43 lines
No EOL
1.1 KiB
Python
43 lines
No EOL
1.1 KiB
Python
from fastapi import APIRouter, Depends, HTTPException, Response
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.core.security import create_access_token, verify_password
|
|
from app.db.database import get_db
|
|
from app.models.user import User
|
|
from app.schemas.user import LoginRequest
|
|
|
|
router = APIRouter(
|
|
prefix="/auth",
|
|
tags=["Authentication"],
|
|
)
|
|
|
|
|
|
@router.post("/login")
|
|
def login(
|
|
login: LoginRequest,
|
|
response: Response,
|
|
db: Session = Depends(get_db),
|
|
):
|
|
user = db.query(User).filter(User.username == login.username).first()
|
|
|
|
if not user:
|
|
raise HTTPException(status_code=401, detail="Ungültige Anmeldedaten")
|
|
|
|
if not verify_password(login.password, user.password_hash):
|
|
raise HTTPException(status_code=401, detail="Ungültige Anmeldedaten")
|
|
|
|
token = create_access_token(user.username)
|
|
|
|
response.set_cookie(
|
|
key="access_token",
|
|
value=token,
|
|
httponly=True,
|
|
secure=True,
|
|
samesite="lax",
|
|
max_age=3600,
|
|
)
|
|
|
|
return {
|
|
"message": "Login erfolgreich",
|
|
"user": user.username,
|
|
} |