Christian Krakau-Louis
0de2eb5830
- Added authentication routes for login, registration, password reset, and account deletion in `auth.py`. - Implemented user profile management, including updating user information and changing passwords. - Created dashboard views to display user-specific information and recent activity in `dashboard.py`. - Developed leaderboard views to show team rankings and points in `leaderboard.py`. - Added QR code generation and redemption functionality in `qr.py` and `redeem.py`. - Implemented team management features, allowing users to create and join teams in `teams.py`. - Introduced session debugging utility to assist with session-related issues in `debug_session.py`. - Configured Docker Compose for MySQL database and FastAPI application with environment variables. - Updated requirements.txt to include necessary dependencies for the application.
40 lines
1.4 KiB
Python
40 lines
1.4 KiB
Python
from passlib.context import CryptContext
|
|
from jose import JWTError, jwt
|
|
from datetime import datetime, timedelta
|
|
import secrets
|
|
import string
|
|
import bcrypt
|
|
|
|
# Password hashing
|
|
# Use a simpler CryptContext configuration to avoid bcrypt.__about__ error
|
|
pwd_context = CryptContext(schemes=["bcrypt"])
|
|
|
|
# JWT settings
|
|
SECRET_KEY = "CHANGE_THIS_TO_A_STRONG_SECRET_KEY_IN_PRODUCTION"
|
|
ALGORITHM = "HS256"
|
|
ACCESS_TOKEN_EXPIRE_MINUTES = 30
|
|
|
|
def verify_password(plain_password, hashed_password):
|
|
"""Verify if the plain password matches the hashed one."""
|
|
return pwd_context.verify(plain_password, hashed_password)
|
|
|
|
def get_password_hash(password):
|
|
"""Hash a password for storing."""
|
|
return pwd_context.hash(password)
|
|
|
|
def create_access_token(data: dict, expires_delta: timedelta = None):
|
|
"""Create JWT access token."""
|
|
to_encode = data.copy()
|
|
if expires_delta:
|
|
expire = datetime.utcnow() + expires_delta
|
|
else:
|
|
expire = datetime.utcnow() + timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
|
|
to_encode.update({"exp": expire})
|
|
encoded_jwt = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
|
|
return encoded_jwt
|
|
|
|
def generate_token(length=32):
|
|
"""Generate a random token for email verification or password reset."""
|
|
alphabet = string.ascii_letters + string.digits
|
|
return ''.join(secrets.choice(alphabet) for i in range(length))
|