20 lines
3.0 KiB
Plaintext
20 lines
3.0 KiB
Plaintext
|
a
|
|||
|
|
X3GjT
|
|||
|
|
ã @ s6 d Z ddlmZmZ ddlmZmZ ddlmZ ddlm Z m
|
|||
|
|
Z
|
|||
|
|
ddl m Z ddl
|
|||
|
|
mZ ddlmZ eƒ Ze d gd
|
|||
|
|
d �Zeeed œd
|
|||
|
|
d„Zeedœdd„Zd(eeef ee edœdd„Zeeef edœdd„Zeee dœdd„Zejdej d ej d ej d iZ ee d œd d!„Z!eeed"œd#d$„Z"ed%œd&d'„Z#dS ))u@ Säkerhetsfunktioner: lösenordshashning, JWT-hantering, roller.é )ÚdatetimeÚ timedelta)ÚOptionalÚUnion)ÚUUID)ÚjwtÚJWTError)Ú CryptContext)Ú get_settings)ÚUserRoleZbcryptÚauto)ZschemesÚ
|
|||
|
|
deprecated)Úplain_passwordÚhashed_passwordÚreturnc C s t | |¡S ©N)Ú pwd_contextÚverify)r r © r úE/home/bernt/.openclaw/workspace/landvex-admin-backend/app/security.pyÚverify_password s r )Úpasswordr c C s
|
|||
|
|
t | ¡S r )r Úhash)r r r r Úget_password_hash s r N)ÚsubjectÚ
|
|||
|
|
expires_deltar c C sN |rt ¡ | }nt ¡ ttjd� }|t| ƒddœ}tj|tjtj d�}|S )N)ÚminutesÚaccess©ÚexpÚsubÚtype©Ú algorithm)
|
|||
|
|
r Úutcnowr ÚsettingsÚACCESS_TOKEN_EXPIRE_MINUTESÚstrr ÚencodeÚ
|
|||
|
|
SECRET_KEYÚ ALGORITHM)r r ÚexpireÚ to_encodeÚ encoded_jwtr r r Úcreate_access_token s r. )r r c C s< t ¡ ttjd� }|t| ƒddœ}tj|tjtj d�}|S )N)ÚdaysÚrefreshr r" )
|
|||
|
|
r r$ r r% ÚREFRESH_TOKEN_EXPIRE_DAYSr' r r( r) r* )r r+ r, r- r r r Úcreate_refresh_token# s r2 )Útokenr c C s6 z t j| tjtjgd�}|W S ty0 Y d S 0 d S )N)Z
|
|||
|
|
algorithms)r Údecoder% r) r* r )r3 Úpayloadr r r Ú decode_token* s
|
|||
|
|
r6 é é é )Úroler c C s t | d¡S )Nr )ÚROLE_HIERARCHYÚget)r: r r r Ú
|
|||
|
|
role_level< s r= )Ú manager_roleÚ target_roler c C s t | ƒt |ƒkS )uL Returnerar True om manager_role har högre eller lika nivÃ¥ som target_role.)r= )r> r? r r r Ú
|
|||
|
|
can_manage@ s r@ )Úmin_rolec s* ddl m‰ m‰ tdœ‡ ‡‡fdd„ }|S )u5 Factory för roll-krav. Används i dependency-kedjan.r )Ú
|
|||
|
|
HTTPExceptionÚstatus©Zcurrent_user_rolec s, t | ƒt ˆƒk r(ˆ ˆjdˆj› d�d�‚dS )NzRequires role z
|
|||
|
|
or higher)Ú status_codeÚdetailT)r= ÚHTTP_403_FORBIDDENÚvaluerD ©rB rA rC r r ÚcheckerI s þz require_role.<locals>.checker)ÚfastapirB rC r )rA rJ r rI r Ú require_roleE s rL )N)$Ú__doc__r r Útypingr r Úuuidr Zjoser r Zpasslib.contextr Ú
|