38 lines
1.3 KiB
Python
38 lines
1.3 KiB
Python
"""Authentication endpoints."""
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException, Request
|
|
from sqlmodel import Session, select
|
|
|
|
from ten31portal.auth import get_current_user, hash_password, verify_password
|
|
from ten31portal.database import get_session
|
|
from ten31portal.models import User
|
|
from ten31portal.schemas import LoginRequest, UserResponse
|
|
|
|
router = APIRouter(prefix="/api/auth", tags=["auth"])
|
|
|
|
|
|
@router.post("/login")
|
|
def login(
|
|
body: LoginRequest,
|
|
request: Request,
|
|
session: Session = Depends(get_session),
|
|
) -> UserResponse:
|
|
user = session.exec(select(User).where(User.email == body.email)).first()
|
|
if user is None or not verify_password(body.password, user.password_hash):
|
|
raise HTTPException(status_code=401, detail="Invalid email or password")
|
|
if not user.is_active:
|
|
raise HTTPException(status_code=401, detail="Account disabled")
|
|
request.session["user_id"] = user.id
|
|
return UserResponse.model_validate(user, from_attributes=True)
|
|
|
|
|
|
@router.post("/logout")
|
|
def logout(request: Request) -> dict[str, str]:
|
|
request.session.clear()
|
|
return {"status": "ok"}
|
|
|
|
|
|
@router.get("/me")
|
|
def me(user: User = Depends(get_current_user)) -> UserResponse:
|
|
return UserResponse.model_validate(user, from_attributes=True)
|