User authentication with tests.

gns3server/services/authentication.py

@@ -35,10 +35,6 @@ ACCESS_TOKEN_EXPIRE_MINUTES = 30
 pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
 
 
-#class AuthException(BaseException):
-#    pass
-
-
 class AuthService:
 
     def hash_password(self, password: str) -> str:
@@ -49,14 +45,19 @@ class AuthService:
 
         return pwd_context.verify(password, hashed_password)
 
-    def create_access_token(self, username):
+    def create_access_token(
+            self,
+            username,
+            secret_key: str = SECRET_KEY,
+            expires_in: int = ACCESS_TOKEN_EXPIRE_MINUTES
+    ) -> str:
 
-        expire = datetime.utcnow() + timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
+        expire = datetime.utcnow() + timedelta(minutes=expires_in)
         to_encode = {"sub": username, "exp": expire}
-        encoded_jwt = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
+        encoded_jwt = jwt.encode(to_encode, secret_key, algorithm=ALGORITHM)
         return encoded_jwt
 
-    def get_username_from_token(self, token: str) -> Optional[str]:
+    def get_username_from_token(self, token: str, secret_key: str = SECRET_KEY) -> Optional[str]:
 
         credentials_exception = HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,
@@ -64,7 +65,7 @@ class AuthService:
             headers={"WWW-Authenticate": "Bearer"},
         )
         try:
-            payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
+            payload = jwt.decode(token, secret_key, algorithms=[ALGORITHM])
             username: str = payload.get("sub")
             if username is None:
                 raise credentials_exception