fix #1

app/routes/auth.py

@@ -1,5 +1,5 @@
-from flask import Blueprint, render_template, request, redirect, url_for, session, flash
-from flask_login import login_user
+from flask import Blueprint, render_template, request, redirect, url_for, flash
+from flask_login import login_user, current_user
 from app.db import get_db
 from werkzeug.security import generate_password_hash, check_password_hash
 
@@ -9,6 +9,9 @@ auth_bp = Blueprint("auth", __name__)
 
 @auth_bp.route("/login", methods=["GET", "POST"])
 def login():
+    if current_user.is_authenticated:
+        return redirect(url_for("main.home"))
+
     if request.method == "POST":
         username = request.form["username"]
         password = request.form["password"]
@@ -32,6 +35,9 @@ def login():
 
 @auth_bp.route("/register", methods=["GET", "POST"])
 def register():
+    if current_user.is_authenticated:
+        return redirect(url_for("main.home"))
+
     if request.method == "POST":
         username = request.form.get("username")
         password = request.form.get("password")
@@ -62,4 +68,4 @@ def register():
         flash("Account created! Please log in.")
         return redirect(url_for("auth.login"))
 
-    return render_template("register.html")
+    return render_template("register.html")

app/routes/main.py

@@ -1,4 +1,4 @@
-from flask import Blueprint, render_template
+from flask import Blueprint, render_template, redirect, url_for
 from flask_login import login_required, current_user
 
 main_bp = Blueprint("main", __name__)
@@ -14,6 +14,8 @@ main_bp = Blueprint("main", __name__)
 
 @main_bp.route("/", methods=["GET", "POST"])
 def index():
+    if current_user.is_authenticated:
+        return redirect(url_for("main.home"))
     return render_template("index.html")
 
 @main_bp.route("/home", methods=["GET", "POST"])
@@ -26,4 +28,10 @@ def home():
 @main_bp.route("/play", methods=["GET"])
 @login_required
 def play():
-    return render_template("play.html")
+    return render_template("play.html")
+
+
+@main_bp.route("/friends", methods=["GET"])
+@login_required
+def friends():
+    return render_template("friends.html")