from datetime import timedelta from fastapi import APIRouter, Depends, HTTPException, status from sqlalchemy.orm import Session from typing import Annotated from apps.users.services import authenticate_user, fake_users_db, create_access_token, get_current_active_user from fastapi.security import OAuth2PasswordRequestForm from apps.users import crud, models, schemas from middleware.db_connection import get_db from apps.users.schemas import User, UserCreate, Token from settings import config router = APIRouter(prefix="/users", tags=["users"]) @router.post("/token", response_model=Token) async def login_for_access_token(form_data: Annotated[OAuth2PasswordRequestForm, Depends()], db: Session = Depends(get_db)): user = authenticate_user(db, form_data.username, form_data.password) if not user: raise HTTPException( status_code=status.HTTP_401_UNAUTHORIZED, detail="Incorrect username or password", headers={"WWW-Authenticate": "Bearer"}, ) access_token_expires = timedelta(minutes=config.ACCESS_TOKEN_EXPIRE_MINUTES) access_token = create_access_token(data={"sub": user.email}, expires_delta=access_token_expires) return Token(access_token=access_token, token_type="bearer") @router.get("/list", response_model=list[User]) async def list_users(db: Session = Depends(get_db)): db_users = crud.get_users(db) return db_users @router.get("/me", response_model=User) async def read_users_me(current_user: Annotated[User, Depends(get_current_active_user)]): return current_user @router.post("/", response_model=User) def create_user(user: UserCreate, db: Session = Depends(get_db)): db_user = crud.get_user_by_email(db, email=user.email) if db_user: raise HTTPException(status_code=400, detail="Email already registered") return crud.create_user(db=db, user=user)