925a3b3911
- simplify Model.Schema - introduce metaclass in favor of __sub_init__ - use metaclass to populate effective Model.Schema
42 lines
1.4 KiB
Python
42 lines
1.4 KiB
Python
from typing import Optional, List
|
|
from ohmyapi.db import Model, field
|
|
from passlib.context import CryptContext
|
|
from tortoise.contrib.pydantic import pydantic_queryset_creator
|
|
|
|
pwd_context = CryptContext(schemes=["argon2"], deprecated="auto")
|
|
|
|
|
|
class Group(Model):
|
|
id = field.IntField(pk=True)
|
|
name = field.CharField(max_length=42)
|
|
|
|
|
|
class User(Model):
|
|
id = field.IntField(pk=True)
|
|
username = field.CharField(max_length=150, unique=True)
|
|
password_hash = field.CharField(max_length=128)
|
|
is_admin = field.BooleanField(default=False)
|
|
is_staff = field.BooleanField(default=False)
|
|
groups: Optional[List[Group]] = field.ManyToManyField("ohmyapi_auth.Group", related_name="users")
|
|
|
|
|
|
class Schema:
|
|
exclude = 'password_hash',
|
|
|
|
|
|
def set_password(self, raw_password: str) -> None:
|
|
"""Hash and store the password."""
|
|
self.password_hash = pwd_context.hash(raw_password)
|
|
|
|
def verify_password(self, raw_password: str) -> bool:
|
|
"""Verify a plaintext password against the stored hash."""
|
|
return pwd_context.verify(raw_password, self.password_hash)
|
|
|
|
@classmethod
|
|
async def authenticate(cls, username: str, password: str) -> Optional["User"]:
|
|
"""Authenticate a user by username and password."""
|
|
user = await cls.filter(username=username).first()
|
|
if user and user.verify_password(password):
|
|
return user
|
|
return None
|
|
|