Spaces:
Running
Running
File size: 1,587 Bytes
b2c1c67 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 | from datetime import datetime, timedelta, timezone
from typing import Any
import bcrypt
import jwt
from app.config import get_settings
settings = get_settings()
def hash_password(password: str) -> str:
return bcrypt.hashpw(password.encode("utf-8"), bcrypt.gensalt()).decode("utf-8")
def verify_password(password: str, password_hash: str) -> bool:
try:
return bcrypt.checkpw(password.encode("utf-8"), password_hash.encode("utf-8"))
except ValueError:
return False
def _create_token(subject: str, token_type: str, expires_delta: timedelta) -> str:
now = datetime.now(timezone.utc)
payload: dict[str, Any] = {
"sub": subject,
"type": token_type,
"iat": now,
"exp": now + expires_delta,
}
return jwt.encode(payload, settings.secret_key, algorithm=settings.jwt_algorithm)
def create_access_token(user_id: int) -> str:
return _create_token(
str(user_id), "access", timedelta(minutes=settings.access_token_expire_minutes)
)
def create_refresh_token(user_id: int) -> str:
return _create_token(
str(user_id), "refresh", timedelta(days=settings.refresh_token_expire_days)
)
def decode_token(token: str, expected_type: str) -> int | None:
try:
payload = jwt.decode(
token, settings.secret_key, algorithms=[settings.jwt_algorithm]
)
except jwt.PyJWTError:
return None
if payload.get("type") != expected_type:
return None
try:
return int(payload["sub"])
except (KeyError, ValueError):
return None
|