51 lines
1.4 KiB
Python
51 lines
1.4 KiB
Python
from fastapi import APIRouter, Depends, HTTPException, Response
|
|
from pydantic import BaseModel
|
|
from sqlmodel import Session, select
|
|
|
|
from ..auth import create_access_token, verify_password
|
|
from ..database import get_session
|
|
from ..deps import get_current_user
|
|
from ..models import User
|
|
|
|
router = APIRouter(prefix="/api/auth", tags=["auth"])
|
|
|
|
|
|
class LoginRequest(BaseModel):
|
|
email: str
|
|
password: str
|
|
|
|
|
|
class TokenResponse(BaseModel):
|
|
access_token: str
|
|
token_type: str = "bearer"
|
|
|
|
|
|
@router.post("/login", response_model=TokenResponse)
|
|
def login(body: LoginRequest, response: Response, session: Session = Depends(get_session)):
|
|
user = session.exec(select(User).where(User.email == body.email)).first()
|
|
if not user or not verify_password(body.password, user.password_hash):
|
|
raise HTTPException(status_code=401, detail="Invalid credentials")
|
|
|
|
token = create_access_token(user.id, user.email)
|
|
|
|
response.set_cookie(
|
|
key="auth_token",
|
|
value=token,
|
|
httponly=True,
|
|
secure=True,
|
|
samesite="strict",
|
|
max_age=3600,
|
|
)
|
|
return TokenResponse(access_token=token)
|
|
|
|
|
|
@router.post("/logout")
|
|
def logout(response: Response):
|
|
response.delete_cookie("auth_token")
|
|
return {"ok": True}
|
|
|
|
|
|
@router.get("/me")
|
|
def me_endpoint(current_user: User = Depends(get_current_user)):
|
|
return {"id": current_user.id, "email": current_user.email}
|