jwt

.env

@@ -1,6 +1,10 @@
 WASABI_BUCKET=bloom-associates
-AWS_ACCESS_KEY_ID=bloom-backend-user
-AWS_SECRET_ACCESS_KEY=DPSE24FU9UCACAXMYSFO
+AWS_ACCESS_KEY_ID=DPSE24FU9UCACAXMYSFO
+AWS_SECRET_ACCESS_KEY=l4JymOwzqTB6DozzWyrXw62ah0zD6BznCj9Lp3Lf
 REGION_NAME=ap-southeast-1
-ENDPOINT_URL=https://s3.us-east-1.wasabisys.com
+ENDPOINT_URL=https://s3.ap-southeast-1.wasabisys.com
+SECRET_KEY=6a2b3c4d5e6f7g8h9i0j
+
+
+
 

app/api/v1/auth_routes.py

@@ -0,0 +1,30 @@
+from fastapi import APIRouter, HTTPException, status, Depends, Form
+from jose import jwt
+from datetime import datetime, timedelta
+from settings import SECRET_KEY, ALGORITHM
+
+router = APIRouter(prefix="/auth", tags=["Authentication"])
+
+# Hardcoded test user
+USERS_DB = {
+    "admin@example.com": {
+        "password": "admin123",
+        "merchant_id": "MERCHANT001",
+        "user_id": "admin"
+    }
+}
+
+@router.post("/login")
+def login(username: str = Form(...), password: str = Form(...)):
+    user = USERS_DB.get(username)
+    if not user or user["password"] != password:
+        raise HTTPException(status_code=401, detail="Invalid credentials")
+
+    token_data = {
+        "sub": user["user_id"],
+        "merchant_id": user["merchant_id"],
+        "exp": datetime.utcnow() + timedelta(hours=2)
+    }
+
+    access_token = jwt.encode(token_data, SECRET_KEY, algorithm=ALGORITHM)
+    return {"access_token": access_token, "token_type": "bearer"}

app/api/v1/media_routes.py

@@ -1,13 +1,17 @@
-from fastapi import APIRouter, UploadFile, File, HTTPException
+from fastapi import APIRouter, UploadFile, File, Depends
 from app.services.media_service import upload_file_to_s3, generate_presigned_url, delete_s3_object
+from app.dependencies.auth import get_current_user
 
 router = APIRouter(prefix="/media", tags=["Media"])
 
+
 @router.post("/upload")
-async def upload(file: UploadFile = File(...)):
-    if not file.content_type.startswith(("image/", "application/")):
-        raise HTTPException(status_code=400, detail="Invalid file type")
-    return upload_file_to_s3(file)
+async def upload_file(
+    file: UploadFile = File(...),
+    current_user: dict = Depends(get_current_user)
+):
+    merchant_id = current_user["merchant_id"]
+    return upload_file_to_s3(file, tenant_id=merchant_id)
 
 @router.get("/presigned-url")
 async def get_url(key: str):

app/app.py

@@ -1,6 +1,8 @@
 from fastapi import FastAPI
-from app.api.v1 import media_routes
+from app.api.v1 import media_routes, auth_routes
 
 app = FastAPI(title="Insightfy Media Service")
 
-app.include_router(media_routes.router)
+app.include_router(media_routes.router)
+
+app.include_router(auth_routes.router)

app/dependencies/auth.py

@@ -0,0 +1,21 @@
+from fastapi import Depends
+from fastapi.security import OAuth2PasswordBearer
+from app.utils.jwt import decode_jwt_token
+from settings import SECRET_KEY, ALGORITHM
+
+
+oauth2_scheme = OAuth2PasswordBearer(tokenUrl="/auth/login")
+
+def get_current_user(token: str = Depends(oauth2_scheme)) -> dict:
+    try:
+        payload = decode_jwt_token(token)
+        return {
+            "user_id": payload["sub"],
+            "merchant_id": payload["merchant_id"],
+            "role": payload.get("role", "user")
+        }
+    except Exception:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="Invalid authentication credentials",
+        )

app/services/media_service.py

@@ -1,14 +1,36 @@
 import boto3
+import uuid
+
 from fastapi import UploadFile
 from settings import WASABI_BUCKET, WASABI_CONFIG
-import uuid
+from app.utils.compress import optimize_image, generate_thumbnail
 
 s3 = boto3.client("s3", **WASABI_CONFIG)
 
