83 lines
3.0 KiB
Python
83 lines
3.0 KiB
Python
from fastapi import HTTPException
|
|
from .models import UserLogin, UserInDB, Session, UserCreate
|
|
from .utils import (
|
|
verify_password,
|
|
get_password_hash,
|
|
create_access_token,
|
|
decode_token,
|
|
)
|
|
from .database import users_collection, sessions_collection
|
|
import uuid
|
|
from datetime import datetime, timedelta
|
|
|
|
class AuthService:
|
|
async def register(self, user: UserCreate):
|
|
# Проверяем, существует ли пользователь
|
|
if await users_collection.find_one({"username": user.username}):
|
|
raise HTTPException(status_code=400, detail="Username already taken")
|
|
|
|
# Хешируем пароль
|
|
hashed_password = get_password_hash(user.password)
|
|
|
|
# Создаём UUID для Minecraft
|
|
user_uuid = str(uuid.uuid4())
|
|
|
|
# Сохраняем в MongoDB
|
|
new_user = UserInDB(
|
|
username=user.username,
|
|
email=user.email,
|
|
hashed_password=hashed_password,
|
|
uuid=user_uuid,
|
|
)
|
|
await users_collection.insert_one(new_user.dict())
|
|
return {"status": "success", "uuid": user_uuid}
|
|
|
|
async def login(self, credentials: UserLogin):
|
|
# Ищем пользователя
|
|
user = await users_collection.find_one({"username": credentials.username})
|
|
if not user or not verify_password(credentials.password, user["hashed_password"]):
|
|
raise HTTPException(status_code=401, detail="Invalid credentials")
|
|
|
|
# Генерируем токены
|
|
access_token = create_access_token({"sub": user["username"], "uuid": user["uuid"]})
|
|
client_token = str(uuid.uuid4())
|
|
|
|
# Сохраняем сессию
|
|
session = Session(
|
|
access_token=access_token,
|
|
client_token=client_token,
|
|
user_uuid=user["uuid"],
|
|
expires_at=datetime.utcnow() + timedelta(minutes=1440),
|
|
)
|
|
await sessions_collection.insert_one(session.dict())
|
|
|
|
return {
|
|
"accessToken": access_token,
|
|
"clientToken": client_token,
|
|
"selectedProfile": {
|
|
"id": user["uuid"],
|
|
"name": user["username"],
|
|
},
|
|
}
|
|
|
|
async def validate(self, access_token: str, client_token: str):
|
|
session = await sessions_collection.find_one({
|
|
"access_token": access_token,
|
|
"client_token": client_token,
|
|
})
|
|
if not session or datetime.utcnow() > session["expires_at"]:
|
|
return False
|
|
return True
|
|
|
|
async def refresh(self, access_token: str, client_token: str):
|
|
if not await self.validate(access_token, client_token):
|
|
return None
|
|
|
|
# Обновляем токен
|
|
new_access_token = create_access_token({"sub": "user", "uuid": "user_uuid"})
|
|
await sessions_collection.update_one(
|
|
{"access_token": access_token},
|
|
{"$set": {"access_token": new_access_token}},
|
|
)
|
|
return {"accessToken": new_access_token, "clientToken": client_token}
|