generated from vincent/template-projet
Vincent
0fe1a1b751
Backend (FastAPI + SQLAlchemy): - Modèles : User, Client, Audit, Cible, Vulnérabilité, Action - Auth JWT (register/login/me) avec bcrypt - Routes CRUD complets : clients, audits, cibles, vulnérabilités, actions - Schémas Pydantic v2, migrations Alembic configurées - Rate limiting (slowapi), CORS, structure scanners/reports pour phase 2 Frontend (Next.js 14 App Router): - shadcn/ui : Button, Input, Card, Badge, Label - Page login avec gestion token JWT - Dashboard avec stats temps réel - Pages Clients (grille) et Audits (liste) avec recherche - Layout avec sidebar navigation + protection auth - Dockerfiles multi-stage (backend + frontend standalone) Infrastructure: - docker-compose.yml : postgres, redis, backend, frontend - docker-compose.prod.yml avec labels Traefik - .env.example complet - .gitignore mis à jour Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
47 lines
1.8 KiB
Python
47 lines
1.8 KiB
Python
from fastapi import APIRouter, Depends, HTTPException, status
|
|
from fastapi.security import OAuth2PasswordRequestForm
|
|
from sqlalchemy.orm import Session
|
|
from backend.core.database import get_db
|
|
from backend.core.security import hash_password, verify_password, create_access_token, get_current_user
|
|
from backend.models.user import User
|
|
from backend.schemas.user import UserCreate, UserRead, Token
|
|
|
|
router = APIRouter(prefix="/auth", tags=["auth"])
|
|
|
|
|
|
@router.post("/register", response_model=UserRead, status_code=status.HTTP_201_CREATED)
|
|
def register(payload: UserCreate, db: Session = Depends(get_db)) -> User:
|
|
if db.query(User).filter(User.email == payload.email).first():
|
|
raise HTTPException(status_code=400, detail="Email déjà utilisé")
|
|
|
|
user = User(
|
|
email=payload.email,
|
|
full_name=payload.full_name,
|
|
hashed_password=hash_password(payload.password),
|
|
)
|
|
db.add(user)
|
|
db.commit()
|
|
db.refresh(user)
|
|
return user
|
|
|
|
|
|
@router.post("/login", response_model=Token)
|
|
def login(form_data: OAuth2PasswordRequestForm = Depends(), db: Session = Depends(get_db)) -> Token:
|
|
user = db.query(User).filter(User.email == form_data.username).first()
|
|
if not user or not verify_password(form_data.password, user.hashed_password):
|
|
raise HTTPException(
|
|
status_code=status.HTTP_401_UNAUTHORIZED,
|
|
detail="Email ou mot de passe incorrect",
|
|
headers={"WWW-Authenticate": "Bearer"},
|
|
)
|
|
if not user.is_active:
|
|
raise HTTPException(status_code=403, detail="Compte désactivé")
|
|
|
|
token = create_access_token(subject=user.id)
|
|
return Token(access_token=token)
|
|
|
|
|
|
@router.get("/me", response_model=UserRead)
|
|
def me(current_user: User = Depends(get_current_user)) -> User:
|
|
return current_user
|