Spaces:

mominah
/

Chatbot-backend

Sleeping

App Files Files Community

mominah commited on Mar 7

Commit

506e8fb

verified ·

1 Parent(s): d3be5c2

Update auth.py

Browse files

Files changed (1) hide show

auth.py +1 -121

auth.py CHANGED Viewed

@@ -6,7 +6,7 @@ from urllib.parse import quote_plus
 from typing import List, Optional, Any
 from dotenv import load_dotenv
-from fastapi import APIRouter, HTTPException, Depends, Request, UploadFile, File, Form, Body
 from fastapi.responses import JSONResponse
 from fastapi.security import OAuth2PasswordBearer, OAuth2PasswordRequestForm
 from jose import JWTError, jwt
@@ -15,17 +15,6 @@ from pydantic import BaseModel, EmailStr, Field, validator
 from pymongo import MongoClient
 import os.path
-# ----- OTP and Email Imports -----
-import smtplib
-from email.mime.multipart import MIMEMultipart
-from email.mime.text import MIMEText
-try:
-    import markdown
-except ImportError:
-    markdown = None
-import secrets
-# ----------------------------------
 load_dotenv()
 # Setup logging
@@ -38,8 +27,6 @@ MONGO_URL = os.getenv("CONNECTION_STRING").replace("${PASSWORD}", password)
 client = MongoClient(MONGO_URL)
 db = client.users_database
 users_collection = db.users
-# New collection to store OTP records
-otp_collection = db.otp_verifications
 # OAuth2 setup
 oauth2_scheme = OAuth2PasswordBearer(tokenUrl="token")
@@ -173,123 +160,16 @@ def save_avatar_file(file: UploadFile) -> str:
         file.file.close()
     return file_path
-# ----- OTP and Email Functions -----
-def generate_otp(length=6):
-    """Generate a numeric OTP of specified length."""
-    digits = "0123456789"
-    otp = ''.join(secrets.choice(digits) for _ in range(length))
-    return otp
-def send_email_func(sender_email, sender_password, receiver_email, subject, body):
-    smtp_server = "smtp.gmail.com"
-    port = 587
-    message = MIMEMultipart("alternative")
-    message["Subject"] = subject
-    message["From"] = sender_email
-    message["To"] = receiver_email
-    part1 = MIMEText(body, "plain")
-    if markdown:
-        html_content = markdown.markdown(body)
-    else:
-        html_content = f"<pre>{body}</pre>"
-    html_template = f"""\
-<html>
-  <head>
-    <style>
-      body {{
-        font-family: Arial, sans-serif;
-        line-height: 1.6;
-        margin: 20px;
-      }}
-      h1, h2, h3 {{
-        color: #333;
-      }}
-      pre {{
-        background: #f4f4f4;
-        padding: 10px;
-        border: 1px solid #ddd;
-      }}
-    </style>
-  </head>
-  <body>
-    {html_content}
-  </body>
-</html>
-"""
-    part2 = MIMEText(html_template, "html")
-    message.attach(part1)
-    message.attach(part2)
-    try:
-        with smtplib.SMTP(smtp_server, port, timeout=10) as server:
-            server.starttls()
-            server.login(sender_email, sender_password)
-            server.sendmail(sender_email, receiver_email, message.as_string())
-        logger.info("Successfully sent email")
-    except Exception as e:
-        logger.error(f"Error sending email: {e}")
-        raise e
-# ------------------------------------
 # ----- Auth Endpoints -----
-@router.post("/send_otp")
-async def send_otp(receiver_email: EmailStr = Body(..., embed=True)):
-    """
-    Generates an OTP and sends it via email to the provided receiver_email.
-    (For demonstration purposes, the OTP is returned. Remove it in production.)
-    """
-    sender_email = os.getenv("SENDER_EMAIL")
-    sender_password = os.getenv("SENDER_PASSWORD")
-    if not sender_email or not sender_password:
-        raise HTTPException(status_code=500, detail="Email sender credentials are not configured.")
-    otp = generate_otp(6)
-    subject = "Your One-Time Password (OTP)"
-    body = f"""\
-# Your OTP
-Here is your one-time password (OTP):
-`{otp}`
-Please use the code above to verify your email and proceed with account creation.
-"""
-    try:
-        send_email_func(sender_email, sender_password, receiver_email, subject, body)
-        # Store OTP record with a 10-minute expiration
-        otp_record = {
-            "email": receiver_email,
-            "otp": otp,
-            "expires_at": datetime.utcnow() + timedelta(minutes=1)
-        }
-        otp_collection.update_one({"email": receiver_email}, {"$set": otp_record}, upsert=True)
-    except Exception as e:
-        raise HTTPException(status_code=500, detail=f"Error sending OTP email: {str(e)}")
-    return {"message": "OTP sent successfully", "otp": otp}  # Remove OTP from response in production
 @router.post("/signup", response_model=Token)
 async def signup(
     request: Request,
     name: str = Form(...),
     email: EmailStr = Form(...),
     password: str = Form(...),
-    otp: str = Form(...),
     avatar: Optional[UploadFile] = File(None)
 ):
-    # Verify OTP for this email
-    otp_record = otp_collection.find_one({"email": email})
-    if not otp_record:
-        raise HTTPException(status_code=400, detail="No OTP sent to this email. Please request an OTP first.")
-    if otp_record["otp"] != otp:
-        raise HTTPException(status_code=400, detail="Invalid OTP provided.")
-    if datetime.utcnow() > otp_record["expires_at"]:
-        raise HTTPException(status_code=400, detail="OTP has expired. Please request a new one.")
-    # Remove the OTP record after successful verification
-    otp_collection.delete_one({"email": email})
     try:
         _ = User(name=name, email=email, password=password)
     except Exception as e:

 from typing import List, Optional, Any
 from dotenv import load_dotenv
+from fastapi import APIRouter, HTTPException, Depends, Request, UploadFile, File, Form
 from fastapi.responses import JSONResponse
 from fastapi.security import OAuth2PasswordBearer, OAuth2PasswordRequestForm
 from jose import JWTError, jwt
 from pymongo import MongoClient
 import os.path
 load_dotenv()
 # Setup logging
 client = MongoClient(MONGO_URL)
 db = client.users_database
 users_collection = db.users
 # OAuth2 setup
 oauth2_scheme = OAuth2PasswordBearer(tokenUrl="token")
         file.file.close()
     return file_path
 # ----- Auth Endpoints -----
 @router.post("/signup", response_model=Token)
 async def signup(
     request: Request,
     name: str = Form(...),
     email: EmailStr = Form(...),
     password: str = Form(...),
     avatar: Optional[UploadFile] = File(None)
 ):
     try:
         _ = User(name=name, email=email, password=password)
     except Exception as e: