Marius Mutu
907b7be0fd
- FastAPI app with lifespan, CORS, health endpoint - SQLAlchemy 2.0 async with aiosqlite, Base/UUIDMixin/TenantMixin/TimestampMixin - Tenant and User models with multi-tenant isolation - Auth: register (creates tenant+user), login, /me endpoint - JWT HS256 tokens, bcrypt password hashing - Alembic async setup with initial migration - 6 passing tests (register, login, wrong password, me, no token, health) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
59 lines
1.9 KiB
Python
59 lines
1.9 KiB
Python
from fastapi import APIRouter, Depends, HTTPException
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
|
|
from app.auth import schemas, service
|
|
from app.db.session import get_db
|
|
from app.deps import get_current_user
|
|
|
|
router = APIRouter()
|
|
|
|
|
|
@router.post("/register", response_model=schemas.TokenResponse)
|
|
async def register(
|
|
data: schemas.RegisterRequest, db: AsyncSession = Depends(get_db)
|
|
):
|
|
user, tenant = await service.register(
|
|
db, data.email, data.password, data.tenant_name, data.telefon
|
|
)
|
|
return schemas.TokenResponse(
|
|
access_token=service.create_token(user.id, tenant.id, tenant.plan),
|
|
tenant_id=tenant.id,
|
|
plan=tenant.plan,
|
|
)
|
|
|
|
|
|
@router.post("/login", response_model=schemas.TokenResponse)
|
|
async def login(data: schemas.LoginRequest, db: AsyncSession = Depends(get_db)):
|
|
user, tenant = await service.authenticate(db, data.email, data.password)
|
|
if not user:
|
|
raise HTTPException(status_code=401, detail="Credentiale invalide")
|
|
return schemas.TokenResponse(
|
|
access_token=service.create_token(user.id, tenant.id, tenant.plan),
|
|
tenant_id=tenant.id,
|
|
plan=tenant.plan,
|
|
)
|
|
|
|
|
|
@router.get("/me", response_model=schemas.UserResponse)
|
|
async def me(
|
|
current_user: dict = Depends(get_current_user),
|
|
db: AsyncSession = Depends(get_db),
|
|
):
|
|
from sqlalchemy import select
|
|
from app.db.models.user import User
|
|
from app.db.models.tenant import Tenant
|
|
|
|
r = await db.execute(select(User).where(User.id == current_user["sub"]))
|
|
user = r.scalar_one_or_none()
|
|
if not user:
|
|
raise HTTPException(status_code=404, detail="User not found")
|
|
r = await db.execute(select(Tenant).where(Tenant.id == user.tenant_id))
|
|
tenant = r.scalar_one()
|
|
return schemas.UserResponse(
|
|
id=user.id,
|
|
email=user.email,
|
|
tenant_id=user.tenant_id,
|
|
plan=tenant.plan,
|
|
rol=user.rol,
|
|
)
|