auths.py 3.64 KB
Newer Older
1
2
3
4
5
6
7
8
9
10
11
12
13
from fastapi import Response
from fastapi import Depends, FastAPI, HTTPException, status
from datetime import datetime, timedelta
from typing import List, Union

from fastapi import APIRouter
from pydantic import BaseModel
import time
import uuid

from apps.web.models.auths import (
    SigninForm,
    SignupForm,
14
    UpdatePasswordForm,
15
16
17
18
19
20
21
    UserResponse,
    SigninResponse,
    Auths,
)
from apps.web.models.users import Users


Timothy J. Baek's avatar
Timothy J. Baek committed
22
23
24
25
26
27
28
from utils.utils import (
    get_password_hash,
    bearer_scheme,
    create_token,
)
from utils.misc import get_gravatar_url
from constants import ERROR_MESSAGES
29
30


Timothy J. Baek's avatar
Timothy J. Baek committed
31
32
router = APIRouter()

33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
############################
# GetSessionUser
############################


@router.get("/", response_model=UserResponse)
async def get_session_user(cred=Depends(bearer_scheme)):
    token = cred.credentials
    user = Users.get_user_by_token(token)
    if user:
        return {
            "id": user.id,
            "email": user.email,
            "name": user.name,
            "role": user.role,
Timothy J. Baek's avatar
Timothy J. Baek committed
48
            "profile_image_url": user.profile_image_url,
49
50
51
52
        }
    else:
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
Timothy J. Baek's avatar
Timothy J. Baek committed
53
            detail=ERROR_MESSAGES.INVALID_TOKEN,
54
55
56
        )


57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
############################
# Update Password
############################


@router.post("/update/password", response_model=bool)
async def update_password(form_data: UpdatePasswordForm, cred=Depends(bearer_scheme)):
    token = cred.credentials
    user = Users.get_user_by_token(token)

    if user:
        hashed = get_password_hash(form_data.new_password)
        return Auths.update_user_password_by_id(user.id, form_data.password, hashed)

    else:
        raise HTTPException(400, detail=ERROR_MESSAGES.INVALID_CRED)


75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
############################
# SignIn
############################


@router.post("/signin", response_model=SigninResponse)
async def signin(form_data: SigninForm):
    user = Auths.authenticate_user(form_data.email.lower(), form_data.password)
    if user:
        token = create_token(data={"email": user.email})

        return {
            "token": token,
            "token_type": "Bearer",
            "id": user.id,
            "email": user.email,
            "name": user.name,
            "role": user.role,
Timothy J. Baek's avatar
Timothy J. Baek committed
93
            "profile_image_url": user.profile_image_url,
94
95
        }
    else:
Timothy J. Baek's avatar
Timothy J. Baek committed
96
        raise HTTPException(400, detail=ERROR_MESSAGES.INVALID_CRED)
97
98
99
100
101
102
103
104
105
106
107


############################
# SignUp
############################


@router.post("/signup", response_model=SigninResponse)
async def signup(form_data: SignupForm):
    if not Users.get_user_by_email(form_data.email.lower()):
        try:
108
            role = "admin" if Users.get_num_users() == 0 else "pending"
109
            hashed = get_password_hash(form_data.password)
Timothy J. Baek's avatar
Timothy J. Baek committed
110
111
112
            user = Auths.insert_new_auth(
                form_data.email.lower(), hashed, form_data.name, role
            )
113
114
115
116
117
118
119
120
121
122
123
124

            if user:
                token = create_token(data={"email": user.email})
                # response.set_cookie(key='token', value=token, httponly=True)

                return {
                    "token": token,
                    "token_type": "Bearer",
                    "id": user.id,
                    "email": user.email,
                    "name": user.name,
                    "role": user.role,
Timothy J. Baek's avatar
Timothy J. Baek committed
125
                    "profile_image_url": user.profile_image_url,
126
127
                }
            else:
128
                raise HTTPException(500, detail=ERROR_MESSAGES.CREATE_USER_ERROR)
129
130
131
        except Exception as err:
            raise HTTPException(500, detail=ERROR_MESSAGES.DEFAULT(err))
    else:
Timothy J. Baek's avatar
Timothy J. Baek committed
132
        raise HTTPException(400, detail=ERROR_MESSAGES.EMAIL_TAKEN)