Update core/security.py

core/security.py

@@ -1,17 +1,17 @@
 from datetime import datetime, timedelta
 from passlib.context import CryptContext
 from jose import jwt, JWTError
-from fastapi import Depends, HTTPException
+from fastapi import Depends, HTTPException, status
 from fastapi.security import OAuth2PasswordBearer
 from core.config import SECRET_KEY, ALGORITHM, ACCESS_TOKEN_EXPIRE_MINUTES
-from db.mongo import users_collection  # make sure this path is correct
+from db.mongo import users_collection
+
+# OAuth2 setup — adjust tokenUrl if your API has a prefix like /api
+oauth2_scheme = OAuth2PasswordBearer(tokenUrl="/login")  # or "/api/login" if using APIRouter(prefix="/api")
 
 # Password hashing context
 pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
 
-# OAuth2 setup for token extraction
-oauth2_scheme = OAuth2PasswordBearer(tokenUrl="/login")
-
 # Hash a plain password
 def hash_password(password: str) -> str:
     return pwd_context.hash(password)
@@ -29,16 +29,19 @@ def create_access_token(data: dict, expires_delta: timedelta = None):
 
 # Get the current user from the JWT token
 async def get_current_user(token: str = Depends(oauth2_scheme)):
+    print("🔐 Raw token received:", token)
     try:
         payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
         email: str = payload.get("sub")
         if email is None:
             raise HTTPException(status_code=401, detail="Invalid token: subject missing")
-    except JWTError:
+    except JWTError as e:
+        print("❌ JWTError while decoding token:", str(e))
         raise HTTPException(status_code=401, detail="Could not validate token")
 
     user = await users_collection.find_one({"email": email})
     if not user:
         raise HTTPException(status_code=404, detail="User not found")
 
+    print("✅ Authenticated user:", user["email"])
     return user