♻️ Simplified Authentication-code

classquiz/oauth/__init__.py

@@ -1,11 +1,44 @@
 #  This Source Code Form is subject to the terms of the Mozilla Public
 #  License, v. 2.0. If a copy of the MPL was not distributed with this
 #  file, You can obtain one at https://mozilla.org/MPL/2.0/.
+from datetime import timedelta, datetime
 
-from fastapi import APIRouter
+from fastapi import APIRouter, Request, Response
+
+from classquiz.auth import ACCESS_TOKEN_EXPIRE_MINUTES, create_access_token
+from classquiz.db.models import UserSession
 from classquiz.oauth import google, github
 
 
 router = APIRouter()
 router.include_router(google.router, prefix="/google")
 router.include_router(github.router, prefix="/github")
+
+
+async def rememberme_middleware(request: Request, call_next):
+    rememberme_cookie = request.cookies.get("rememberme_token")
+    bearer_token = request.cookies.get("access_token")
+    if rememberme_cookie is not None and bearer_token is None:
+        user_session: UserSession | None = (
+            await UserSession.objects.filter(session_key=rememberme_cookie)
+            .select_related(UserSession.user)
+            .get_or_none()
+        )
+        if (user_session is None) or (user_session.user is None):
+            response: Response = await call_next(request)
+            return response
+        access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES * 60)
+        access_token = create_access_token(data={"sub": user_session.user.email}, expires_delta=access_token_expires)
+        await user_session.update(last_seen=datetime.now())
+        request.state.access_token = f"Bearer {access_token}"
+        response: Response = await call_next(request)
+        response.set_cookie(
+            key="access_token",
+            value=f"Bearer {access_token}",
+            httponly=True,
+            samesite="lax",
+            max_age=ACCESS_TOKEN_EXPIRE_MINUTES * 60,
+        )
+    else:
+        response: Response = await call_next(request)
+    return response