inecs
b49b543d72
- Fix static files not loading due to volume mount conflict - Remove problematic volume mount from docker-compose.yml - Add __init__.py files to make Python packages - Fix all import statements to use relative imports - Update start.sh to use correct module name - Update config.py with correct default paths and values - Ensure all environment variables are properly loaded from .env file
66 lines
2.3 KiB
Python
66 lines
2.3 KiB
Python
#!/usr/bin/env python3
|
|
# -*- coding: utf-8 -*-
|
|
"""
|
|
LogBoard+ - Аутентификация API
|
|
Автор: Сергей Антропов
|
|
Сайт: https://devops.org.ru
|
|
"""
|
|
|
|
from datetime import timedelta
|
|
from typing import Optional
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException, status, Response
|
|
from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
|
|
|
|
from core.auth import (
|
|
authenticate_user,
|
|
create_access_token,
|
|
verify_token,
|
|
get_current_user,
|
|
ACCESS_TOKEN_EXPIRE_MINUTES
|
|
)
|
|
from models.auth import UserLogin, Token
|
|
|
|
router = APIRouter()
|
|
|
|
# Инициализация безопасности
|
|
security = HTTPBearer()
|
|
|
|
@router.post("/login", response_model=Token)
|
|
async def login(user_data: UserLogin, response: Response):
|
|
"""API для входа в систему"""
|
|
if authenticate_user(user_data.username, user_data.password):
|
|
access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
|
|
access_token = create_access_token(
|
|
data={"sub": user_data.username}, expires_delta=access_token_expires
|
|
)
|
|
|
|
# Устанавливаем cookie с токеном
|
|
response.set_cookie(
|
|
key="access_token",
|
|
value=access_token,
|
|
httponly=True,
|
|
secure=False, # Установите True для HTTPS
|
|
samesite="lax",
|
|
max_age=ACCESS_TOKEN_EXPIRE_MINUTES * 60
|
|
)
|
|
|
|
return {"access_token": access_token, "token_type": "bearer"}
|
|
else:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_401_UNAUTHORIZED,
|
|
detail="Неверное имя пользователя или пароль. Проверьте учетные данные и попробуйте снова.",
|
|
headers={"WWW-Authenticate": "Bearer"},
|
|
)
|
|
|
|
@router.post("/logout")
|
|
async def logout(response: Response):
|
|
"""API для выхода из системы"""
|
|
response.delete_cookie(key="access_token")
|
|
return {"message": "Успешный выход из системы"}
|
|
|
|
@router.get("/me")
|
|
async def get_current_user_info(current_user: str = Depends(get_current_user)):
|
|
"""Получить информацию о текущем пользователе"""
|
|
return {"username": current_user}
|