chongming_lite/src/chongming/app/api/routers/auth.py

from fastapi import APIRouter, Depends, HTTPException, status, Request
from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
from sqlalchemy.ext.asyncio import AsyncSession

from ...core.database import get_session
from ...core.jwt_cache import get_jwt_cache, TokenData
from ...core.security import verify_password
from ...service.user import UserService
from ...service.auth import get_auth_service
from ...model.user import UserCreate, UserRead, UserLogin
from ..deps import get_current_user


router = APIRouter(tags=["authentication"])

security = HTTPBearer()


@router.post("/register", response_model=UserRead)
async def register(
    user_data: UserCreate,
    session: AsyncSession = Depends(get_session),
):
    print(user_data.password)

    existing = await UserService.get_user_by_email(user_data.email, session)
    if existing:
        raise HTTPException(status_code=400, detail="邮箱已被注册")

    user = await UserService.create_user(
        session=session,
        email=user_data.email,
        password=user_data.password,
        username=user_data.username,
        full_name=user_data.full_name,
    )
    return user


@router.post("/login")
async def login(
    user_data: UserLogin,
    request: Request,
    session: AsyncSession = Depends(get_session),
):
    user = await UserService.get_user_by_email(user_data.email, session)
    if not user:
        raise HTTPException(status_code=400, detail="邮箱或密码错误")
    if not verify_password(user_data.password, user.hashed_password):
        raise HTTPException(status_code=400, detail="邮箱或密码错误")
    if not user.is_active:
        raise HTTPException(status_code=400, detail="用户被禁用")

    cache = get_jwt_cache()
    user_data_dict = {
        "sub": str(user.id),
        "email": user.email,
        "username": user.username,
    }
    token = cache.create_token(
        user_id=str(user.id),
        user_data=user_data_dict,
        token_type="access",
        device_id=None,
        user_agent=request.headers.get("user-agent") if request else None,
        ip_address=request.client.host if request else None,  # type: ignore
    )

    return {"access_token": token, "token_type": "bearer"}


@router.post("/refresh", response_model=dict, summary="刷新访问令牌")
async def refresh_token(
    request: Request,
    credentials: HTTPAuthorizationCredentials = Depends(security),
    session: AsyncSession = Depends(get_session),
):
    auth_service = get_auth_service()

    refresh_token = credentials.credentials
    new_access_token = await auth_service.refresh_access_token(
        refresh_token, session, request
    )
    if not new_access_token:
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="无效的刷新令牌",
            headers={"WWW-Authenticate": "Bearer"},
        )
    return {"access_token": new_access_token, "token_type": "bearer"}


@router.post("/logout")
async def logout(
    credentials: HTTPAuthorizationCredentials = Depends(security),
):
    auth_service = get_auth_service()
    token = credentials.credentials
    await auth_service.logout(token)
    return {"message": "登出成功"}


@router.post("/logout-all", summary="等出所有设备")
async def logout_all(current_user: TokenData = Depends(get_current_user)):
    auth_service = get_auth_service()
    await auth_service.logout_all(current_user.user_id)

    return {"message": "所有设备已登出"}


@router.get("/sessions", summary="获取用户会话")
async def get_sessions(current_user: TokenData = Depends(get_current_user)):
    """获取用户的所有活跃会话"""
    auth_service = get_auth_service()
    sessions = await auth_service.get_user_sessions(current_user.user_id)

    return {
        "user_id": current_user.user_id,
        "sessions": sessions,
        "count": len(sessions),
    }


@router.get("/me", response_model=UserRead, summary="获取当前用户信息")
async def get_current_user_info(
    session: AsyncSession = Depends(get_session),
    current_user: TokenData = Depends(get_current_user),
):
    """获取当前登录用户的信息"""
    user = await UserService.get_user_by_id(int(current_user.user_id), session)
    if not user:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="用户不存在")

    return user