Complete OAuth-based authentication with JWT session management:
Core Services:
- JWT service for access/refresh token creation and verification
- Token store with Redis-backed refresh token revocation
- User service for CRUD operations and OAuth-based creation
- Google and Discord OAuth services with full flow support
API Endpoints:
- GET /api/auth/{google,discord} - Start OAuth flows
- GET /api/auth/{google,discord}/callback - Handle OAuth callbacks
- POST /api/auth/refresh - Exchange refresh token for new access token
- POST /api/auth/logout - Revoke single refresh token
- POST /api/auth/logout-all - Revoke all user sessions
- GET/PATCH /api/users/me - User profile management
- GET /api/users/me/linked-accounts - List OAuth providers
- GET /api/users/me/sessions - Count active sessions
Infrastructure:
- Pydantic schemas for auth/user request/response models
- FastAPI dependencies (get_current_user, get_current_premium_user)
- OAuthLinkedAccount model for multi-provider support
- Alembic migration for oauth_linked_accounts table
Dependencies added: email-validator, fakeredis (dev), respx (dev)
84 new tests, 1058 total passing
33 lines
578 B
Python
33 lines
578 B
Python
"""Pydantic schemas for Mantimon TCG API.
|
|
|
|
This package contains request/response models for all API endpoints.
|
|
"""
|
|
|
|
from app.schemas.auth import (
|
|
OAuthState,
|
|
RefreshTokenRequest,
|
|
TokenPayload,
|
|
TokenResponse,
|
|
TokenType,
|
|
)
|
|
from app.schemas.user import (
|
|
OAuthUserInfo,
|
|
UserCreate,
|
|
UserResponse,
|
|
UserUpdate,
|
|
)
|
|
|
|
__all__ = [
|
|
# Auth schemas
|
|
"TokenType",
|
|
"TokenPayload",
|
|
"TokenResponse",
|
|
"RefreshTokenRequest",
|
|
"OAuthState",
|
|
# User schemas
|
|
"UserResponse",
|
|
"UserCreate",
|
|
"UserUpdate",
|
|
"OAuthUserInfo",
|
|
]
|