20 lines
3.0 KiB
Plaintext
20 lines
3.0 KiB
Plaintext
|
a
|
|||
|
|
N1GjT
|
|||
|
|
ã @ s6 d Z ddlmZmZ ddlmZmZ ddlmZ ddlm Z m
|
|||
|
|
Z
|
|||
|
|
ddl m Z ddl
|
|||
|
|
mZ ddlmZ eƒ Ze d gd
|
|||
|
|
d �Zeeed œd
|
|||
|
|
d„Zeedœdd„Zd(eeef ee edœdd„Zeeef edœdd„Zeee dœdd„Zejdej d ej d ej d iZ ee d œd d!„Z!eeed"œd#d$„Z"ed%œd&d'„Z#dS ))u@ Säkerhetsfunktioner: lösenordshashning, JWT-hantering, roller.é )ÚdatetimeÚ timedelta)ÚOptionalÚUnion)ÚUUID)ÚjwtÚJWTError)Ú CryptContext)Ú get_settings)ÚUserRoleZbcryptÚauto)ZschemesZ
|
|||
|
|
deprecated)Úplain_passwordÚhashed_passwordÚreturnc C s t | |¡S ©N)Ú pwd_contextZverify)r
|
|||
|
|
r © r úapp/security.pyÚverify_password s r )Úpasswordr c C s
|
|||
|
|
t | ¡S r )r Úhash)r r r r Úget_password_hash s r N)ÚsubjectÚ
|
|||
|
|
expires_deltar c C sN |rt ¡ | }nt ¡ ttjd� }|t| ƒddœ}tj|tjtj d�}|S )N)ZminutesÚaccess©ZexpÚsubÚtype©Ú algorithm)
|
|||
|
|
r Úutcnowr ÚsettingsZACCESS_TOKEN_EXPIRE_MINUTESÚstrr ÚencodeÚ
|
|||
|
|
SECRET_KEYÚ ALGORITHM)r r ÚexpireÚ to_encodeÚ encoded_jwtr r r Úcreate_access_token s r) )r r c C s< t ¡ ttjd� }|t| ƒddœ}tj|tjtj d�}|S )N)ZdaysZrefreshr r )
|
|||
|
|
r r r r! ZREFRESH_TOKEN_EXPIRE_DAYSr" r r# r$ r% )r r& r' r( r r r Úcreate_refresh_token# s r* )Útokenr c C s6 z t j| tjtjgd�}|W S ty0 Y d S 0 d S )N)Z
|
|||
|
|
algorithms)r Údecoder! r$ r% r )r+ Zpayloadr r r Ú decode_token* s
|
|||
|
|
r- é é é )Úroler c C s t | d¡S )Nr )ÚROLE_HIERARCHYÚget)r1 r r r Ú
|
|||
|
|
role_level< s r4 )Ú manager_roleÚ target_roler c C s t | ƒt |ƒkS )uL Returnerar True om manager_role har högre eller lika nivÃ¥ som target_role.)r4 )r5 r6 r r r Ú
|
|||
|
|
can_manage@ s r7 )Úmin_rolec s* ddl m‰ m‰ tdœ‡ ‡‡fdd„ }|S )u5 Factory för roll-krav. Används i dependency-kedjan.r )Ú
|
|||
|
|
HTTPExceptionÚstatus©Zcurrent_user_rolec s, t | ƒt ˆƒk r(ˆ ˆjdˆj› d�d�‚dS )NzRequires role z
|