Spaces:
Running
Running
File size: 2,089 Bytes
89ae94f |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 |
"""
Authentication router.
This module provides authentication endpoints for the API.
"""
from datetime import datetime, timedelta
from typing import Any, Dict, Optional
from fastapi import APIRouter, Depends, HTTPException, status
from fastapi.security import OAuth2PasswordRequestForm
from sqlalchemy.ext.asyncio import AsyncSession
from src.api.database import get_db
from src.api.security import (
ACCESS_TOKEN_EXPIRE_MINUTES,
Token,
UserInDB,
authenticate_user,
create_access_token,
get_current_active_user,
)
router = APIRouter(tags=["authentication"])
@router.post("/token", response_model=Token)
async def login_for_access_token(
form_data: OAuth2PasswordRequestForm = Depends(),
db: AsyncSession = Depends(get_db)
) -> Dict[str, Any]:
"""
OAuth2 compatible token login, get an access token for future requests.
"""
user = await authenticate_user(db, form_data.username, form_data.password)
if not user:
raise HTTPException(
status_code=status.HTTP_401_UNAUTHORIZED,
detail="Incorrect username or password",
headers={"WWW-Authenticate": "Bearer"},
)
access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
access_token = create_access_token(
data={"sub": user.username, "scopes": user.scopes},
expires_delta=access_token_expires
)
expires_at = datetime.utcnow() + access_token_expires
return {
"access_token": access_token,
"token_type": "bearer",
"expires_at": expires_at
}
@router.get("/users/me", response_model=UserInDB)
async def read_users_me(
current_user: UserInDB = Depends(get_current_active_user)
) -> UserInDB:
"""
Get current user.
"""
return current_user
@router.get("/users/me/scopes")
async def read_own_scopes(
current_user: UserInDB = Depends(get_current_active_user)
) -> Dict[str, Any]:
"""
Get current user's scopes.
"""
return {
"username": current_user.username,
"scopes": current_user.scopes
} |