from fastapi import APIRouter, Depends, HTTPException, status from sqlalchemy.orm import Session from typing import Optional from models import User from schemas import UserLogin, Token from utils import get_db, authenticate_user, create_access_token router = APIRouter() @router.post("/login", response_model=Token) async def login(user_credentials: UserLogin, db: Session = Depends(get_db)): """ Authenticate user and return access token """ user = authenticate_user(db, user_credentials.username, user_credentials.password) if not user: raise HTTPException( status_code=status.HTTP_401_UNAUTHORIZED, detail="Incorrect username or password", headers={"WWW-Authenticate": "Bearer"}, ) access_token = create_access_token(data={"sub": user.username}) return {"access_token": access_token, "token_type": "bearer"}