from datetime import timedelta from typing import Any from fastapi import APIRouter, Depends, HTTPException, status from fastapi.security import OAuth2PasswordRequestForm from sqlalchemy.orm import Session from app import schemas from app.api.deps import get_db from app.core import security from app.core.config import settings from app.services import user_service router = APIRouter() @router.post("/login", response_model=schemas.Token) def login_access_token( db: Session = Depends(get_db), form_data: OAuth2PasswordRequestForm = Depends() ) -> Any: """ OAuth2 compatible token login, get an access token for future requests """ user = user_service.authenticate( db, email=form_data.username, password=form_data.password ) if not user: raise HTTPException( status_code=status.HTTP_401_UNAUTHORIZED, detail="Incorrect email or password", ) elif not user.is_active: raise HTTPException( status_code=status.HTTP_401_UNAUTHORIZED, detail="Inactive user", ) access_token_expires = timedelta(minutes=settings.ACCESS_TOKEN_EXPIRE_MINUTES) return { "access_token": security.create_access_token( user.id, expires_delta=access_token_expires ), "token_type": "bearer", } @router.post("/register", response_model=schemas.User) def register_user( *, db: Session = Depends(get_db), user_in: schemas.UserCreate, ) -> Any: """ Create new user """ user = user_service.get_by_email(db, email=user_in.email) if user: raise HTTPException( status_code=400, detail="The user with this email already exists in the system", ) username_exists = user_service.get_by_username(db, username=user_in.username) if username_exists: raise HTTPException( status_code=400, detail="The username is already taken", ) user = user_service.create(db, obj_in=user_in) return user