' j &dZddlZddlmZmZmZddlmZddlZddlZddl m Z ej ddZ dZ eej d d Zd ed efd Zd eded efdZddedeed efdZded eefdZded eefdZdS)z2Authentication utilities for JWT token management.N)datetime timedeltatimezone)Optional)InvalidTokenErrorJWT_SECRET_KEYz$your-secret-key-change-in-productionHS256JWT_ACCESS_TOKEN_EXPIRE_MINUTES1440plain_passwordreturnctj|dtjdS)zHash a plain text password using bcrypt. Args: plain_password: Plain text password to hash Returns: bcrypt hash string utf-8)bcrypthashpwencodegensaltdecode)r s @/var/www/html/ai-enterprise-brain/backend/chanakya/auth/utils.py hash_passwordrs; =..w779I9I J J Q QRY Z ZZhashed_passwordcxtj|d|dS)zVerify a plain text password against a bcrypt hash. Args: plain_password: Plain text password to verify hashed_password: bcrypt hash from the database Returns: True if password matches, False otherwise r)rcheckpwr)r rs rverify_passwordr!s3 >.//88/:P:PQX:Y:Y Z ZZrdata expires_deltacN|}|r"tjtj|z}n4tjtjt t z}|d|itj |tt}|S)zCreate a JWT access token. Args: data: Payload data to encode in token (typically {"sub": username}) expires_delta: Optional custom expiration time Returns: Encoded JWT token string )minutesexp) algorithm) copyrnowrutcrACCESS_TOKEN_EXPIRE_MINUTESupdatejwtr SECRET_KEY ALGORITHM)rr to_encodeexpire encoded_jwts rcreate_access_tokenr-2s I]hl++m;hl++i@[.\.\.\\ eV_%%%*Y iHHHK rtokencn tj|ttg}|S#t$rYdSwxYw)zDecode and verify a JWT access token. Args: token: JWT token string Returns: Decoded token payload if valid, None if invalid or expired ) algorithmsN)r'rr(r)rr.payloads rdecode_access_tokenr3IsF*UJI;GGG tts #& 44cRt|}|r|dSdS)zExtract username from JWT token. Args: token: JWT token string Returns: Username if token is valid, None otherwise subN)r3getr1s rget_username_from_tokenr7Ys0"%((G"{{5!!! 4r)N)__doc__osrrrtypingrrr'jwt.exceptionsrgetenvr(r)intr%strrboolrdictr-r3r7rrrBs88 2222222222 ,,,,,,RY')O P P  !c)"),Mv"V"VWW [# [# [ [ [ [ [C [# [$ [ [ [ ["d8I3FRU. s x~     3 8C=      r