-def upload_file_to_s3(file: UploadFile):
-    key = f"uploads/{uuid.uuid4()}_{file.filename}"
-    s3.upload_fileobj(file.file, WASABI_BUCKET, key)
-    return {"key": key, "url": generate_presigned_url(key)}
+
+
+def upload_file_to_s3(file: UploadFile, tenant_id: str):
+    original_ext = os.path.splitext(file.filename)[-1] or ".jpg"
+    unique_id = str(uuid.uuid4())
+
+    # Optimize and upload main image
+    optimized_image = optimize_image(file)
+    key_image = f"{tenant_id}/uploads/{unique_id}{original_ext}"
+    s3.upload_fileobj(optimized_image, WASABI_BUCKET, key_image)
+
+    # Reset file and generate thumbnail
+    file.file.seek(0)
+    thumbnail = generate_thumbnail(file)
+    key_thumb = f"{tenant_id}/uploads/thumbnails/{unique_id}_thumb{original_ext}"
+    s3.upload_fileobj(thumbnail, WASABI_BUCKET, key_thumb)
+
+    return {
+        "key": key_image,
+        "url": generate_presigned_url(key_image),
+        "thumbnail_key": key_thumb,
+        "thumbnail_url": generate_presigned_url(key_thumb)
+    }
+
 
 def generate_presigned_url(key: str, expiration: int = 3600):
     return s3.generate_presigned_url(

app/utils/compress.py

@@ -0,0 +1,24 @@
+from PIL import Image
+from io import BytesIO
+from fastapi import UploadFile
+
+
+# 🔧 Optimize image (resize + compress)
+def optimize_image(file: UploadFile, max_size=(1024, 1024), quality=75) -> BytesIO:
+    image = Image.open(file.file)
+    image = image.convert("RGB")
+    image.thumbnail(max_size)
+    output = BytesIO()
+    image.save(output, format="JPEG", quality=quality, optimize=True)
+    output.seek(0)
+    return output
+
+# 🖼️ Generate thumbnail
+def generate_thumbnail(file: UploadFile, size=(200, 200)) -> BytesIO:
+    image = Image.open(file.file)
+    image = image.convert("RGB")
+    image.thumbnail(size)
+    output = BytesIO()
+    image.save(output, format="JPEG", quality=70, optimize=True)
+    output.seek(0)
+    return output

app/utils/jwt.py

@@ -0,0 +1,11 @@
+from jose import jwt, JWTError
+
+SECRET_KEY = "your-super-secret-key"
+ALGORITHM = "HS256"
+
+def decode_jwt_token(token: str) -> dict:
+    try:
+        payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
+        return payload
+    except JWTError:
+        raise ValueError("Invalid token")

requirements.txt

@@ -2,4 +2,6 @@ fastapi
 boto3
 uvicorn
 python-multipart
-python-dotenv
+python-dotenv
+pillow
+python-jose

settings.py

@@ -4,8 +4,6 @@ import os
 
 load_dotenv()
 
-
-
 #WASABI_BUCKET = "bloom-associates"
 
 WASABI_BUCKET = os.getenv("WASABI_BUCKET", "bloom-associates")
@@ -17,4 +15,7 @@ WASABI_CONFIG = {
     "region_name": os.getenv("REGION_NAME", "us-east-1"),
     "endpoint_url": os.getenv("ENDPOINT_URL", "https://s3.us-east-1.wasabisys.com")
 
-}
+}
+
+SECRET_KEY = os.getenv("SECRET_KEY", "your-super-secret-key")
+ALGORITHM = os.getenv("ALGORITHM", "HS256")