Spaces:
Sleeping
Sleeping
| from flask import Blueprint, request, jsonify, session | |
| import hashlib | |
| from src.services import supabase_service | |
| from src.core.exceptions import AuthError, ValidationError | |
| from src.utils.logger import setup_logging | |
| logger = setup_logging("auth_api") | |
| auth_bp = Blueprint('auth', __name__) | |
| def hash_password(password): | |
| return hashlib.sha256(password.encode()).hexdigest() | |
| def register(): | |
| data = request.get_json() or {} | |
| name = data.get('name', '').strip() | |
| email = data.get('email', '').strip().lower() | |
| password = data.get('password', '') | |
| if not all([name, email, password]): | |
| raise ValidationError("All fields are required") | |
| if len(password) < 6: | |
| raise ValidationError("Password must be at least 6 characters") | |
| if supabase_service.get_user_by_email(email): | |
| raise ValidationError("Email already registered") | |
| if supabase_service.get_user_by_username(name): | |
| raise ValidationError("Username already taken") | |
| success = supabase_service.create_user(name, hash_password(password), email) | |
| if success: | |
| logger.info(f"Registered new user: {email}") | |
| return jsonify({'success': True, 'message': 'Registration successful!'}) | |
| return jsonify({'success': False, 'message': 'Registration failed'}), 500 | |
| def login(): | |
| data = request.get_json() or {} | |
| email = data.get('email', '').strip().lower() | |
| password = data.get('password', '') | |
| # Hardcoded bypass for testing | |
| if email == "lakshmi@gmail.com" and password == "test123": | |
| logger.info(f"Hardcoded user logged in: {email}") | |
| session['user'] = { | |
| 'id': 'hardcoded-test-id-12345', | |
| 'name': 'Lakshmi (Admin)', | |
| 'email': email, | |
| 'role': 'admin' | |
| } | |
| return jsonify({ | |
| 'success': True, | |
| 'message': 'Login successful!', | |
| 'user': {'name': 'Lakshmi (Admin)', 'role': 'admin'} | |
| }) | |
| user = supabase_service.get_user_by_email(email) | |
| if not user or user['password'] != hash_password(password): | |
| logger.warning(f"Failed login attempt: {email}") | |
| raise AuthError("Invalid email or password") | |
| role = user.get('role', 'user') | |
| session['user'] = { | |
| 'id': user['id'], | |
| 'name': user['username'], | |
| 'email': user['email'], | |
| 'role': role | |
| } | |
| logger.info(f"User logged in: {email}") | |
| return jsonify({ | |
| 'success': True, | |
| 'message': 'Login successful!', | |
| 'user': {'name': user['username'], 'role': role} | |
| }) | |
| def logout(): | |
| session.pop('user', None) | |
| return jsonify({'success': True}) | |