Add application file

Dockerfile

@@ -0,0 +1,16 @@
+# Read the doc: https://huggingface.co/docs/hub/spaces-sdks-docker
+# you will also find guides on how best to write your Dockerfile
+
+FROM python:3.9
+
+RUN useradd -m -u 1000 user
+USER user
+ENV PATH="/home/user/.local/bin:$PATH"
+
+WORKDIR /app
+
+COPY --chown=user ./requirements.txt requirements.txt
+RUN pip install --no-cache-dir --upgrade -r requirements.txt
+
+COPY --chown=user . /app
+CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]

README.md

@@ -1,11 +1,10 @@
 ---
-title: Age Better
-emoji: 📈
-colorFrom: indigo
-colorTo: gray
+title: Age Better Endpoints
+emoji: 👀
+colorFrom: red
+colorTo: blue
 sdk: docker
 pinned: false
-license: apache-2.0
 ---
 
 Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference

auth/auth_bearer.py

@@ -0,0 +1,26 @@
+from fastapi import Request, HTTPException
+from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
+from .auth_handler import decodeJWT
+
+class JWTBearer(HTTPBearer):
+    """Class to validate JWT tokens on protected routes."""
+    async def __call__(self, request: Request):
+        credentials: HTTPAuthorizationCredentials = await super(JWTBearer, self).__call__(request)
+        if credentials:
+            if not credentials.scheme == "Bearer":
+                raise HTTPException(status_code=403, detail="Invalid authentication scheme.")
+            if not self.verify_jwt(credentials.credentials):
+                raise HTTPException(status_code=403, detail="Invalid token or expired token.")
+            return credentials.credentials
+        else:
+            raise HTTPException(status_code=403, detail="Invalid authorization code.")
+
+    def verify_jwt(self, jwtoken: str) -> bool:
+        is_token_valid: bool = False
+        try:
+            payload = decodeJWT(jwtoken)
+        except:
+            payload = None
+        if payload:
+            is_token_valid = True
+        return is_token_valid

auth/auth_handler.py

@@ -0,0 +1,39 @@
+import time
+import jwt
+from typing import Dict
+from decouple import config
+
+# Load secret and algorithm from environment variables
+JWT_SECRET = config("SECRET_KEY")  # Example: from .env file or environment variable
+JWT_ALGORITHM = config("ALGORITHM", default="HS256")  # Default to HS256 if not set
+
+def token_response(token: str) -> Dict[str, str]:
+    return {
+        "access_token": token
+    }
+
+def signJWT(user_id: str) -> Dict[str, str]:
+    """Sign a JWT for the user."""
+    payload = {
+        "user_id": user_id,
+        "expires": time.time() + 600  # 10-minute expiration
+    }
+    token = jwt.encode(payload, JWT_SECRET, algorithm=JWT_ALGORITHM)
+    return token_response(token)
+
+def decodeJWT(token: str) -> dict:
+    """Decode a JWT token."""
+    try:
+        decoded_token = jwt.decode(token, JWT_SECRET, algorithms=[JWT_ALGORITHM])
+        return decoded_token if decoded_token["expires"] >= time.time() else None
+    except:
+        return {}
+
+def decodeJWT(token: str) -> dict:
+    try:
+        # Decode JWT to get payload containing user_id
+        decoded_token = jwt.decode(token, JWT_SECRET, algorithms=[JWT_ALGORITHM])
+        # Ensure token has not expired
+        return decoded_token if decoded_token["expires"] >= time.time() else None
+    except:
+        return {}

config.py

@@ -0,0 +1,16 @@
+import firebase_admin
+from firebase_admin import credentials, firestore, auth
+import os
+from decouple import config
+
+FIREBASE_API_KEY = os.getenv("AIzaSyDCu6_7nNK63tkX1EONVz3ndIVd6frcy9Y")  # Set this environment variable with your Firebase API key
+
+if not firebase_admin._apps:
+    cred = credentials.Certificate("serviceAccountKey.json")  # Path to Firebase Admin SDK JSON file
+    firebase_admin.initialize_app(cred)
+
+db = firestore.client()
+
+# JWT config
+SECRET_KEY = config("SECRET_KEY")
+ALGORITHM = config("ALGORITHM", default="HS256")

main.py

@@ -0,0 +1,11 @@
+from fastapi import FastAPI
+from routes import users
+
+app = FastAPI()
+
+# Register the user routes
+app.include_router(users.router)
+
+@app.get("/")
+def read_root():
+    return {"message": "User Management System with JWT and Firebase is running"}

