Spaces:
Running
Running
File size: 7,970 Bytes
09801ca | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 | import uuid
from typing import Optional
from sqlalchemy.ext.asyncio import AsyncSession
from sqlalchemy.future import select
from database.orm import UserProfile
from core.auth import create_access_token, verify_password, get_password_hash
from core.auth import get_current_user, get_current_user_optional, AuthenticatedUser as AuthUser, get_admin_user, get_super_admin_user, decode_jwt
from database.models import AuthSignUp, AuthLogin, AuthMagicLink, UserRole
class AuthService:
def __init__(self, db: AsyncSession):
self.db = db
async def signup(self, email: str, password: str, metadata: dict = None) -> dict:
metadata = metadata or {}
stmt = select(UserProfile).where(UserProfile.email == email)
result = await self.db.execute(stmt)
if result.scalar_one_or_none():
return {"success": False, "message": "Email already registered"}
hashed_password = get_password_hash(password)
new_user = UserProfile(
email=email,
hashed_password=hashed_password,
full_name=metadata.get("full_name"),
company_name=metadata.get("company_name")
)
self.db.add(new_user)
try:
await self.db.commit()
await self.db.refresh(new_user)
except Exception as e:
await self.db.rollback()
return {"success": False, "message": str(e)}
access_token = create_access_token(data={"sub": str(new_user.id), "email": new_user.email, "role": "authenticated"})
return {
"success": True,
"user": {"id": str(new_user.id), "email": new_user.email},
"session": {"access_token": access_token},
"message": "Signup successful"
}
async def login(self, email: str, password: str) -> dict:
stmt = select(UserProfile).where(UserProfile.email == email)
result = await self.db.execute(stmt)
user = result.scalar_one_or_none()
if not user or not verify_password(password, user.hashed_password):
return {"success": False, "message": "Invalid credentials"}
access_token = create_access_token(data={"sub": str(user.id), "email": user.email, "role": "authenticated"})
return {
"success": True,
"user": {"id": str(user.id), "email": user.email},
"session": {"access_token": access_token}
}
async def get_user_profile(self, user_id: str) -> dict:
stmt = select(UserProfile).where(UserProfile.id == uuid.UUID(user_id))
result = await self.db.execute(stmt)
user = result.scalar_one_or_none()
if user:
return {
"success": True,
"profile": {
"id": str(user.id),
"email": user.email,
"full_name": user.full_name,
"company_name": user.company_name,
"avatar_url": user.avatar_url,
"role": "authenticated"
}
}
return {"success": False, "message": "User not found"}
async def update_user_profile(self, user_id: str, updates: dict) -> dict:
stmt = select(UserProfile).where(UserProfile.id == uuid.UUID(user_id))
result = await self.db.execute(stmt)
user = result.scalar_one_or_none()
if not user:
return {"success": False, "message": "User not found"}
for k, v in updates.items():
if hasattr(user, k):
setattr(user, k, v)
try:
await self.db.commit()
await self.db.refresh(user)
return {
"success": True,
"profile": {
"id": str(user.id),
"email": user.email,
"full_name": user.full_name,
"company_name": user.company_name,
"avatar_url": user.avatar_url,
"role": "authenticated"
}
}
except Exception as e:
await self.db.rollback()
return {"success": False, "message": str(e)}
async def logout(self, token: str) -> dict:
return {"success": True, "message": "Logged out successfully"}
async def refresh_token(self, token: str) -> dict:
return {"success": False, "message": "Refresh tokens require implementation"}
async def send_magic_link(self, email: str) -> dict:
return {"success": False, "message": "Magic link not supported natively yet"}
async def update_or_create_oauth_user(self, provider: str, email: str, full_name: str = None) -> dict:
stmt = select(UserProfile).where(UserProfile.email == email)
result = await self.db.execute(stmt)
user = result.scalar_one_or_none()
if not user:
import secrets
random_password = secrets.token_urlsafe(32)
hashed_password = get_password_hash(random_password)
user = UserProfile(
email=email,
hashed_password=hashed_password,
full_name=full_name
)
self.db.add(user)
try:
await self.db.commit()
await self.db.refresh(user)
except Exception as e:
await self.db.rollback()
return {"success": False, "message": str(e)}
access_token = create_access_token(data={"sub": str(user.id), "email": user.email, "role": "authenticated"})
return {
"success": True,
"user": {"id": str(user.id), "email": user.email},
"session": {"access_token": access_token}
}
def get_auth_service(db: AsyncSession) -> AuthService:
return AuthService(db)
async def get_user_id_from_headers(x_user_id: Optional[str] = None, authorization: Optional[str] = None) -> str:
# 1. First, always prioritize the Authorization header for absolute security.
if authorization and authorization.startswith("Bearer "):
token = authorization[7:]
# Check if it's a Developer API Token
if token.startswith("dv_live_") or token.startswith("dv_test_"):
try:
from database.db import AsyncSessionLocal
from database.orm import DeveloperAPIKey
from sqlalchemy import select
async with AsyncSessionLocal() as db:
result = await db.execute(select(DeveloperAPIKey).filter(DeveloperAPIKey.api_key == token))
key = result.scalars().first()
if key:
if key.status == 'revoked':
print(f"❌ Developer Token Revoked: {token}")
return "default"
key.total_calls += 1
await db.commit()
print(f"✅ Developer Token Auth Success for user: {key.user_id}")
return str(key.user_id)
else:
print(f"❌ Developer Token not found in DB: {token}")
except Exception as e:
print(f"💥 Developer Token Auth Error: {e}")
# Otherwise, decode as JWT
else:
try:
payload = decode_jwt(token)
return payload.get("sub", "default")
except Exception as e:
print(f"💥 JWT Decode Error: {e}")
# 2. Fallback to X-User-ID for guests and legacy endpoints.
if x_user_id and x_user_id not in ["default", "guest", "", "null", "undefined"]:
print(f"⚠️ Falling back to X-User-ID: {x_user_id}")
return x_user_id
print("⚠️ Falling back to 'default'")
return "default"
|