🔒 Fixed token expiration

master
Alix JEUDI--LEMOINE 3 months ago
parent 8552669e36
commit f772a9b022

@ -69,7 +69,8 @@ async def get_current_user(token: str = Depends(oauth2_scheme)) -> User:
try: try:
payload = jwt.decode(token, OctKey.import_key(config.SECRET_KEY)) payload = jwt.decode(token, OctKey.import_key(config.SECRET_KEY))
username: str = payload.claims["sub"] username: str = payload.claims["sub"]
if username is None: expire_date = payload.claims["exp"]
if username is None or datetime.now() > expire_date:
raise credentials_exception raise credentials_exception
token_data = TokenData(username=username) token_data = TokenData(username=username)
except JoseError: except JoseError:
@ -135,14 +136,14 @@ async def login(form_data: OAuth2PasswordRequestForm = Depends()):
return {"access_token": access_token, "token_type": "bearer", "user_id": str(user["_id"])} return {"access_token": access_token, "token_type": "bearer", "user_id": str(user["_id"])}
""" Is it really usefull ? idk.
@app.get( @app.get(
path="/logout", path="/logout",
responses={401: {"model": HTTPError}} responses={401: {"model": HTTPError}}
) )
async def logout(current_user: User = Depends(get_current_user)): async def logout(current_user: User = Depends(get_current_user)):
return {"message": "Logged out"} return {"message": "Logged out"}
"""
@app.get( @app.get(
path="/pin/{id}", path="/pin/{id}",

Loading…
Cancel
Save