@main.route("/login", methods=["GET", "POST"])
def login():
    if request.method == "POST":
        username = request.form.get("username")
        password = request.form.get("password")

        user = User.query.filter_by(username=username).first()

        if user and user.check_password(password):
            login_user(user)
            flash("Connexion réussie", "success")
            return redirect(url_for("main.document_search"))

        flash("Identifiants invalides", "error")

    return render_template("login.html")