|
|
from fastapi import APIRouter, Depends, HTTPException, status, Security, Body, Query |
|
|
from fastapi.security import OAuth2PasswordRequestForm |
|
|
from models.user import UserSignup |
|
|
from db.supabase_service import get_supabase |
|
|
from typing import Annotated |
|
|
from supabase import Client |
|
|
from utils.auth import get_id |
|
|
from fastapi.encoders import jsonable_encoder |
|
|
from models.enums import Role |
|
|
from gotrue.errors import AuthApiError |
|
|
from crud.user import update_user |
|
|
from utils.exceptions import BAD_REQUEST, CONFLICT, NOT_FOUND |
|
|
|
|
|
router = APIRouter(tags=["Authentication"]) |
|
|
|
|
|
|
|
|
@router.post("/login", description="Login user using email and password") |
|
|
async def login( |
|
|
form_data: Annotated[OAuth2PasswordRequestForm, Depends()], |
|
|
supabase: Annotated[Client, Depends(get_supabase)], |
|
|
): |
|
|
email = form_data.username |
|
|
password = form_data.password |
|
|
try: |
|
|
user = supabase.auth.sign_in_with_password( |
|
|
{"email": email, "password": password} |
|
|
) |
|
|
return { |
|
|
"access_token": user.session.access_token, |
|
|
"token_type": "bearer", |
|
|
} |
|
|
except: |
|
|
raise HTTPException( |
|
|
status_code=status.HTTP_400_BAD_REQUEST, |
|
|
detail="Incorrect email or password", |
|
|
) |
|
|
|
|
|
|
|
|
@router.post( |
|
|
"/signup", description="Sign up new user", status_code=status.HTTP_201_CREATED |
|
|
) |
|
|
async def signup( |
|
|
user: Annotated[UserSignup, Body()], |
|
|
supabase: Annotated[Client, Depends(get_supabase)], |
|
|
): |
|
|
email = user.email |
|
|
password = user.password |
|
|
if len(password) < 6: |
|
|
raise HTTPException( |
|
|
status_code=status.HTTP_400_BAD_REQUEST, |
|
|
detail="Password should be at least 6 characters", |
|
|
) |
|
|
try: |
|
|
user.role = Role.user |
|
|
res = supabase.auth.sign_up( |
|
|
{ |
|
|
"email": email, |
|
|
"password": password, |
|
|
"options": { |
|
|
"data": jsonable_encoder(user, exclude=("password", "email")) |
|
|
}, |
|
|
} |
|
|
) |
|
|
return {"detail": "User created"} |
|
|
except AuthApiError: |
|
|
raise CONFLICT |
|
|
except: |
|
|
raise BAD_REQUEST |
|
|
|
|
|
|
|
|
@router.post("/reset_password", description="Send reset password email") |
|
|
async def reset_password( |
|
|
supabase: Annotated[Client, Depends(get_supabase)], |
|
|
email: str, |
|
|
): |
|
|
try: |
|
|
if ( |
|
|
len(supabase.rpc("get_user_id_by_email", {"email": email}).execute().data) |
|
|
> 0 |
|
|
): |
|
|
supabase.auth.reset_password_email(email) |
|
|
return {"detail": "Reset password email sent"} |
|
|
else: |
|
|
raise NOT_FOUND |
|
|
except: |
|
|
raise NOT_FOUND |
|
|
|
|
|
|
|
|
@router.post("/reset_password_confirm", description="Reset password") |
|
|
async def reset_password_confirm( |
|
|
supabase: Annotated[Client, Depends(get_supabase)], |
|
|
email: Annotated[str, Query(description="Email", title="Email")], |
|
|
new_password: Annotated[ |
|
|
str, Query(min_length=6, description="New password", title="New password") |
|
|
], |
|
|
token: Annotated[ |
|
|
str, Query(description="Reset password token", title="Reset password token") |
|
|
], |
|
|
): |
|
|
try: |
|
|
supabase.auth.verify_otp( |
|
|
{ |
|
|
"email": email, |
|
|
"token": token, |
|
|
"type": "email", |
|
|
} |
|
|
) |
|
|
await update_user(supabase, password=new_password) |
|
|
return {"detail": "Your password has been reset"} |
|
|
except: |
|
|
raise HTTPException( |
|
|
status_code=status.HTTP_400_BAD_REQUEST, |
|
|
detail="Incorrect token", |
|
|
) |
|
|
|
