Migrate to motor for DB interaction

api/routes/auth.py

@@ -0,0 +1,64 @@
+import logging
+from typing import Annotated
+
+from fastapi import Depends, APIRouter, HTTPException
+from fastapi.security import OAuth2PasswordRequestForm
+
+from app.config import Settings, get_settings
+from app.deps import get_current_user_token
+from database import tokens, users
+from schemas.user import TokenSchema, UserDisplaySchema
+from routes.utils import verify_password, create_access_token, create_refresh_token
+
+router = APIRouter()
+
+logger = logging.getLogger("api")
+
+
+@router.post('/login', summary="Create access and refresh tokens for user", status_code=200, response_model=TokenSchema)
+async def login(form_data: Annotated[OAuth2PasswordRequestForm, Depends()],
+                settings: Annotated[Settings, Depends(get_settings)]) -> TokenSchema:
+    """
+    Log in as given user - create associated JWT for API access
+
+    :return: JWT for given user
+    """
+    # Get requested user
+    user = await users.get_user_system_info(username=form_data.username)
+    if user is None:
+        raise HTTPException(401, "Invalid username or password")
+
+    # Verify given password
+    hashed_pass = user.password
+    if not verify_password(form_data.password, hashed_pass):
+        raise HTTPException(401, "Invalid username or password")
+
+    # Create access and refresh tokens
+    return TokenSchema(
+        access_token=create_access_token(settings, str(user.id)),
+        refresh_token=create_refresh_token(settings, str(user.id))
+    )
+
+
+@router.post('/logout', summary="Invalidate current user's token", status_code=200)
+async def logout(user_token: (UserDisplaySchema, TokenSchema) = Depends(get_current_user_token)) -> dict:
+    """
+    Log out given user by adding JWT to a blacklist database
+
+    :return: Logout message
+    """
+    user, token = user_token
+
+    # Blacklist token
+    blacklisted = tokens.blacklist_token(token)
+
+    if not blacklisted:
+        logger.debug("Failed to add token to blacklist")
+        return {"msg": "Logout failed"}
+
+    return {"msg": "Logout successful"}
+
+# @router.post('/refresh', summary="Refresh JWT token", status_code=200)
+# async def refresh(form: OAuth2RefreshRequestForm = Depends()):
+#     if request.method == 'POST':
+#         form = await request.json()