acazares
f460c2b8aa
feat(auth): create registration route and integrate with AuthService feat(auth): implement user registration logic in AuthService with Keycloak integration fix(config): add Keycloak admin credentials to settings fix(middleware): update tenant middleware to include new auth routes chore(docs): remove outdated testing guide and add project architecture documentation feat(frontend): implement user registration page and integrate with API feat(frontend): create login page with tenant selection and error handling refactor(frontend): update layout to use custom auth store and improve loading states
114 lines
2.9 KiB
Python
114 lines
2.9 KiB
Python
"""
|
|
Endpoints API para autenticación
|
|
"""
|
|
from fastapi import APIRouter, Depends, HTTPException
|
|
from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
|
|
from sqlalchemy.orm import Session
|
|
|
|
from core.database import get_core_db
|
|
from core.security import get_current_user
|
|
from .dto import (
|
|
LoginRequestDTO,
|
|
TokenResponseDTO,
|
|
RefreshTokenRequestDTO,
|
|
UserInfoResponseDTO,
|
|
LogoutRequestDTO,
|
|
RegisterRequestDTO,
|
|
RegisterResponseDTO
|
|
)
|
|
from .service import AuthService
|
|
|
|
router = APIRouter(prefix="/auth", tags=["Authentication"])
|
|
security = HTTPBearer()
|
|
|
|
|
|
@router.post("/register", response_model=RegisterResponseDTO, status_code=201)
|
|
async def register(
|
|
register_data: RegisterRequestDTO,
|
|
db: Session = Depends(get_core_db)
|
|
):
|
|
"""
|
|
Registra un nuevo usuario en Keycloak
|
|
|
|
El usuario debe proporcionar:
|
|
- username: Nombre de usuario único
|
|
- email: Email único
|
|
- password: Contraseña (mínimo 8 caracteres)
|
|
- first_name: Nombre
|
|
- last_name: Apellido
|
|
- tenant_slug: Slug del tenant al que pertenece
|
|
|
|
El usuario se crea automáticamente en Keycloak con:
|
|
- Cuenta habilitada
|
|
- Rol 'user' asignado por defecto
|
|
- Atributos de tenant
|
|
"""
|
|
service = AuthService(db)
|
|
return service.register(register_data)
|
|
|
|
|
|
@router.post("/login", response_model=TokenResponseDTO)
|
|
async def login(
|
|
login_data: LoginRequestDTO,
|
|
db: Session = Depends(get_core_db)
|
|
):
|
|
"""
|
|
Autentica usuario con Keycloak y retorna tokens JWT
|
|
|
|
El usuario debe proporcionar:
|
|
- username: Usuario o email
|
|
- password: Contraseña
|
|
- tenant_slug: Slug del tenant al que pertenece
|
|
"""
|
|
service = AuthService(db)
|
|
return service.login(login_data)
|
|
|
|
|
|
@router.post("/refresh", response_model=TokenResponseDTO)
|
|
async def refresh_token(
|
|
refresh_data: RefreshTokenRequestDTO,
|
|
db: Session = Depends(get_core_db)
|
|
):
|
|
"""
|
|
Refresca el access token usando el refresh token
|
|
"""
|
|
service = AuthService(db)
|
|
return service.refresh_token(refresh_data)
|
|
|
|
|
|
@router.get("/me", response_model=UserInfoResponseDTO)
|
|
async def get_current_user_info(
|
|
credentials: HTTPAuthorizationCredentials = Depends(security),
|
|
db: Session = Depends(get_core_db)
|
|
):
|
|
"""
|
|
Obtiene información del usuario actual desde el token
|
|
"""
|
|
service = AuthService(db)
|
|
return service.get_user_info(credentials.credentials)
|
|
|
|
|
|
@router.post("/logout")
|
|
async def logout(
|
|
logout_data: LogoutRequestDTO,
|
|
db: Session = Depends(get_core_db),
|
|
current_user: dict = Depends(get_current_user)
|
|
):
|
|
"""
|
|
Cierra sesión invalidando el refresh token
|
|
"""
|
|
service = AuthService(db)
|
|
return service.logout(logout_data)
|
|
|
|
|
|
@router.get("/health")
|
|
async def auth_health():
|
|
"""
|
|
Health check del módulo de autenticación
|
|
"""
|
|
return {
|
|
"status": "ok",
|
|
"module": "authentication",
|
|
"provider": "keycloak"
|
|
}
|