case 2: The bot was added to a DM
-    elif event_type == 'ADDED_TO_SPACE' and event['space']['type'] == 'DM':
-        text = 'Thanks for adding me to a DM, {}!'.format(sender_name)
-
-    elif event_type == 'MESSAGE':
-        text = 'Your message, {}: "{}"'.format(sender_name, event['message']['text'])
-
-    response = {'text': text}
-
-    # The following three lines of code update the thread that raised the event.
-    # Delete them if you want to send the message in a new thread.
-    if event_type == 'MESSAGE' and event['message']['thread'] is not None:
-        thread_id = event['message']['thread']
-        response['thread'] = thread_id
-
-    return response
-
-
-# [END async-bot]
-
-@application.route('/', methods=['GET'])
-def home_get():
-    """Respond to GET requests to this endpoint.
-
-    This function responds to requests with a simple HTML landing page for this
-    application Engine instance.
-    """
-
-    return render_template('home.html')
-
-
-if __name__ == '__main__':
-    # This is used when running locally. Gunicorn is used to run the
-    # application on Google application Engine. See entrypoint in application.yaml.
-    application.run(host='127.0.0.1', port=8080, debug=True)
+@main.route('/profile')
+@login_required
+def profile():
+    return render_template('profile.html', name=current_user.name, google_id=current_user.google_id)
diff --git a/models.py b/models.py
new file mode 100644
index 0000000..15bbef0
--- /dev/null
+++ b/models.py
@@ -0,0 +1,9 @@
+from flask_login import UserMixin
+from . import db
+
+class User(UserMixin, db.Model):
+    id = db.Column(db.Integer, primary_key=True)
+    email = db.Column(db.String(100), unique=True)
+    password = db.Column(db.String(100))
+    name = db.Column(db.String(1000))
+    google_id = db.Column(db.String(30), unique=True)
diff --git a/requirements.txt b/requirements.txt
index ed472ea..8e8f6ab 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,4 +1,7 @@
 Flask~=2.2.3
 google-api-python-client
 google-auth
-google
\ No newline at end of file
+google
+mysqlclient
+flask-login
+flask_sqlalchemy
diff --git a/templates/base.html b/templates/base.html
new file mode 100644
index 0000000..69bfdbc
--- /dev/null
+++ b/templates/base.html
@@ -0,0 +1,56 @@
+<!DOCTYPE html>
+<html>
+
+<head>
+    <meta charset="utf-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>Flask Auth Example</title>
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/bulma/0.7.2/css/bulma.min.css" />
+</head>
+
+<body>
+    <section class="hero is-primary is-fullheight">
+
+        <div class="hero-head">
+            <nav class="navbar">
+                <div class="container">
+                    <div id="navbarMenuHeroA" class="navbar-menu">
+                        <div class="navbar-end">
+                            <a href="{{ url_for('main.index') }}" class="navbar-item">
+                                Home
+                            </a>
+			    {% if current_user.is_authenticated %}
+                            <a href="{{ url_for('main.profile') }}" class="navbar-item">
+                                Profile
+                            </a>
+			    {% endif %}
+			    {% if not current_user.is_authenticated %}
+                            <a href="{{ url_for('auth.login') }}" class="navbar-item">
+                                Login
+                            </a>
+                            <a href="{{ url_for('auth.signup') }}" class="navbar-item">
+                                Sign Up
+                            </a>
+			    {% endif %}
+			    {% if current_user.is_authenticated %}
+                            <a href="{{ url_for('auth.logout') }}" class="navbar-item">
+                                Logout
+                            </a>
+			    {% endif %}
+                        </div>
+                    </div>
+                </div>
+            </nav>
+        </div>
+
+        <div class="hero-body">
+            <div class="container has-text-centered">
+               {% block content %}
+               {% endblock %}
+            </div>
+        </div>
+    </section>
+</body>
+
+</html>
diff --git a/templates/index.html b/templates/index.html
new file mode 100644
index 0000000..ce45b56
--- /dev/null
+++ b/templates/index.html
@@ -0,0 +1,10 @@
+{% extends "base.html" %}
+
+{% block content %}
+<h1 class="title">
+  Flask Login Example
+</h1>
+<h2 class="subtitle">
+  Easy authentication and authorization in Flask.
+</h2>
+{% endblock %}
\ No newline at end of file
diff --git a/templates/login.html b/templates/login.html
new file mode 100644
index 0000000..a341451
--- /dev/null
+++ b/templates/login.html
@@ -0,0 +1,36 @@
+{% extends "base.html" %}
+
+{% block content %}
+<div class="column is-4 is-offset-4">
+    <h3 class="title">Login</h3>
+    <div class="box">
+	{% with messages = get_flashed_messages() %}
+	{% if messages %}
+		<div class="notification is-danger">
+			{{ messages[0] }}
+		</div>
+	{% endif %}
+	{% endwith %}
+        <form method="POST" action="/login">
+            <div class="field">
+                <div class="control">
+                    <input class="input is-large" type="email" name="email" placeholder="Your Email" autofocus="">
+                </div>
+            </div>
+
+            <div class="field">
+                <div class="control">
+                    <input class="input is-large" type="password" name="password" placeholder="Your Password">
+                </div>
+            </div>
+            <div class="field">
+                <label class="checkbox">
+                    <input type="checkbox" name="remember">
+                    Remember me
+                </label>
+            </div>
+            <button class="button is-block is-info is-large is-fullwidth">Login</button>
+        </form>
+    </div>
+</div>
+{% endblock %}
diff --git a/templates/profile.html b/templates/profile.html
new file mode 100644
index 0000000..12a799a
--- /dev/null
+++ b/templates/profile.html
@@ -0,0 +1,8 @@
+{% extends "base.html" %}
+
+{% block content %}
+<h1 class="title">
+	Welcome, {{ name }}! <p>
+	Your google ID is {{ google_id }}
+</h1>
+{% endblock %}
diff --git a/templates/signup.html b/templates/signup.html
new file mode 100644
index 0000000..bd21f73
--- /dev/null
+++ b/templates/signup.html
@@ -0,0 +1,42 @@
+{% extends "base.html" %}
+
+{% block content %}
+<div class="column is-4 is-offset-4">
+    <h3 class="title">Sign Up</h3>
+    <div class="box">
+	{% with messages = get_flashed_messages() %}
+	{% if messages %}
+		<div class="notification is-danger">
+			{{ messages[0] }}. Go to <a href="{{ url_for('auth.login') }}">login page </a>.
+		</div>
+	{% endif %}
+	{% endwith %}
+        <form method="POST" action="/signup">
+            <div class="field">
+                <div class="control">
+                    <input class="input is-large" type="email" name="email" placeholder="Email" autofocus="">
+                </div>
+            </div>
+
+            <div class="field">
+                <div class="control">
+                    <input class="input is-large" type="text" name="name" placeholder="Name" autofocus="">
+                </div>
+            </div>
+
+            <div class="field">
+                <div class="control">
+                    <input class="input is-large" type="password" name="password" placeholder="Password">
+                </div>
+            </div>
+            <div class="field">
+                <div class="control">
+                    <input class="input is-large" type="text" name="google_id" placeholder="Google ID">
+                </div>
+            </div>
+
+            <button class="button is-block is-info is-large is-fullwidth">Sign Up</button>
+        </form>
+    </div>
+</div>
+{% endblock %}