82 lines
2.3 KiB
Python
82 lines
2.3 KiB
Python
"""Authentication routes for SocialPhoto API."""
|
|
from typing import Annotated
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException, status
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.db.database import get_db
|
|
from app.schemas.auth import Token, UserLogin, UserRegister
|
|
from app.services.auth_service import AuthService, create_access_token
|
|
|
|
|
|
router = APIRouter(prefix="/auth", tags=["Authentication"])
|
|
|
|
|
|
@router.post("/register", response_model=Token, status_code=status.HTTP_201_CREATED)
|
|
async def register(
|
|
user_data: UserRegister,
|
|
db: Annotated[Session, Depends(get_db)],
|
|
) -> Token:
|
|
"""Register a new user.
|
|
|
|
Args:
|
|
user_data: User registration data (username, email, password).
|
|
db: Database session.
|
|
|
|
Returns:
|
|
Token object with access token.
|
|
|
|
Raises:
|
|
HTTPException: If username or email already exists.
|
|
"""
|
|
# Check if username exists
|
|
existing_user = AuthService.get_user_by_username(db, user_data.username)
|
|
if existing_user:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_400_BAD_REQUEST,
|
|
detail="Username already registered",
|
|
)
|
|
|
|
# Check if email exists
|
|
existing_email = AuthService.get_user_by_email(db, user_data.email)
|
|
if existing_email:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_400_BAD_REQUEST,
|
|
detail="Email already registered",
|
|
)
|
|
|
|
# Create user
|
|
user = AuthService.create_user(db, user_data)
|
|
|
|
# Create access token
|
|
access_token = create_access_token(data={"sub": str(user.id)})
|
|
return Token(access_token=access_token)
|
|
|
|
|
|
@router.post("/login", response_model=Token)
|
|
async def login(
|
|
user_data: UserLogin,
|
|
db: Annotated[Session, Depends(get_db)],
|
|
) -> Token:
|
|
"""Login and get access token.
|
|
|
|
Args:
|
|
user_data: User login data (username, password).
|
|
db: Database session.
|
|
|
|
Returns:
|
|
Token object with access token.
|
|
|
|
Raises:
|
|
HTTPException: If credentials are invalid.
|
|
"""
|
|
user = AuthService.authenticate_user(db, user_data.username, user_data.password)
|
|
if not user:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_401_UNAUTHORIZED,
|
|
detail="Incorrect username or password",
|
|
)
|
|
|
|
access_token = create_access_token(data={"sub": str(user.id)})
|
|
return Token(access_token=access_token)
|