52 lines
2.0 KiB
Python
52 lines
2.0 KiB
Python
|
from flask import Blueprint, request, jsonify
|
||
|
|
|
||
|
|
from old_routes import auth_bp
|
||
|
|
from utils.cookie_utils import clear_refresh_token_cookie, set_refresh_token_cookie, get_refresh_token_from_cookie
|
||
|
|
from utils.jwt_utils import generate_access_token, generate_refresh_token, verify_access_token, verify_refresh_token
|
||
|
|
from utils.response_utils import use_response_success, use_response_error, forbidden_response, un_authorized_response
|
||
|
|
from mock_data import MOCK_USERS
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
@auth_bp.route('/login', methods=['POST'])
|
||
|
|
def login():
|
||
|
|
data = request.get_json()
|
||
|
|
username = data.get('username')
|
||
|
|
password = data.get('password')
|
||
|
|
if not username or not password:
|
||
|
|
return use_response_error('BadRequestException', 'Username and password are required'), 400
|
||
|
|
user = next((u for u in MOCK_USERS if u['username'] == username and u['password'] == password), None)
|
||
|
|
if not user:
|
||
|
|
clear_refresh_token_cookie()
|
||
|
|
return forbidden_response('Username or password is incorrect.')
|
||
|
|
access_token = generate_access_token(user)
|
||
|
|
refresh_token = generate_refresh_token(user)
|
||
|
|
set_refresh_token_cookie(refresh_token)
|
||
|
|
return use_response_success({
|
||
|
|
**user,
|
||
|
|
'access_token': access_token
|
||
|
|
})
|
||
|
|
|
||
|
|
@auth_bp.route('/refresh', methods=['POST'])
|
||
|
|
def refresh():
|
||
|
|
refresh_token = get_refresh_token_from_cookie()
|
||
|
|
if not refresh_token:
|
||
|
|
return forbidden_response()
|
||
|
|
clear_refresh_token_cookie()
|
||
|
|
user_info = verify_refresh_token(refresh_token)
|
||
|
|
if not user_info:
|
||
|
|
return forbidden_response()
|
||
|
|
user = next((u for u in MOCK_USERS if u['username'] == user_info['username']), None)
|
||
|
|
if not user:
|
||
|
|
return forbidden_response()
|
||
|
|
access_token = generate_access_token(user)
|
||
|
|
set_refresh_token_cookie(refresh_token)
|
||
|
|
return jsonify({'access_token': access_token})
|
||
|
|
|
||
|
|
@auth_bp.route('/logout', methods=['POST'])
|
||
|
|
def logout():
|
||
|
|
refresh_token = get_refresh_token_from_cookie()
|
||
|
|
if not refresh_token:
|
||
|
|
return use_response_success('')
|
||
|
|
clear_refresh_token_cookie()
|
||
|
|
return use_response_success('')
|