996c43fbd9
Complete OAuth-based authentication with JWT session management:
Core Services:
- JWT service for access/refresh token creation and verification
- Token store with Redis-backed refresh token revocation
- User service for CRUD operations and OAuth-based creation
- Google and Discord OAuth services with full flow support
API Endpoints:
- GET /api/auth/{google,discord} - Start OAuth flows
- GET /api/auth/{google,discord}/callback - Handle OAuth callbacks
- POST /api/auth/refresh - Exchange refresh token for new access token
- POST /api/auth/logout - Revoke single refresh token
- POST /api/auth/logout-all - Revoke all user sessions
- GET/PATCH /api/users/me - User profile management
- GET /api/users/me/linked-accounts - List OAuth providers
- GET /api/users/me/sessions - Count active sessions
Infrastructure:
- Pydantic schemas for auth/user request/response models
- FastAPI dependencies (get_current_user, get_current_premium_user)
- OAuthLinkedAccount model for multi-provider support
- Alembic migration for oauth_linked_accounts table
Dependencies added: email-validator, fakeredis (dev), respx (dev)
84 new tests, 1058 total passing
15 lines
414 B
Python
15 lines
414 B
Python
"""API routers and dependencies for Mantimon TCG.
|
|
|
|
This package contains FastAPI routers and common dependencies
|
|
for the REST API.
|
|
|
|
Routers:
|
|
- auth: OAuth login, token refresh, logout
|
|
- users: User profile management
|
|
|
|
Dependencies:
|
|
- get_current_user: Extract and validate user from JWT
|
|
- get_current_active_user: Ensure user exists
|
|
- get_current_premium_user: Require premium subscription
|
|
"""
|