Full authentication in front

api/rpk-api/cli.py

@@ -0,0 +1,30 @@
+import asyncio
+import contextlib
+
+from fastapi_users.exceptions import UserAlreadyExists
+from fastapi_users.schemas import BaseUserCreate
+
+from hub import init_db as hub_init_db
+from hub.auth import get_user_manager
+from hub.user import get_user_db
+
+get_user_db_context = contextlib.asynccontextmanager(get_user_db)
+get_user_manager_context = contextlib.asynccontextmanager(get_user_manager)
+
+async def create_user(email: str, password: str, is_superuser: bool = False):
+    try:
+        await hub_init_db()
+        async with get_user_db_context() as user_db:
+            async with get_user_manager_context(user_db) as user_manager:
+                user = await user_manager.create(
+                    BaseUserCreate(
+                        email=email, password=password, is_superuser=is_superuser
+                    )
+                )
+                print(f"User created {user}")
+    except UserAlreadyExists:
+        print(f"User {email} already exists")
+
+
+if __name__ == "__main__":
+  asyncio.run(create_user("test@test.te", "test"))

api/rpk-api/hub/auth/__init__.py

@@ -1,16 +1,19 @@
 import os
-import uuid
+from typing import Any, Optional
 
 from beanie import PydanticObjectId
-from fastapi import Depends
-from fastapi_users import UUIDIDMixin, BaseUserManager, FastAPIUsers, schemas
-from fastapi_users.authentication import AuthenticationBackend, BearerTransport, CookieTransport
+from fastapi import Depends, Response, status
+from fastapi_users import BaseUserManager, FastAPIUsers, schemas, models
+from fastapi_users.authentication import AuthenticationBackend, BearerTransport, CookieTransport, Strategy
 from fastapi_users.authentication.strategy import AccessTokenDatabase, DatabaseStrategy
 from fastapi_users_db_beanie.access_token import BeanieBaseAccessTokenDocument, BeanieAccessTokenDatabase
+from fastapi_users.openapi import OpenAPIResponseType
 from httpx_oauth.clients.google import GoogleOAuth2
 from httpx_oauth.clients.discord import DiscordOAuth2
+from starlette.responses import JSONResponse, RedirectResponse
 
 from hub.user import User, get_user_db
+from hub.user.schemas import UserSchema
 
 
 SECRET = os.getenv("FASTAPI_USERS_SECRET")
@@ -19,9 +22,6 @@ discord_oauth_client = DiscordOAuth2(os.getenv("DISCORD_CLIENT_ID"), os.getenv("
 
 TOKEN_LIFETIME = 3600
 
-# bearer_transport = BearerTransport(tokenUrl="auth/login")
-cookie_transport = CookieTransport(cookie_name="rpkapiusersauth")
-
 
 class AccessToken(BeanieBaseAccessTokenDocument):
     pass
@@ -36,24 +36,57 @@ def get_database_strategy(
     return DatabaseStrategy(access_token_db, lifetime_seconds=TOKEN_LIFETIME)
 
 
-class UserManager(UUIDIDMixin, BaseUserManager[User, uuid.UUID]):
+class UserManager(BaseUserManager[User, PydanticObjectId]):
     reset_password_token_secret = SECRET
     verification_token_secret = SECRET
 
+    def parse_id(self, value: Any) -> models.ID:
+        return str(value)
+
 
 async def get_user_manager(user_db=Depends(get_user_db)):
     yield UserManager(user_db)
 
 
-auth_backend = AuthenticationBackend(name="db", transport=cookie_transport, get_strategy=get_database_strategy,
-)
+class CookieTransportMe(CookieTransport):
+    async def get_login_me_response(self, token: str, user) -> Response:
+        user_schema = UserSchema(**user.model_dump())
+        response = JSONResponse(status_code=status.HTTP_200_OK, content=user_schema.model_dump(mode="json"))
+        return self._set_login_cookie(response, token)
+
+    @staticmethod
+    def get_openapi_login_responses_success() -> OpenAPIResponseType:
+        return {status.HTTP_200_OK: {"model": UserSchema}}
+
+
+class AuthenticationBackendMe(AuthenticationBackend):
+    async def login(self, strategy: Strategy[models.UP, models.ID], user: models.UP) -> Response:
+        token = await strategy.write_token(user)
+        return await self.transport.get_login_me_response(token, user)
+
+
+class CookieTransportOauth(CookieTransport):
+    async def get_login_response(self, token: str) -> Response:
+        response = RedirectResponse("/login?oauth=success", status_code=status.HTTP_301_MOVED_PERMANENTLY)
+        return self._set_login_cookie(response, token)
+
+    @staticmethod
+    def get_openapi_login_responses_success() -> OpenAPIResponseType:
+        return {status.HTTP_301_MOVED_PERMANENTLY: {"model": None}}
+
+
+cookie_transport = CookieTransportMe(cookie_name="rpkapiusersauth")
+auth_backend = AuthenticationBackendMe(name="db", transport=cookie_transport, get_strategy=get_database_strategy, )
 
 fastapi_users = FastAPIUsers[User, PydanticObjectId](get_user_manager, [auth_backend])
 
 auth_router = fastapi_users.get_auth_router(auth_backend, requires_verification=True)
-register_router = fastapi_users.get_register_router(schemas.BaseUser, schemas.BaseUserCreate)
+register_router = fastapi_users.get_register_router(UserSchema, schemas.BaseUserCreate)
 password_router = fastapi_users.get_reset_password_router()
-verification_router = fastapi_users.get_verify_router(schemas.BaseUser)
-users_router = fastapi_users.get_users_router(schemas.BaseUser, schemas.BaseUserUpdate)
-google_oauth_router = fastapi_users.get_oauth_router(google_oauth_client, auth_backend, SECRET)
-discord_oauth_router = fastapi_users.get_oauth_router(discord_oauth_client, auth_backend, SECRET)
+verification_router = fastapi_users.get_verify_router(UserSchema)
+users_router = fastapi_users.get_users_router(UserSchema, schemas.BaseUserUpdate)
+
+cookie_transport = CookieTransportOauth(cookie_name="rpkapiusersauth")
+auth_backend = AuthenticationBackend(name="db", transport=cookie_transport, get_strategy=get_database_strategy, )
+google_oauth_router = fastapi_users.get_oauth_router(google_oauth_client, auth_backend, SECRET, is_verified_by_default=True)
+discord_oauth_router = fastapi_users.get_oauth_router(discord_oauth_client, auth_backend, SECRET, is_verified_by_default=True)

api/rpk-api/hub/user/__init__.py

@@ -1,4 +1,3 @@
-from fastapi import Depends
 from fastapi_users_db_beanie import BaseOAuthAccount, BeanieUserDatabase, BeanieBaseUserDocument
 from pydantic import Field
 
@@ -14,6 +13,3 @@ class UserDatabase(BeanieUserDatabase):
 
 async def get_user_db():
     yield UserDatabase(User, OAuthAccount)
-
-async def get_user_manager(user_db=Depends(get_user_db)):
-    yield UserManager(user_db)

api/rpk-api/hub/user/schemas.py

@@ -0,0 +1,5 @@
+from beanie import PydanticObjectId
+from fastapi_users.schemas import BaseUser
+
+class UserSchema(BaseUser[PydanticObjectId]):
+    pass