models/user_model.py

@@ -0,0 +1,76 @@
+from pydantic import BaseModel, EmailStr
+
+class User(BaseModel):
+    id: str
+    name: str
+    surname: str
+    phone: str
+    email: EmailStr
+    role: str
+    status: str
+
+class CreateUser(BaseModel):
+    email: EmailStr
+    password: str
+
+class UpdateUser(BaseModel):
+    name: str = None
+    surname: str = None
+    phone: str = None
+    email: EmailStr = None
+    role: str = None
+    status: str = None
+
+class OTPVerification(BaseModel):
+    email: EmailStr
+    otp: str
+
+class ResetPassword(BaseModel):
+    email: EmailStr
+    newPassword: str
+
+class ChangePassword(BaseModel):
+    currentPassword: str
+    newPassword: str
+
+class DeleteUserRequest(BaseModel):
+    password: str
+
+class TokenRequest(BaseModel):
+    email: EmailStr
+
+class UserProfileData(BaseModel):
+    id: str
+    name: str
+    surname: str
+    phone: str
+    email: str
+    role: str
+    status: str
+
+class UserProfileResponse(BaseModel):
+    isSuccess: bool
+    data: UserProfileData
+
+class CreateUser(BaseModel):
+    email: EmailStr
+    password: str
+
+class TokenRequest(BaseModel):
+    email: EmailStr
+    password: str
+
+class DeleteUserRequest(BaseModel):
+    password: str 
+
+class UpdateProfile(BaseModel):
+    name: str = None
+    surname: str = None
+
+    class Config:
+        schema_extra = {
+            "example": {
+                "name": "John",
+                "surname": "Doe"
+            }
+        }

requirements.txt

@@ -0,0 +1,14 @@
+firebase-admin
+fastapi
+uvicorn
+sqlmodel
+typer
+dynaconf
+jinja2
+python-jose[cryptography]
+passlib[bcrypt]
+python-multipart
+psycopg2-binary
+uuid
+pydantic
+email-validator

routes/users.py

@@ -0,0 +1,60 @@
+from fastapi import APIRouter, HTTPException, Header, Query, Depends,Body
+from services.users_service import create_user_in_firestore, get_user_from_firestore, update_user_in_firestore,login_for_access_token, delete_user_profile, get_user_profile_from_firestore,update_user_profile
+from models.user_model import CreateUser, UpdateUser, TokenRequest,DeleteUserRequest,UpdateProfile
+from datetime import timedelta
+from firebase_admin import credentials, auth, firestore
+from config import db
+from auth.auth_bearer import JWTBearer
+from auth.auth_handler import decodeJWT
+
+router = APIRouter(
+    prefix="/api/v1/users",
+    tags=["Users"]
+)
+
+@router.post("")
+def create_user(user_data: CreateUser):
+    """Route for creating a new user."""
+    return create_user_in_firestore(user_data.model_dump())
+
+@router.get("/{id}")
+def get_user(id: str):  
+    return get_user_from_firestore(id)
+
+@router.put("/{id}")
+def edit_user(id: str, user_data: UpdateUser): 
+    return update_user_in_firestore(id, user_data.model_dump())
+
+@router.post("/login")
+def login(user_data: TokenRequest):
+    """Login route for generating JWT token."""
+    return login_for_access_token(user_data.email, user_data.password)
+
+@router.delete("/me", dependencies=[Depends(JWTBearer())])
+def delete_user(user_request: DeleteUserRequest, token: str = Depends(JWTBearer())):
+    # Decode the token to get the user_id
+    user_id = decodeJWT(token)["user_id"]
+    
+    # Call the delete function with the user_id
+    return delete_user_profile(user_id, user_request.model_dump())
+
+@router.get("/me", dependencies=[Depends(JWTBearer())])
+def get_my_profile(token: str = Depends(JWTBearer())):
+    # Decode the JWT token to get the user_id
+    user_id = decodeJWT(token)["user_id"]
+    
+    # Fetch the user profile based on the user_id
+    return get_user_profile_from_firestore(user_id)
+
+@router.put("/me", dependencies=[Depends(JWTBearer())])
+def edit_my_profile(user_data: UpdateProfile = Body(...), token: str = Depends(JWTBearer())):
+    # Decode JWT to get the user_id
+    user_id = decodeJWT(token)["user_id"]
+    
+    # Update the user profile in Firestore
+    updated_user = update_user_profile(user_id, user_data.model_dump())
+    
+    return {
+        "isSuccess": True,
+        "data": updated_user
+    }

serviceAccountKey.json

@@ -0,0 +1,13 @@
+{
+  "type": "service_account",
+  "project_id": "news-b7cae",
+  "private_key_id": "3393fd91e87ef8353deb8d226159d46c0d314f6a",
+  "private_key": "-----BEGIN PRIVATE KEY-----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\n6rQ3t9/+eYwMExTenGZGzQ==\n-----END PRIVATE KEY-----\n",
+  "client_email": "firebase-adminsdk-cxdji@news-b7cae.iam.gserviceaccount.com",
+  "client_id": "103570192779780992565",
+  "auth_uri": "https://accounts.google.com/o/oauth2/auth",
+  "token_uri": "https://oauth2.googleapis.com/token",
+  "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
+  "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/firebase-adminsdk-cxdji%40news-b7cae.iam.gserviceaccount.com",
+  "universe_domain": "googleapis.com"
+}

