from datetime import timedelta from typing import Any from fastapi import APIRouter, Depends, HTTPException, status from fastapi.security import OAuth2PasswordRequestForm from sqlalchemy.orm import Session from app.api import deps from app.core import security from app.core.config import settings from app.schemas.token import Token from app.schemas.user import User, UserCreate from app.services.user import user_service router = APIRouter() @router.post("/login", response_model=Token) def login_for_access_token( db: Session = Depends(deps.get_db), form_data: OAuth2PasswordRequestForm = Depends() ) -> Any: user = user_service.authenticate( db, email=form_data.username, password=form_data.password ) if not user: raise HTTPException( status_code=status.HTTP_401_UNAUTHORIZED, detail="Incorrect email or password", headers={"WWW-Authenticate": "Bearer"}, ) elif not user_service.is_active(user): raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail="Inactive user" ) access_token_expires = timedelta(minutes=settings.ACCESS_TOKEN_EXPIRE_MINUTES) return { "access_token": security.create_access_token( user.id, expires_delta=access_token_expires ), "token_type": "bearer", } @router.post("/register", response_model=User) def register_user( *, db: Session = Depends(deps.get_db), user_in: UserCreate, ) -> Any: user = user_service.get_by_email(db, email=user_in.email) if user: raise HTTPException( status_code=400, detail="The user with this email already exists in the system.", ) user = user_service.create(db, obj_in=user_in) return user @router.get("/me", response_model=User) def read_users_me( db: Session = Depends(deps.get_db), current_user: User = Depends(deps.get_current_active_user), ) -> Any: return current_user