Add the endpoints for login, signup, forgot password

app/models/user.py

@@ -1,6 +1,7 @@
 from pydantic import BaseModel, EmailStr
 
 class UserCreate(BaseModel):
+    full_name: str
     email: EmailStr
     password: str
 
@@ -20,3 +21,11 @@ class UserOut(BaseModel):
     role: str
     companies: list[str]
     chatbots: list[str]
+
+class SecurityQuestionsPayload(BaseModel):
+    user_id: str
+    questions: dict
+
+class SecurityAnswerPayload(BaseModel):
+    email: str
+    answers: dict[str,str]

app/routers/user.py

@@ -28,11 +28,12 @@ async def create_user(payload: UserCreate):
 
     user_doc = {
         "_id": user_id,
+        "full_name": payload.full_name,
         "email": payload.email,
         "hashed_password": hashed,
-        "role": "member",
         "companies": [],
         "chatbots": [],
+        "security_questions": {},
         "created_at": datetime.now(timezone.utc)
     }
 
@@ -42,8 +43,17 @@ async def create_user(payload: UserCreate):
     except Exception as e:
         print(f"Failed to create user: {e}")
     
-    return {"message": "Success"}
+    return {"message": "Success", "user_id": user_id}
 
+@router.post("/register/security-questions")
+async def set_security_questions(payload: SecurityQuestionsPayload):
+    user = await users.find_one({"_id": payload.user_id})
+    if not user:
+        raise HTTPException(status_code=404, detail="User Not Found")
+    
+    hashed_questions = {q: hash_password(a) for q,a in payload.questions.items()}
+    await users.update_one({"_id": payload.user_id}, {"$set" :  {"security_questions": hashed_questions}})
+    return {"message": "Security questions set successfully"}
 
 @router.post("/login")
 async def login(payload: UserLogin):
@@ -60,4 +70,41 @@ async def login(payload: UserLogin):
          "access_token": access_token,
          "token_type": "bearer",
          "user_id": existing["_id"]
-    }
+    }
+
+@router.post("/forgot-password/email")
+async def verify_email(email: str):
+    user = await users.find_one({"email": email})
+    if not user:
+        raise HTTPException(status_code=404, detail="User email not in our records")
+    
+    questions = list(user["security_questions"].keys())
+    return {"questions": questions}
+
+
+@router.post("/forgot-password/verify")
+async def verify_security_answer(payload: SecurityAnswerPayload):    
+    email = payload.email
+    answers = payload.answers
+
+    user = await users.find_one({"email": email})
+    if not user:
+        raise HTTPException(status_code=404, detail="User not found")
+    
+    for question, answer in answers.items():
+        if question not in user["security_questions"] or \
+           not verify_password(answer, user["security_questions"][question]):
+            raise HTTPException(status_code=400, detail="One or more security answers are incorrect")
+    
+    return {"message": "Verification successful"}
+
+@router.post("/forgot-password/reset")
+async def reset_pass(email: str, new_pass: str):
+    user = await users.find_one({"email": email})
+    if not user:
+        raise HTTPException(status_code=404, detail="User not Found")
+    
+    hashed = hash_password(new_pass)
+    await users.update_one({"email": email}, {"$set": {"hashed_password": hashed}})
+
+    return {"message": "Password reset successfully"}

test_endpoint.py

@@ -9,20 +9,26 @@ def safe_print_response(resp):
     except Exception:
         print("Raw response text:", resp.text)
 
-# 1️⃣ Register a user
+# 1️⃣ Register a user with correct field names
 register_data = {
-    "email": "testuser@example.com",
-    "password": "vip11017"
+    "email": "test@example.com",
+    "password": "test",
+    "security_question_1": "What is your favorite color?",
+    "security_answer_1": "Blue",
+    "security_question_2": "What is your mother's maiden name?",
+    "security_answer_2": "Smith"
 }
+
 resp = requests.post(f"{BASE_URL}/auth/register", json=register_data)
 print("Register Response:")
 safe_print_response(resp)
 
 # 2️⃣ Login to get JWT token
 login_data = {
-    "email": "testuser@example.com",
-    "password": "vip11017"
+    "email": "test@example.com",
+    "password": "test"
 }
+
 resp = requests.post(f"{BASE_URL}/auth/login", json=login_data)
 print("\nLogin Response:")
 safe_print_response(resp)
@@ -30,11 +36,5 @@ safe_print_response(resp)
 if resp.status_code == 200:
     token = resp.json().get("access_token")
     print("\nJWT Access Token:", token)
-
-    # 3️⃣ Example: Test a dummy protected route (if you implement one)
-    # headers = {"Authorization": f"Bearer {token}"}
-    # protected_resp = requests.get(f"{BASE_URL}/protected", headers=headers)
-    # print("\nProtected Route Response:")
-    # safe_print_response(protected_resp)
 else:
     print("Login failed, cannot test protected route")