o Ah%@sRddlZddlZddlZddlmZmZddlmZddlmZm Z ddl m Z ddl m Z ddlmZddlmZdd lmZdd lmZdd lmZdd lmZddlZeed gddZeddZdZdZdZdZGdddej Z!ddZ"de#de#fddZ$de#dede#fdd Z%de#fd!d"Z&d#e#d$e#de#fd%d&Z'de#fd'd(Z(dS))N)datetime timedelta) CryptContext) HTTPExceptionstatus)create_access_token)str_to_objectid)get_role_service) FeatureBase)verify_google_token)send_welcome_email)ObjectId) load_dotenvbcryptauto)schemes deprecatedi7)minutesusersaccounts subscriptionsprojectscseZdZfddZZS)CustomJSONEncodercs0t|tr |St|trt|St|S)N) isinstancer isoformatr strsuperdefault)selfobj __class__6/var/www/html/moveengine/app/v1/services/saas/login.pyr s   zCustomJSONEncoder.default)__name__ __module__ __qualname__r __classcell__r"r"r r#rsrcCs^t|trdd|DSt|trdd|DSt|tjr$|St|tr-t|S|S)NcSsi|] \}}|t|qSr"serialize_data).0kvr"r"r# )sz"serialize_data..cSsg|]}t|qSr"r()r*itemr"r"r# +sz"serialize_data..)rdictitemslistrrr r)rr"r"r#r)'s    r) user_datareturnc sjttdd}|dd|dd|dd|d||d d|d r|t}|d t|d i}|r|dd|d<|d d|d<|dd|d<|d r}|t}|d t|d i}|r||d d|d <|d||d<n|t }| |d dd}||d <|d} | rt | |} | r| di|d<|d} t | } | |d<|S)z Enriches user data with common details: - Account information (subscription, active agents, etc.) - Role rights from roles service. ALLOWED_FREE_AGENTS5 account_typersubscription_idsubscription_statussubscription_agents active_agents account_id_idactive_subscription_idactive_agents_countsubscription_agents_countACTIVE)r=rroles permissions role_rightsfeatures role_features)intosgetenv setdefaultgetACCOUNT_COLLECTION_NAMEfind_onerSUBSCRIPTION_COLLECTION_NAMEPROJECT_COLLECTION_NAMEcount_documentsr r2find) r3dbr5accounts_collection account_infosubscription_collection subscriptionproject_collectionactive_projects_countrole_idrolefeatures_collection features_listr"r"r#enrich_user_data3sL          r^token_expires_deltac sFt||IdH}td|d|ddi|d}t|}d||dS) z Common login processing: - Enrich user data with account/role details. - Generate a JWT token. - Serialize user data for the response. Nsubemailmobiler9)data expires_deltazLogin Successful)messageusertoken)r^rrLr))r3rSr_rgr"r"r#process_user_loginis rhcsX|td|ji}|stdddt|j|ds#tdddt||t IdHS) z+ Handles the email/password login. raizUser not found status_codedetailhashed_passwordizInvalid credentialsN) COLLECTION_NAMErNrar pwd_contextverifypasswordrLrhaccess_token_expires) user_loginrS user_in_dbr"r"r# login_userzs  rtpayload otp_storec s|d}|d}|r|durtddd||vr!tddd||}t|dkr6||=tdd d|dt|krDtdd d||=|t}|d |i}|sn|ttd d d d dd}||j} | |d<n| d|diddtii|}t ||t IdHS)a Verifies the OTP for a phone login. This function handles: - Validating the OTP (using an in-memory store for demo purposes) - Looking up (or creating) the user by phone - Processing the login (enriching user data and generating JWT token) phoneotpNiz"Phone number and OTP are required.riz#OTP not sent for this phone number.expiresz OTP expired.z Invalid OTP.rbTr9)rb created_date last_login is_active is_verifiedmobile_verifiedr=rZr>$setr|) rLrrutcnowrHrmrN insert_one inserted_id update_onerhrq) rurSrvrw otp_submittedstoredusers_collectionrsr3rr"r"r#verify_phone_otp_servicesD         rc s6t|j}|sttjdd|t}|d|di}|sx|d|d|dd|dt t t ddd d }|d }|d|di}|rZ|d d|d <|d d|d<| |j } | |d<| t |d|dt||tIdHSt |dd} |d|did| i|| t||tIdHS)z' Handles Google Connect login. zInvalid Google token.riranamepicturer9 refresh_tokenTF) rarpicurlgoogle_connectr{r| date_of_birthr}r~remailsr=r[ rZr>N)r|rr)r rgrrHTTP_401_UNAUTHORIZEDrmrNrLrrrradd_taskr rhrqrupdate) google_tokenbackground_tasksrS user_inforrsr3emails_collection invitationr update_datar"r"r#google_connect_users>     r))jsonrIrandomrrpasslib.contextrfastapirrapp.v1.dependencies.authrapp.v1.libraries.objectrapp.v1.services.saas.rolesr app.v1.models.crudmodelr app.v1.libraries.googleconnectr app.v1.libraries.email_templatesr bsonr dotenvrrnrqrmrMrOrP JSONEncoderrr)r0r^rhrtrrr"r"r"r#s:           6 :