Базовый коммит

service/auth.py

@@ -0,0 +1,70 @@
+from typing import Annotated
+from datetime import datetime, timezone
+from datetime import datetime, timedelta
+
+from fastapi import Depends, HTTPException, status, Cookie
+from fastapi.security import OAuth2PasswordBearer
+from passlib.context import CryptContext
+from jose import jwt
+from jose.exceptions import JWTError
+from pydantic import ValidationError
+
+from service.schemas import TokenData, UserData
+from service.db_requests import get_user
+
+
+reuseable_oauth = OAuth2PasswordBearer(
+    tokenUrl="login",
+    scheme_name="JWT"
+)
+
+ACCESS_TOKEN_EXPIRE_MINUTES = 60 * 24 * 7
+ALGORITHM = "HS256"
+JWT_SECRET_KEY = "CHAGEME"
+
+password_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
+
+
+def hash_password(password):
+    return password_context.hash(password)
+
+
+def verify_password(password, hashed_pass):
+    return password_context.verify(password, hashed_pass)
+
+
+def create_access_token(subject):
+    expires_delta = datetime.now() + timedelta(minutes=
+                                               ACCESS_TOKEN_EXPIRE_MINUTES)
+    to_encode = {"exp": expires_delta, "sub": str(subject)}
+    encoded_jwt = jwt.encode(to_encode, JWT_SECRET_KEY, ALGORITHM)
+    return encoded_jwt
+
+
+async def get_current_user(access_token = Cookie()) -> UserData:
+    try:
+        data = jwt.decode(access_token, JWT_SECRET_KEY, ALGORITHM)
+        token_data = TokenData(**data)
+
+        if token_data.exp < datetime.now(timezone.utc):
+            raise HTTPException(
+                status_code = status.HTTP_401_UNAUTHORIZED,
+                detail="Token expired",
+                headers={"WWW-Authenticate": "Bearer"},
+            )
+    except(JWTError, ValidationError):
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Could not validate credentials",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+        
+    user = get_user(token_data.sub)
+    
+    if user is None:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="Could not find user",
+        )
+    
+    return user