chore: initial config

app/main.py

@@ -0,0 +1,170 @@
+import os
+import sendgrid
+from sendgrid.helpers.mail import Mail
+from fastapi import FastAPI, HTTPException
+from supabase import create_client
+from dotenv import load_dotenv
+from datetime import datetime, timedelta
+
+from app.utils import *
+from app.models import *
+
+
+load_dotenv()
+
+# Supabase configuration
+SUPABASE_URL = os.getenv("SUPABASE_URL")
+SUPABASE_KEY = os.getenv("SUPABASE_KEY")
+
+supabase = create_client(SUPABASE_URL, SUPABASE_KEY)
+
+
+# SendGrid configuration
+SENDGRID_API_KEY = os.getenv("SENDGRID_API_KEY")
+SENDGRID_SENDER  = os.getenv("SENDGRID_SENDER")
+
+sg = sendgrid.SendGridAPIClient(api_key=SENDGRID_API_KEY)
+
+
+# JWT Configuration
+JWT_EXPIRES_IN = os.getenv("JWT_EXPIRES_IN")
+
+
+app = FastAPI()
+
+
+@app.get("/users")
+def get_users():
+    response = supabase.table("users").select("*").execute()
+    return response.data
+
+
+@app.post("/add_user")
+def add_user(email: str):
+    response = supabase.table("users").insert({
+        "email": email
+    }).execute()
+    return {"status": "ok", "inserted": response.data}
+
+@app.post("/auth/send-verification")
+def send_verification(data: EmailRequest):
+    email = data.email
+
+    # Validate email domain
+    if not is_valid_email(email):
+        raise HTTPException(status_code=400, detail="Email no válido o dominio no permitido")
+
+    # Rate limiting: check last code sent time
+    last_code = (
+        supabase.table("auth_code")
+        .select("*")
+        .eq("email", email)
+        .order("created_at", desc=True)
+        .limit(1)
+        .execute()
+    )
+
+    if last_code.data:
+        created_at = datetime.fromisoformat(last_code.data[0]["created_at"].replace("Z", ""))
+        diff = datetime.utcnow() - created_at
+
+        if diff.total_seconds() < 60:
+            raise HTTPException(status_code=429, detail="Demasiados intentos, espera 60 segundos")
+
+    # Generate verification code
+    code = generate_code()
+    expires_at = datetime.utcnow() + timedelta(seconds=int(JWT_EXPIRES_IN))
+
+    # Store code in the database
+    supabase.table("auth_code").delete().eq("email", email).execute()
+
+    supabase.table("auth_code").insert({
+        "email": email,
+        "code": code,
+        "expires_at": expires_at.isoformat()
+    }).execute()
+
+    # Send email with SendGrid
+    message = Mail(
+        from_email=SENDGRID_SENDER,
+        to_emails=email,
+        subject="Your Verification Code",
+        html_content=f"<h1>{code}</h1><p>Your verification code expires in {JWT_EXPIRES_IN} seconds.</p>"
+    )
+
+    try:
+        sg.send(message)
+    except Exception as e:
+        raise HTTPException(status_code=500, detail="Error sending email")
+
+    return {
+        "success": True,
+        "message": f"Código enviado a {email}",
+        "expires_in": JWT_EXPIRES_IN
+    }
+
+
+@app.post("/auth/verify")
+def verify(data: VerifyRequest):
+    email = data.email
+    code  = data.code
+
+    # Verify if the email exists
+    record = (
+        supabase.table("auth_code")
+        .select("*")
+        .eq("email", email)
+        .execute()
+    )
+
+    if not record.data:
+        raise HTTPException(status_code=404, detail="Email no encontrado")
+
+    # Verify if the code matches
+    if record.data[0]["code"] != code:
+        raise HTTPException(status_code=400, detail="Código inválido")
+    
+    # Verify if the code has expired
+    expires_at = datetime.fromisoformat(record.data[0]["expires_at"].replace("Z", ""))
+    if datetime.utcnow() > expires_at:
+        raise HTTPException(status_code=400, detail="Código expirado")
+
+    # Get or create user
+    user_record = (
+        supabase.table("users")
+        .select("*")
+        .eq("email", email)
+        .execute()
+    )
+
+    supabase.table("auth_code").delete().eq("email", email).execute()
+
+    if not user_record.data:
+        user = supabase.table("users").insert({
+            "email": email
+        }).execute().data[0]
+
+        return {
+        "success": True,
+        "user": {
+            "id": f"uuid-{user['id']}",
+            "email": user["email"],
+            "firstName": None,
+            "lastName": None,
+            "onboardingCompleted": False
+        }
+    }
+
+
+    user = user_record.data[0]
+
+    return {
+        "success": True,
+        "user": {
+            "id": f"uuid-{user['id']}",
+            "email": user['email'],
+            "firstName": user['firstName'],
+            "lastName": user['lastName'],
+            "onboardingCompleted": user['onboardingCompleted']
+        }
+    }

app/models.py

@@ -0,0 +1,8 @@
+from pydantic import BaseModel, EmailStr
+
+class EmailRequest(BaseModel):
+    email: EmailStr
+
+class VerifyRequest(BaseModel):
+    email: EmailStr
+    code: str

app/utils.py

@@ -0,0 +1,8 @@
+import random
+
+def generate_code() -> str:
+    # Create a random 6-digit verification code: 000000 to 999999
+    return f"{random.randint(0, 999999):06}"
+
+def is_valid_email(email: str) -> bool:
+    return email.endswith("@utec.edu.pe")

requirements.txt

@@ -0,0 +1,37 @@
+# -----------------------------
+# 🚀 Server and API
+# -----------------------------
+fastapi
+uvicorn
+
+# -----------------------------
+# ⚙️ Configuration and Environment Variables
+# -----------------------------
+python-dotenv
+
+# -----------------------------
+# 🗄️ Database (Supabase)
+# -----------------------------
+supabase
+
+# -----------------------------
+# 🔐 JWT Tokens and Security
+# -----------------------------
+python-jose
+passlib[bcrypt]
+
+# -----------------------------
+# 📤 Email Sending (SendGrid)
+# -----------------------------
+sendgrid
+
+# -----------------------------
+# 🧩 Validations and Models
+# -----------------------------
+pydantic
+email-validator
+
+# -----------------------------
+# 📨 Optional: Email Templates (HTML)
+# -----------------------------
+jinja2