Spaces:
Sleeping
Sleeping
File size: 2,645 Bytes
e650b33 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 | from datetime import datetime, timedelta
from typing import Optional
import bcrypt
from jose import JWTError, jwt
from src.config import settings
# JWT settings
SECRET_KEY = settings.AUTH_SECRET
ALGORITHM = settings.JWT_ALGORITHM
ACCESS_TOKEN_EXPIRE_MINUTES = settings.JWT_EXPIRATION_MINUTES
def verify_password(plain_password: str, hashed_password: str) -> bool:
"""
Verify a plain password against a hashed password.
Args:
plain_password: The plain text password to verify
hashed_password: The hashed password to compare against
Returns:
bool: True if password matches, False otherwise
"""
# Ensure password is encoded as bytes (bcrypt limitation: max 72 bytes)
password_bytes = plain_password.encode('utf-8')
if len(password_bytes) > 72:
password_bytes = password_bytes[:72]
# Verify the password
try:
return bcrypt.checkpw(password_bytes, hashed_password.encode('utf-8'))
except (ValueError, TypeError):
return False
def get_password_hash(password: str) -> str:
"""
Generate a hash for the given password.
Args:
password: The plain text password to hash
Returns:
str: The hashed password
"""
# Ensure password is encoded as bytes (bcrypt limitation: max 72 bytes)
password_bytes = password.encode('utf-8')
if len(password_bytes) > 72:
password_bytes = password_bytes[:72]
# Generate salt and hash
salt = bcrypt.gensalt()
hashed = bcrypt.hashpw(password_bytes, salt)
return hashed.decode('utf-8')
def create_access_token(data: dict, expires_delta: Optional[timedelta] = None) -> str:
"""
Create a JWT access token.
Args:
data: The data to include in the token (typically user info)
expires_delta: Optional expiration time delta (defaults to 7 days)
Returns:
str: The encoded JWT token
"""
to_encode = data.copy()
if expires_delta:
expire = datetime.utcnow() + expires_delta
else:
expire = datetime.utcnow() + timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
to_encode.update({"exp": expire})
encoded_jwt = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
return encoded_jwt
def verify_token(token: str) -> Optional[dict]:
"""
Verify a JWT token and return the payload if valid.
Args:
token: The JWT token to verify
Returns:
dict: The token payload if valid, None if invalid
"""
try:
payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
return payload
except JWTError:
return None |