Spaces:
Paused
Paused
Commit ·
749b859
1
Parent(s): 05cde6c
Support both /refresh and /refresh-token routes with JSON body parsing
Browse files- app/api/v1/endpoints/auth.py +19 -5
- app/schemas/token.py +5 -0
app/api/v1/endpoints/auth.py
CHANGED
|
@@ -1,7 +1,7 @@
|
|
| 1 |
from datetime import timedelta
|
| 2 |
import os
|
| 3 |
import random
|
| 4 |
-
from typing import Any
|
| 5 |
import uuid
|
| 6 |
from fastapi import (
|
| 7 |
APIRouter,
|
|
@@ -20,7 +20,7 @@ from app.api import deps
|
|
| 20 |
from app.core import security
|
| 21 |
from app.core.config import settings
|
| 22 |
from app.schemas.auth import LoginRequest
|
| 23 |
-
from app.schemas.token import Token
|
| 24 |
from app.schemas.user import UserResponse, UserCreate
|
| 25 |
from app.crud import user as user_crud
|
| 26 |
from app.services import email_service, redis_service
|
|
@@ -128,14 +128,28 @@ async def register_user(
|
|
| 128 |
return user
|
| 129 |
|
| 130 |
|
|
|
|
| 131 |
@router.post("/refresh-token", response_model=Token)
|
| 132 |
async def refresh_token(
|
| 133 |
-
|
|
|
|
| 134 |
db: AsyncSession = Depends(deps.get_db),
|
| 135 |
) -> Any:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 136 |
try:
|
| 137 |
payload = security.jwt.decode(
|
| 138 |
-
|
| 139 |
)
|
| 140 |
token_data = payload.get("sub")
|
| 141 |
if token_data is None:
|
|
@@ -164,7 +178,7 @@ async def refresh_token(
|
|
| 164 |
role=user.role,
|
| 165 |
expires_delta=access_token_expires,
|
| 166 |
),
|
| 167 |
-
"refresh_token":
|
| 168 |
"token_type": "bearer",
|
| 169 |
"user": user,
|
| 170 |
}
|
|
|
|
| 1 |
from datetime import timedelta
|
| 2 |
import os
|
| 3 |
import random
|
| 4 |
+
from typing import Any, Optional
|
| 5 |
import uuid
|
| 6 |
from fastapi import (
|
| 7 |
APIRouter,
|
|
|
|
| 20 |
from app.core import security
|
| 21 |
from app.core.config import settings
|
| 22 |
from app.schemas.auth import LoginRequest
|
| 23 |
+
from app.schemas.token import Token, RefreshTokenRequest
|
| 24 |
from app.schemas.user import UserResponse, UserCreate
|
| 25 |
from app.crud import user as user_crud
|
| 26 |
from app.services import email_service, redis_service
|
|
|
|
| 128 |
return user
|
| 129 |
|
| 130 |
|
| 131 |
+
@router.post("/refresh", response_model=Token)
|
| 132 |
@router.post("/refresh-token", response_model=Token)
|
| 133 |
async def refresh_token(
|
| 134 |
+
refresh_data: Optional[RefreshTokenRequest] = None,
|
| 135 |
+
refresh_token: Optional[str] = None,
|
| 136 |
db: AsyncSession = Depends(deps.get_db),
|
| 137 |
) -> Any:
|
| 138 |
+
token_str = None
|
| 139 |
+
if refresh_data:
|
| 140 |
+
token_str = refresh_data.refresh_token or refresh_data.refreshToken
|
| 141 |
+
if not token_str and refresh_token:
|
| 142 |
+
token_str = refresh_token
|
| 143 |
+
|
| 144 |
+
if not token_str:
|
| 145 |
+
raise HTTPException(
|
| 146 |
+
status_code=status.HTTP_400_BAD_REQUEST,
|
| 147 |
+
detail="กรุณาระบุ refresh token",
|
| 148 |
+
)
|
| 149 |
+
|
| 150 |
try:
|
| 151 |
payload = security.jwt.decode(
|
| 152 |
+
token_str, settings.SECRET_KEY, algorithms=[settings.ALGORITHM]
|
| 153 |
)
|
| 154 |
token_data = payload.get("sub")
|
| 155 |
if token_data is None:
|
|
|
|
| 178 |
role=user.role,
|
| 179 |
expires_delta=access_token_expires,
|
| 180 |
),
|
| 181 |
+
"refresh_token": token_str,
|
| 182 |
"token_type": "bearer",
|
| 183 |
"user": user,
|
| 184 |
}
|
app/schemas/token.py
CHANGED
|
@@ -14,3 +14,8 @@ class Token(BaseModel):
|
|
| 14 |
class TokenPayload(BaseModel):
|
| 15 |
sub: Optional[str] = None
|
| 16 |
type: Optional[str] = None
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 14 |
class TokenPayload(BaseModel):
|
| 15 |
sub: Optional[str] = None
|
| 16 |
type: Optional[str] = None
|
| 17 |
+
|
| 18 |
+
|
| 19 |
+
class RefreshTokenRequest(BaseModel):
|
| 20 |
+
refresh_token: Optional[str] = None
|
| 21 |
+
refreshToken: Optional[str] = None
|