Upload app/auth.py with huggingface_hub

app/auth.py

@@ -25,56 +25,36 @@ def create_access_token(data: dict, expires_delta: Optional[timedelta] = None) -
     to_encode = data.copy()
     expire = datetime.now(timezone.utc) + (expires_delta or timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES))
     to_encode.update({"exp": expire})
-    token = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
-    print(f"[AUTH] Created token for sub={data.get('sub')}, expires={expire}")
-    return token
+    return jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
 
 
 def decode_token(token: str) -> Optional[dict]:
     try:
-        payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
-        print(f"[AUTH] Token decoded OK: {payload}")
-        return payload
+        return jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
     except JWTError as e:
-        print(f"[AUTH] Token decode FAILED: {e}")
+        print(f"[AUTH] Token decode failed: {e}")
         return None
 
 
 def get_current_user(request: Request, db: Session = Depends(get_db)) -> User:
-    print(f"[AUTH] --- get_current_user called ---")
-    print(f"[AUTH] URL: {request.url}")
-    print(f"[AUTH] Query params: {dict(request.query_params)}")
-    print(f"[AUTH] Cookies: {dict(request.cookies)}")
-
-    # Try query param first
     token = request.query_params.get("token")
-    if token:
-        print(f"[AUTH] Found token in query param (len={len(token)})")
-    else:
+    if not token:
         token = request.cookies.get("access_token")
-        if token:
-            print(f"[AUTH] Found token in cookie")
-        else:
-            auth = request.headers.get("authorization", "")
-            if auth.startswith("Bearer "):
-                token = auth[7:]
-                print(f"[AUTH] Found token in header")
-            else:
-                print(f"[AUTH] NO TOKEN FOUND anywhere")
-                raise HTTPException(status_code=401, detail="Not authenticated")
+    if not token:
+        auth = request.headers.get("authorization", "")
+        if auth.startswith("Bearer "):
+            token = auth[7:]
+    if not token:
+        raise HTTPException(status_code=401, detail="Not authenticated")
 
     payload = decode_token(token)
     if not payload:
-        print(f"[AUTH] Token invalid")
         raise HTTPException(status_code=401, detail="Invalid token")
 
-    user_id = payload.get("sub")
+    user_id = int(payload.get("sub"))
     user = db.query(User).filter(User.id == user_id).first()
-    if not user:
-        print(f"[AUTH] User id={user_id} NOT FOUND in DB")
+    if not user or not user.is_active:
         raise HTTPException(status_code=401, detail="User not found")
-
-    print(f"[AUTH] Authenticated: {user.email} ({user.role})")
     return user