Mawoka
45 lines
1.8 KiB
Python
45 lines
1.8 KiB
Python
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, You can obtain one at https://mozilla.org/MPL/2.0/.
|
|
from datetime import timedelta, datetime
|
|
|
|
from fastapi import APIRouter, Request, Response
|
|
|
|
from classquiz.auth import ACCESS_TOKEN_EXPIRE_MINUTES, create_access_token
|
|
from classquiz.db.models import UserSession
|
|
from classquiz.oauth import google, github
|
|
|
|
|
|
router = APIRouter()
|
|
router.include_router(google.router, prefix="/google")
|
|
router.include_router(github.router, prefix="/github")
|
|
|
|
|
|
async def rememberme_middleware(request: Request, call_next):
|
|
rememberme_cookie = request.cookies.get("rememberme_token")
|
|
bearer_token = request.cookies.get("access_token")
|
|
if rememberme_cookie is not None and bearer_token is None:
|
|
user_session: UserSession | None = (
|
|
await UserSession.objects.filter(session_key=rememberme_cookie)
|
|
.select_related(UserSession.user)
|
|
.get_or_none()
|
|
)
|
|
if (user_session is None) or (user_session.user is None):
|
|
response: Response = await call_next(request)
|
|
return response
|
|
access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES * 60)
|
|
access_token = create_access_token(data={"sub": user_session.user.email}, expires_delta=access_token_expires)
|
|
await user_session.update(last_seen=datetime.now())
|
|
request.state.access_token = f"Bearer {access_token}"
|
|
response: Response = await call_next(request)
|
|
response.set_cookie(
|
|
key="access_token",
|
|
value=f"Bearer {access_token}",
|
|
httponly=True,
|
|
samesite="lax",
|
|
max_age=ACCESS_TOKEN_EXPIRE_MINUTES * 60,
|
|
)
|
|
else:
|
|
response: Response = await call_next(request)
|
|
return response
|