于小丘
209cb24ab4
- Implement PhysicalFile model to manage physical file references and reference counting. - Create Policy model with associated options and group links for storage policies. - Introduce Redeem and Report models for handling redeem codes and reports. - Add Settings model for site configuration and user settings management. - Develop Share model for sharing objects with unique codes and associated metadata. - Implement SourceLink model for managing download links associated with objects. - Create StoragePack model for managing user storage packages. - Add Tag model for user-defined tags with manual and automatic types. - Implement Task model for managing background tasks with status tracking. - Develop User model with comprehensive user management features including authentication. - Introduce UserAuthn model for managing WebAuthn credentials. - Create WebDAV model for managing WebDAV accounts associated with users.
76 lines
2.7 KiB
Python
76 lines
2.7 KiB
Python
from uuid import uuid4
|
|
|
|
from loguru import logger
|
|
|
|
from middleware.dependencies import SessionDep
|
|
from sqlmodels import LoginRequest, TokenResponse, User
|
|
from utils import http_exceptions
|
|
from utils.JWT import create_access_token, create_refresh_token
|
|
from utils.password.pwd import Password, PasswordStatus
|
|
|
|
|
|
async def login(
|
|
session: SessionDep,
|
|
login_request: LoginRequest,
|
|
) -> TokenResponse:
|
|
"""
|
|
根据账号密码进行登录。
|
|
如果登录成功，返回一个 TokenResponse 对象，包含访问令牌和刷新令牌以及它们的过期时间。
|
|
|
|
:param session: 数据库会话
|
|
:param login_request: 登录请求
|
|
|
|
:return: TokenResponse 对象或状态码或 None
|
|
"""
|
|
# TODO: 验证码校验
|
|
# captcha_setting = await Setting.get(
|
|
# session,
|
|
# (Setting.type == "auth") & (Setting.name == "login_captcha")
|
|
# )
|
|
# is_captcha_required = captcha_setting and captcha_setting.value == "1"
|
|
|
|
# 获取用户信息
|
|
current_user: User = await User.get(session, User.email == login_request.email, fetch_mode="first") #type: ignore
|
|
|
|
# 验证用户是否存在
|
|
if not current_user:
|
|
logger.debug(f"Cannot find user with email: {login_request.email}")
|
|
http_exceptions.raise_unauthorized("Invalid email or password")
|
|
|
|
# 验证密码是否正确
|
|
if Password.verify(current_user.password, login_request.password) != PasswordStatus.VALID:
|
|
logger.debug(f"Password verification failed for user: {login_request.email}")
|
|
http_exceptions.raise_unauthorized("Invalid email or password")
|
|
|
|
# 验证用户是否可登录
|
|
if not current_user.status:
|
|
http_exceptions.raise_forbidden("Your account is disabled")
|
|
|
|
# 检查两步验证
|
|
if current_user.two_factor:
|
|
# 用户已启用两步验证
|
|
if not login_request.two_fa_code:
|
|
logger.debug(f"2FA required for user: {login_request.email}")
|
|
http_exceptions.raise_precondition_required("2FA required")
|
|
|
|
# 验证 OTP 码
|
|
if Password.verify_totp(current_user.two_factor, login_request.two_fa_code) != PasswordStatus.VALID:
|
|
logger.debug(f"Invalid 2FA code for user: {login_request.email}")
|
|
http_exceptions.raise_unauthorized("Invalid 2FA code")
|
|
|
|
# 创建令牌
|
|
access_token = create_access_token(
|
|
sub=current_user.id,
|
|
jti=uuid4()
|
|
)
|
|
refresh_token = create_refresh_token(
|
|
sub=current_user.id,
|
|
jti=uuid4()
|
|
)
|
|
|
|
return TokenResponse(
|
|
access_token=access_token.access_token,
|
|
access_expires=access_token.access_expires,
|
|
refresh_token=refresh_token.refresh_token,
|
|
refresh_expires=refresh_token.refresh_expires,
|
|
) |