services/1.txt

@@ -0,0 +1,144 @@
+from fastapi import HTTPException
+from config import db, auth
+from datetime import datetime, timedelta
+from zoneinfo import ZoneInfo
+import jwt 
+
+SECRET_KEY = "your_jwt_secret_key"
+
+def create_user_in_firestore(user_data):
+    try:
+        user = auth.create_user(
+            email=user_data["email"],
+            password=user_data["password"]
+        )
+
+        user_ref = db.collection("users").document(user.uid)
+        user_ref.set({
+            "uid": user.uid,
+            "email": user_data["email"],
+            "status": "Active"
+        })
+
+        return {"isSuccess": True, "message": "User created successfully", "uid": user.uid}
+
+    except Exception as e:
+        raise HTTPException(status_code=400, detail=str(e))
+
+
+def get_user_from_firestore(user_id: str):
+    try:
+        user_ref = db.collection("users").document(user_id)
+        user_snapshot = user_ref.get()
+
+        if user_snapshot.exists:
+            return {"isSuccess": True, "data": user_snapshot.to_dict()}
+        else:
+            raise HTTPException(status_code=404, detail="User not found")
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e))
+
+
+def update_user_in_firestore(user_id: str, update_data):
+    try:
+        user_ref = db.collection("users").document(user_id)
+        user_ref.update(update_data)
+
+        if 'email' in update_data:
+            auth.update_user(user_id, email=update_data['email'])
+        if 'password' in update_data:
+            auth.update_user(user_id, password=update_data['password'])
+
+        return {"isSuccess": True, "message": "User updated successfully"}
+    except Exception as e:
+        raise HTTPException(status_code=400, detail=str(e))
+
+
+def get_temporary_token_service(email: str):
+    try:
+        # Check if the user exists in Firestore
+        users_ref = db.collection("users")
+        query = users_ref.where("email", "==", email).stream()
+
+        user_doc = None
+        for doc in query:
+            user_doc = doc
+            break
+
+        if not user_doc:
+            raise HTTPException(status_code=404, detail="Use a registered email")
+
+        # Generate a temporary token valid for 300 seconds (5 minutes)
+        expiration = datetime.now(ZoneInfo("UTC")) + timedelta(seconds=300)
+        payload = {
+            "email": email,
+            "exp": expiration,
+            "uid": user_doc.id
+        }
+        token = jwt.encode(payload, SECRET_KEY, algorithm="HS256")  # Ensure you use PyJWT's jwt
+
+        return {"isSuccess": True, "token": token}
+
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e))
+    
+# def get_user_profile_from_token(token: str):
+#     try:
+#         # Decode the token
+#         payload = jwt.decode(token, SECRET_KEY, algorithms=["HS256"])
+#         email = payload.get("email")
+
+#         if not email:
+#             raise HTTPException(status_code=401, detail="Invalid token")
+
+#         # Fetch user details from Firestore
+#         users_ref = db.collection("users")
+#         query = users_ref.where("email", "==", email).stream()
+        
+#         user_doc = None
+#         for doc in query:
+#             user_doc = doc
+#             break
+
+#         if not user_doc:
+#             raise HTTPException(status_code=404, detail="User not found")
+
+#         return {"isSuccess": True, "data": user_doc.to_dict()}
+    
+#     except jwt.ExpiredSignatureError:
+#         raise HTTPException(status_code=401, detail="Token has expired")
+#     except jwt.InvalidTokenError:
+#         raise HTTPException(status_code=401, detail="Invalid token")
+#     except Exception as e:
+#         raise HTTPException(status_code=500, detail=str(e))
+    
+from fastapi import APIRouter, HTTPException, Header, Query
+from pydantic import EmailStr
+from services.users_service import create_user_in_firestore, get_user_from_firestore, update_user_in_firestore, get_temporary_token_service
+from models.user_model import CreateUser, UpdateUser, TokenRequest
+
+router = APIRouter(
+    prefix="/api/v1/users",
+    tags=["Users"]
+)
+
+@router.post("/")
+def create_user(user_data: CreateUser):
+    return create_user_in_firestore(user_data.model_dump())
+
+@router.get("/{id}")
+def get_user(id: str):  
+    return get_user_from_firestore(id)
+
+@router.put("/{id}")
+def edit_user(id: str, user_data: UpdateUser): 
+    return update_user_in_firestore(id, user_data.model_dump())
+
+@router.post("/token")
+def get_temporary_token(token_request: TokenRequest):
+    return get_temporary_token_service(token_request.email)
+
+# @router.post("/me")
+# def get_my_profile(token_request: TokenRequest1):
+#     token = token_request.token
+#     return get_user_profile_from_token(token)

