from fastapi import APIRouter, Depends, Request from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer from common.models.gmodel import UserInfo from router.v1.validator.dependencies import IsValidAccessToken, IsValidRefreshToken, RemoveNoneResponse from services.auth_service import AuthService from .protocol import Req_Login, Req_UpdateMe, Res_Login, Res_Me, Res_RefreshToken security = HTTPBearer() # 라우터(MVC 의 컨트롤러). 요청 검증 -> service 호출 -> RemoveNoneResponse 반환만 담당. router = APIRouter(prefix="/v1/auth", tags=["Auth"], responses={404: {"description": "Not found"}}) @router.post(path="/login", response_model=Res_Login, summary="로그인", description="id/pw 로 로그인하고 JWT 토큰을 발급한다.") async def login(request: Request, req: Req_Login, service: AuthService = Depends()): return RemoveNoneResponse(await service.attempt_login(req.id, req.password, request.client.host)) @router.post( path="/refresh_token", dependencies=[Depends(IsValidRefreshToken)], response_model=Res_RefreshToken, summary="액세스 토큰 갱신", description="refresh 토큰으로 access 토큰을 재발급한다.", ) async def refresh_token(service: AuthService = Depends(), credentials: HTTPAuthorizationCredentials = Depends(security)): return RemoveNoneResponse(await service.refresh_token(credentials.credentials)) @router.get( path="/me", response_model=Res_Me, summary="내 정보", description="유효한 access 토큰이 있어야 호출 가능. 토큰의 유저+회사 정보를 반환한다.", ) async def me(service: AuthService = Depends(), user_info: UserInfo = Depends(IsValidAccessToken)): return RemoveNoneResponse(await service.get_me(user_info)) @router.patch( path="/me", response_model=Res_Me, summary="내 정보 수정", description="본인 이름/이메일/연락처/비밀번호를 수정한다(권한·소속·ID 변경 불가).", ) async def update_me(req: Req_UpdateMe, service: AuthService = Depends(), user_info: UserInfo = Depends(IsValidAccessToken)): return RemoveNoneResponse(await service.update_me(user_info, req))