From 7e41576035cd9f0004255a7490e6691c6d989ff6 Mon Sep 17 00:00:00 2001 From: tycfuvgibhoinjok Date: Tue, 31 Mar 2026 13:46:18 +0300 Subject: add jwt --- app/routes/auth.py | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 app/routes/auth.py (limited to 'app/routes/auth.py') diff --git a/app/routes/auth.py b/app/routes/auth.py new file mode 100644 index 0000000..aa68c52 --- /dev/null +++ b/app/routes/auth.py @@ -0,0 +1,37 @@ +from fastapi import APIRouter, Depends, HTTPException +from fastapi.security import OAuth2PasswordRequestForm +from sqlalchemy.ext.asyncio import AsyncSession + +from app.utils.logger_cfg import logger + +from app.auth.jwt import create_access_token, create_refresh_token +from app.models.user import User +from app.utils.db import get_async_session +from app.utils.hash_cfg import verify_password + +router = APIRouter(tags=["auth"]) + + +@router.post("/login") +async def login( + form_data: OAuth2PasswordRequestForm = Depends(), + session: AsyncSession = Depends(get_async_session), +): + user = await User.get_user_by_email(form_data.username, session=session) + if not user: + user = await User.get_user_by_username(form_data.username, session=session) + + if not user or not verify_password(form_data.password, user.password): + logger.warning("Login failed | username/email={}", form_data.username) + raise HTTPException(status_code=401, detail="Invalid credentials") + + access_token = create_access_token({"sub": str(user.id)}) + refresh_token = create_refresh_token({"sub": str(user.id)}) + + logger.info("User logged in | id={} username={}", user.id, user.username) + + return { + "access_token": access_token, + "refresh_token": refresh_token, + "token_type": "bearer", + } -- cgit v1.3-3-g829e