from datetime import timedelta from typing import Any from fastapi import APIRouter, Depends, HTTPException, status from fastapi.security import OAuth2PasswordRequestForm from sqlalchemy.orm import Session from app import crud from app.api import deps from app.core.config import settings from app.core.security import create_access_token from app.models.user import User from app.schemas.token import Token from app.schemas.user import User as UserSchema from app.schemas.user import UserCreate router = APIRouter() @router.post("/login", response_model=Token) def login_access_token( db: Session = Depends(deps.get_db), form_data: OAuth2PasswordRequestForm = Depends(), ) -> Any: """ OAuth2 compatible token login, get an access token for future requests. """ user = crud.user.authenticate( db, username=form_data.username, password=form_data.password ) if not user: raise HTTPException( status_code=status.HTTP_401_UNAUTHORIZED, detail="Incorrect username or password", headers={"WWW-Authenticate": "Bearer"}, ) elif not crud.user.is_active(user): raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail="Inactive user", ) access_token_expires = timedelta(minutes=settings.ACCESS_TOKEN_EXPIRE_MINUTES) return { "access_token": create_access_token( user.username, expires_delta=access_token_expires ), "token_type": "bearer", } @router.post("/register", response_model=UserSchema, status_code=status.HTTP_201_CREATED) def register_user( *, db: Session = Depends(deps.get_db), user_in: UserCreate, ) -> Any: """ Register a new user. """ # Check if user with the same email already exists user = crud.user.get_by_email(db, email=user_in.email) if user: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail="User with this email already exists", ) # Check if user with the same username already exists user = crud.user.get_by_username(db, username=user_in.username) if user: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail="User with this username already exists", ) # Create new user (non-superuser by default) user_in.is_superuser = False user = crud.user.create(db, obj_in=user_in) return user @router.get("/me", response_model=UserSchema) def read_users_me( current_user: User = Depends(deps.get_current_user), ) -> Any: """ Get current user information. """ return current_user