services/users_service.py

@@ -0,0 +1,144 @@
+from fastapi import HTTPException
+from config import db, auth
+from datetime import datetime, timedelta
+from zoneinfo import ZoneInfo
+from jose import JWTError, jwt
+from firebase_admin import auth, firestore
+from auth.auth_handler import signJWT
+
+SECRET_KEY = "your-secret-key"
+ALGORITHM = "HS256"
+ACCESS_TOKEN_EXPIRE_MINUTES = 30
+
+def get_user_from_firestore(user_id: str):
+    try:
+        user_ref = db.collection("users").document(user_id)
+        user_snapshot = user_ref.get()
+
+        if user_snapshot.exists:
+            return {"isSuccess": True, "data": user_snapshot.to_dict()}
+        else:
+            raise HTTPException(status_code=404, detail="User not found")
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e))
+
+def update_user_in_firestore(user_id: str, update_data):
+    try:    
+        user_ref = db.collection("users").document(user_id)
+        user_ref.update(update_data)
+
+        if 'email' in update_data:
+            auth.update_user(user_id, email=update_data['email'])
+        if 'password' in update_data:
+            auth.update_user(user_id, password=update_data['password'])
+
+        return {"isSuccess": True, "message": "User updated successfully"}
+    except Exception as e:
+        raise HTTPException(status_code=400, detail=str(e))
+
+def create_user_in_firestore(user_data):
+    """Create user in Firebase Auth and Firestore."""
+    try:
+        user = auth.create_user(
+            email=user_data["email"],
+            password=user_data["password"]
+        )
+
+        user_ref = db.collection("users").document(user.uid)
+        user_ref.set({
+            "uid": user.uid,
+            "email": user_data["email"],
+            "status": "Active"
+        })
+
+        return {"isSuccess": True, "message": "User created successfully", "uid": user.uid}
+
+    except Exception as e:
+        raise HTTPException(status_code=400, detail=str(e))
+
+def authenticate_user(email: str, password: str):
+    """Authenticate Firebase user."""
+    try:
+        # In Firebase, password verification is handled on the client side.
+        user = auth.get_user_by_email(email)
+        return user
+    except Exception as e:
+        raise HTTPException(status_code=400, detail="Invalid credentials")
+
+def login_for_access_token(email: str, password: str):
+    """Verify user and return JWT token."""
+    user = authenticate_user(email, password)
+    if not user:
+        raise HTTPException(status_code=400, detail="Incorrect email or password")
+    
+    # Generate JWT token for the user
+    return signJWT(user.uid)
+
+def delete_user_profile(user_id: str, user_request: dict):
+    try:
+        # Retrieve the user's Firebase Auth record
+        user_record = auth.get_user(user_id)
+        if not user_record:
+            raise HTTPException(status_code=404, detail="User not found")
+
+        # Deleting the user from Firebase Auth
+        auth.delete_user(user_id)
+
+        # Deleting the user from Firestore
+        user_ref = db.collection("users").document(user_id)
+        user_snapshot = user_ref.get()
+
+        if user_snapshot.exists:
+            user_ref.delete()
+            return {"isSuccess": True, "message": "User deleted successfully"}
+        else:
+            raise HTTPException(status_code=404, detail="User not found in Firestore")
+
+    except Exception as e:
+        raise HTTPException(status_code=400, detail=str(e))
+    
+def get_user_profile_from_firestore(user_id: str):
+    try:
+        # Get the user's profile from Firestore
+        user_ref = db.collection("users").document(user_id)
+        user_snapshot = user_ref.get()
+
+        if user_snapshot.exists:
+            user_data = user_snapshot.to_dict()
+            return {
+                "isSuccess": True,
+                "data": {
+                    "id": user_data.get("uid"),
+                    "name": user_data.get("name"),
+                    "surname": user_data.get("surname"),
+                    "phone": user_data.get("phone"),
+                    "email": user_data.get("email"),
+                    "role": user_data.get("role"),
+                    "status": user_data.get("status")
+                }
+            }
+        else:
+            raise HTTPException(status_code=404, detail="User profile not found in Firestore")
+
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e))
+    
+def update_user_profile(user_id: str, update_data: dict):
+    try:
+        # Access Firestore document for the user
+        user_ref = db.collection("users").document(user_id)
+        user_snapshot = user_ref.get()
+
+        # Check if user exists
+        if not user_snapshot.exists:
+            raise HTTPException(status_code=404, detail="User not found")
+
+        # Update the user profile with provided data
+        user_ref.update(update_data)
+        
+        # Fetch updated user data from Firestore
+        updated_user = user_ref.get().to_dict()
+        
+        return updated_user
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e))