Addded Authentication

Author: KevinNadar

config.py

@@ -5,3 +5,4 @@
 
 # DB_URL = postgresql://username:password@hostname:port/database
 DB_URL = os.getenv("DB_URL")
+SECRET = os.getenv("SECRET").encode()  # Required by Login Manager

main.py

@@ -3,6 +3,7 @@
 
 app = FastAPI()
 
+
 @app.get("/")
 async def root():
     return {"message": "Hello World"}

models/database.py

@@ -1,6 +1,7 @@
+from config import DB_URL
+
 from sqlalchemy.orm import declarative_base, Session
 from sqlalchemy import create_engine
-from config import DB_URL
 
 Base = declarative_base()
 engine = create_engine(DB_URL)

models/users.py

@@ -1,6 +1,11 @@
-from database import Base, database
+from config import DB_URL
 
-from sqlalchemy import Column, Integer, String
+from sqlalchemy.orm import declarative_base, Session
+from sqlalchemy import create_engine, Column, Integer, String
+
+Base = declarative_base()
+engine = create_engine(DB_URL)
+database = Session(bind=engine)
 
 
 class Users(Base):
@@ -11,3 +16,6 @@ class Users(Base):
     password = Column(String)
     phone = Column(String)
     storyline = Column(Integer)
+
+
+Base.metadata.create_all(engine, checkfirst=True)

routes/login.py

@@ -1,7 +1,15 @@
-from fastapi import APIRouter
+from models.users import Users, database
+from config import SECRET
+
+from fastapi import APIRouter, Depends
+from fastapi.responses import JSONResponse
+from fastapi_login import LoginManager
+from fastapi.security import OAuth2PasswordRequestForm
+from fastapi_login.exceptions import InvalidCredentialsException
 from pydantic import BaseModel
 
 router = APIRouter(prefix="/user")
+manager = LoginManager(SECRET, "/user/login")
 
 
 class UserLoginRequest(BaseModel):
@@ -10,6 +18,33 @@ class UserLoginRequest(BaseModel):
     password: str
 
 
+@manager.user_loader()
+def query_user(email_id):
+    return database.query(Users).filter_by(email=email_id).one()
+
+
 @router.post("/login")
-async def login(login_data: UserLoginRequest):
-    print(login_data.email, login_data.password)
+async def login(data: OAuth2PasswordRequestForm = Depends()):
+    email = data.username
+    password = data.password
+
+    user = query_user(email)
+    if not user:
+        print("User not found")
+        raise InvalidCredentialsException
+    elif password != user.password:
+        print("Password does not match")
+        raise InvalidCredentialsException
+    else:
+        access_token = manager.create_access_token(data={"sub": email})
+        return JSONResponse(
+            content={"access_token": access_token, "token_type": "bearer"}
+        )
+
+
+@router.post("/data")
+async def data(user=Depends(manager)):
+    return JSONResponse(
+        status_code=200,
+        content="You are logged in as " + user.email
+    )

temp.py

@@ -0,0 +1,10 @@
+import requests
+
+data = {
+    "username": "Kevin Nadar",
+    "password": "kevin"
+}
+
+response = requests.post("http://127.0.0.1:8000/user/login", data=data)
+
+print(response.json())