File size: 2,778 Bytes
af4bd3a | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 | """
Authentication Module
=====================
User authentication logic for Pharma K platform.
"""
import hashlib
import re
from typing import Optional, Tuple
from utils.database import (
create_user, get_user_by_email, update_last_login,
get_all_users, get_default_llm_config, set_default_llm_config
)
def hash_password(password: str) -> str:
"""Hash password using SHA256 (simple, no bcrypt dependency)."""
return hashlib.sha256(password.encode()).hexdigest()
def verify_password(password: str, password_hash: str) -> bool:
"""Verify password against hash."""
return hash_password(password) == password_hash
def validate_email(email: str) -> bool:
"""Validate email format."""
pattern = r'^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$'
return bool(re.match(pattern, email))
def validate_password(password: str) -> Tuple[bool, str]:
"""
Validate password strength.
Returns (is_valid, error_message)
"""
if len(password) < 6:
return False, "密码长度至少6位"
return True, ""
def register_user(email: str, password: str) -> Tuple[bool, str]:
"""
Register a new user.
Returns (success, message)
"""
# Validate email
if not validate_email(email):
return False, "邮箱格式不正确"
# Validate password
is_valid, error_msg = validate_password(password)
if not is_valid:
return False, error_msg
# Check if email already exists
if get_user_by_email(email):
return False, "该邮箱已被注册"
# Create user
password_hash = hash_password(password)
if create_user(email, password_hash):
return True, "注册成功！请登录"
else:
return False, "注册失败，请重试"
def login_user(email: str, password: str) -> Tuple[bool, str, Optional[dict]]:
"""
Login user.
Returns (success, message, user_info)
"""
user = get_user_by_email(email)
if not user:
return False, "用户不存在", None
if not verify_password(password, user['password_hash']):
return False, "密码错误", None
# Update last login
update_last_login(email)
return True, "登录成功", {
'id': user['id'],
'email': user['email'],
'role': user['role']
}
def is_admin(user: dict) -> bool:
"""Check if user is admin."""
return user and user.get('role') == 'admin'
# Re-export database functions for convenience
__all__ = [
'register_user',
'login_user',
'is_admin',
'get_all_users',
'get_default_llm_config',
'set_default_llm_config',
'validate_email'
]
|