admin_auth.py

import datetime
import random

from db import AdminLogin, AdminSession


def generate_token():
    return "".join([chr(random.randint(97, 122)) if random.randint(0, 2) else str(random.randint(0, 9)) for _ in range(40)])


def admin_login(login="", password="", refresh_token=""):
    if password and login:
        return admin_session_start(login, password)
    if refresh_token:
        return admin_session_refresh(refresh_token)
    return {
        "status": 401,
        "message": "Invalid credentials"
    }


def admin_session_start(login, password):
    print("login")
    for admin in AdminLogin.select().where(AdminLogin.login == login and AdminLogin.password == password):
        admin_id = admin.id
        access_token, refresh_token = generate_token(), generate_token()
        AdminSession.insert(access_token=access_token,
                            refresh_token=refresh_token,
                            admin_id=admin_id,
                            start_time=datetime.datetime.now()).execute()
        return {
            "status": 200,
            "access_token": access_token,
            "refresh_token": refresh_token,
            "message": "OK"
        }

    return {
        "status": 404,
        "message": "Admin not found"
    }


def admin_session_refresh(refresh_token):
    print("refresh")
    if len(AdminSession.select().where(AdminSession.refresh_token == refresh_token)):
        access_token, new_refresh_token = generate_token(), generate_token()
        AdminSession.update(access_token=access_token,
                            refresh_token=new_refresh_token,
                            start_time=datetime.datetime.now()).where(AdminSession.refresh_token == refresh_token).execute()
        return {
            "status": 200,
            "access_token": access_token,
            "refresh_token": new_refresh_token,
            "message": "OK"
        }

    return {
        "status": 404,
        "message": "Session not found"
    }