48 lines
1.4 KiB
Python
48 lines
1.4 KiB
Python
from django.contrib.auth import authenticate
|
|
from ninja import Form, Router, Schema
|
|
from ninja.security import HttpBearer
|
|
|
|
from api.models import Token
|
|
|
|
router = Router()
|
|
|
|
|
|
class GlobalAuth(HttpBearer):
|
|
def authenticate(self, request, token):
|
|
try:
|
|
return Token.objects.get(token=token).user
|
|
except Token.DoesNotExist:
|
|
pass
|
|
|
|
|
|
class AuthSchema(Schema):
|
|
email: str
|
|
password: str
|
|
|
|
|
|
@router.post("/authenticate", auth=None) # overriding global auth
|
|
def get_token(request, auth_data: AuthSchema):
|
|
user = authenticate(username=auth_data.email, password=auth_data.password)
|
|
if user:
|
|
# Assuming a user can have multiple tokens and you want to create a new one every time
|
|
new_token = Token.objects.create(user=user)
|
|
return {"token": new_token.token, "expires": new_token.expiry_as_iso8601}
|
|
else:
|
|
return {"error": "Invalid credentials"}
|
|
|
|
|
|
class TokenValidationSchema(Schema):
|
|
token: str
|
|
|
|
|
|
@router.post("/validate_token", auth=None) # No authentication required for this endpoint
|
|
def validate_token(request, token_data: TokenValidationSchema):
|
|
try:
|
|
# Attempt to authenticate using the provided token
|
|
user = GlobalAuth().authenticate(request, token_data.token)
|
|
if user:
|
|
return {"status": "valid"}
|
|
else:
|
|
return {"status": "invalid"}
|
|
except Token.DoesNotExist:
|
|
return {"status": "invalid"} |