get current user from mongo

This commit is contained in:
Valentin CZERYBA 2023-10-13 22:35:04 +02:00
parent 9184d13391
commit 02d4257ad6
3 changed files with 12 additions and 21 deletions

View File

@ -8,22 +8,11 @@ from jose import JWTError, jwt
from passlib.context import CryptContext from passlib.context import CryptContext
from ..models import users, token from ..models import users, token
from ..dependencies import database
fake_users = [
# password foo
{'id': 1, 'username': 'admin', 'password': '$2b$12$N.i74Kle18n5Toxhas.rVOjZreVC2WM34fCidNDyhSNgxVlbKwX7i',
'roles': 'Admin', 'disabled': False
},
# password bar
{'id': 2, 'username': 'client', 'password': '$2b$12$KUgpw1m0LF/s9NS1ZB5rRO2cA5D13MqRm56ab7ik2ixftXW/aqEyq',
'roles':'User', 'disabled':False}
]
SECRET_KEY = "09d25e094faa6ca2556c818166b7a9563b93f7099f6f0f4caa6cf63b88e8d3e7" SECRET_KEY = "09d25e094faa6ca2556c818166b7a9563b93f7099f6f0f4caa6cf63b88e8d3e7"
ALGORITHM = "HS256" ALGORITHM = "HS256"
pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto") pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
oauth2_scheme = OAuth2PasswordBearer(tokenUrl="token") oauth2_scheme = OAuth2PasswordBearer(tokenUrl="token")
@ -34,13 +23,14 @@ def verify_password(plain_password, hashed_password):
def get_password_hash(password): def get_password_hash(password):
return pwd_context.hash(password) return pwd_context.hash(password)
def get_user(db, username: str): def get_user(username: str):
for user in db: user_repository = users.UserRepository(database=database.database)
if username == user['username']: user = user_repository.find_one_by({'username': username})
return users.UserInDB(**user) return user
def authenticate_user(fake_db, username: str, password: str): def authenticate_user(username: str, password: str):
user = get_user(fake_db, username)
user = get_user(username)
if not user: if not user:
return False return False
if not verify_password(password, user.password): if not verify_password(password, user.password):
@ -71,7 +61,8 @@ async def get_current_user(token_str: Annotated[str, Depends(oauth2_scheme)]):
token_data = token.TokenData(username=username) token_data = token.TokenData(username=username)
except JWTError: except JWTError:
raise credentials_exception raise credentials_exception
user = get_user(fake_users, username=token_data.username)
user = get_user(token_data.username)
if user is None: if user is None:
raise credentials_exception raise credentials_exception
return user return user

View File

@ -13,7 +13,7 @@ ACCESS_TOKEN_EXPIRE_MINUTES = 30
async def login_for_access_token( async def login_for_access_token(
form_data: Annotated[OAuth2PasswordRequestForm, Depends()] form_data: Annotated[OAuth2PasswordRequestForm, Depends()]
): ):
user = users_active.authenticate_user(users_active.fake_users, form_data.username, form_data.password) user = users_active.authenticate_user(form_data.username, form_data.password)
if not user: if not user:
raise HTTPException( raise HTTPException(
status_code=status.HTTP_401_UNAUTHORIZED, status_code=status.HTTP_401_UNAUTHORIZED,

View File

@ -6,7 +6,7 @@ from typing import Annotated
router = APIRouter() router = APIRouter()
@router.get("/users/", tags=["users"], response_model=list[users.UserOut]) @router.get("/users", tags=["users"], response_model=list[users.UserOut])
async def read_users(authorize: Annotated[bool, Depends(permissions_checker.PermissionChecker(roles=["Admin"]))]): async def read_users(authorize: Annotated[bool, Depends(permissions_checker.PermissionChecker(roles=["Admin"]))]):
listUsers = [] listUsers = []
for fake in users_active.fake_users: for fake in users_active.fake_users: