Spaces:
Configuration error
Configuration error
File size: 2,254 Bytes
151ec26 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 | from datetime import datetime, timedelta, timezone
from typing import Any, Optional, Union
import bcrypt
from jose import jwt, JWTError
import enum
from backend.app.core.config import settings
class UserRole(str, enum.Enum):
USER = "USER"
PATIENT = "PATIENT"
DOCTOR = "DOCTOR"
ADMIN = "ADMIN"
def verify_password(plain_password: str, hashed_password: str) -> bool:
try:
pwd_bytes = plain_password.encode("utf-8")[:72]
hash_bytes = hashed_password.encode("utf-8")
return bcrypt.checkpw(pwd_bytes, hash_bytes)
except Exception:
return False
def get_password_hash(password: str) -> str:
pwd_bytes = password.encode("utf-8")[:72]
salt = bcrypt.gensalt()
return bcrypt.hashpw(pwd_bytes, salt).decode("utf-8")
def create_access_token(
subject: Union[str, Any],
role: str = UserRole.PATIENT.value,
expires_delta: Optional[timedelta] = None,
) -> str:
if expires_delta:
expire = datetime.now(timezone.utc) + expires_delta
else:
expire = datetime.now(timezone.utc) + timedelta(
minutes=settings.ACCESS_TOKEN_EXPIRE_MINUTES
)
to_encode = {
"sub": str(subject),
"role": role,
"type": "access",
"exp": expire,
"iat": datetime.now(timezone.utc),
}
return jwt.encode(to_encode, settings.SECRET_KEY, algorithm=settings.ALGORITHM)
def create_refresh_token(
subject: Union[str, Any],
role: str = UserRole.PATIENT.value,
expires_delta: Optional[timedelta] = None,
) -> str:
if expires_delta:
expire = datetime.now(timezone.utc) + expires_delta
else:
expire = datetime.now(timezone.utc) + timedelta(
days=settings.REFRESH_TOKEN_EXPIRE_DAYS
)
to_encode = {
"sub": str(subject),
"role": role,
"type": "refresh",
"exp": expire,
"iat": datetime.now(timezone.utc),
}
return jwt.encode(to_encode, settings.SECRET_KEY, algorithm=settings.ALGORITHM)
def decode_token(token: str) -> Optional[dict]:
try:
payload = jwt.decode(
token, settings.SECRET_KEY, algorithms=[settings.ALGORITHM]
)
return payload
except JWTError:
return None
|