FastAPI OAuth2 Ilovasini Qoshish: To'liq Avtentifikatsiya Oqimi Qo'llanmasi

            pip install fastapi uvicorn python-multipart passlib[bcrypt] python-jose[cryptography]
            

              
                Copy
              
            
          

            from fastapi import Depends, FastAPI, HTTPException, status
from fastapi.security import OAuth2PasswordRequestForm
from jose import JWTError, jwt
from passlib.context import CryptContext
from datetime import datetime, timedelta

app = FastAPI()

# Kuchli, tasodifiy ravishda yaratilgan maxfiy kalit bilan almashtiring
SECRET_KEY = "YOUR_SECRET_KEY"
ALGORITHM = "HS256"
ACCESS_TOKEN_EXPIRE_MINUTES = 30

# Parolni shifrlash sozlamalari
pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")

# Tasodifiy foydalanuvchi bazasi (ishlab chiqarishda haqiqiy bazaga almashtiring)
users = {
    "johndoe": {
        "username": "johndoe",
        "hashed_password": pwd_context.hash("password123"),
        "scopes": ["read", "write"]
    }
}

# Parolni tasdiqlash funksiyasi
def verify_password(plain_password, hashed_password):
    return pwd_context.verify(plain_password, hashed_password)

# Kirish tokenini yaratish funksiyasi
def create_access_token(data: dict, expires_delta: timedelta):
    to_encode = data.copy()
    expire = datetime.utcnow() + expires_delta
    to_encode.update({"exp": expire})
    encoded_jwt = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
    return encoded_jwt

# Token yaratish uchun OAuth2 oxirgi nuqtasi
@app.post("/token")
async def login(form_data: OAuth2PasswordRequestForm = Depends()):
    user = users.get(form_data.username)
    if not user:
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Noto'g'ri foydalanuvchi nomi yoki parol",
            headers={"WWW-Authenticate": "Bearer"},
        )
    if not verify_password(form_data.password, user["hashed_password"]):
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Noto'g'ri foydalanuvchi nomi yoki parol",
            headers={"WWW-Authenticate": "Bearer"},
        )
    access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
    access_token = create_access_token(
        data={"sub": user["username"], "scopes": user["scopes"]},
        expires_delta=access_token_expires,
    )
    return {"access_token": access_token, "token_type": "bearer"}

# So'rovlarni tasdiqlash uchun vosita
async def get_current_user(token: str):
    credentials_exception = HTTPException(
        status_code=status.HTTP_401_UNAUTHORIZED,
        detail="Kredensiallarni tasdiqlash mumkin emas",
        headers={"WWW-Authenticate": "Bearer"},
    )
    try:
        payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
        username: str = payload.get("sub")
        if username is None:
            raise credentials_exception
    except JWTError:
        raise credentials_exception
    user = users.get(username)
    if user is None:
        raise credentials_exception
    return user

async def get_current_active_user(current_user = Depends(get_current_user)):
    return current_user

# Namuna himoyalangan oxirgi nuqta
@app.get("/users/me")
async def read_users_me(current_user = Depends(get_current_active_user)):
    return {"username": current_user["username"], "scopes": current_user["scopes"]}

            

              
                Copy
              
            
          

            from fastapi import Depends, FastAPI, HTTPException, status
from fastapi.security import OAuth2AuthorizationCodeBearer
from jose import JWTError, jwt

app = FastAPI()

# Kuchli, tasodifiy ravishda yaratilgan maxfiy kalit bilan almashtiring
SECRET_KEY = "YOUR_SECRET_KEY"
ALGORITHM = "HS256"

# Tasodifiy foydalanuvchi bazasi (ishlab chiqarishda haqiqiy bazaga almashtiring)
users = {
    "johndoe": {
        "username": "johndoe",
        "scopes": ["read", "write"]
    }
}

# OAuth2 sxemasi - token tasdiqlash uchun AuthorizationCodeBearer dan foydalanish
oauth2_scheme = OAuth2AuthorizationCodeBearer(authorizationUrl="/auth", tokenUrl="/token") # Ushbu URL'lar Avtorizatsiya Serveri tomonidan boshqariladi (bu FastAPI ilovasi emas).

# So'rovlarni tasdiqlash uchun vosita
async def get_current_user(token: str = Depends(oauth2_scheme)):
    credentials_exception = HTTPException(
        status_code=status.HTTP_401_UNAUTHORIZED,
        detail="Kredensiallarni tasdiqlash mumkin emas",
        headers={"WWW-Authenticate": "Bearer"},
    )
    try:
        payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
        username: str = payload.get("sub")
        if username is None:
            raise credentials_exception
    except JWTError:
        raise credentials_exception
    user = users.get(username)
    if user is None:
        raise credentials_exception
    return user

async def get_current_active_user(current_user = Depends(get_current_user)):
    return current_user

# Namuna himoyalangan oxirgi nuqta
@app.get("/users/me")
async def read_users_me(current_user = Depends(get_current_active_user)):
    return {"username": current_user["username"], "scopes": current_user["scopes"]}

            

              
                Copy
              
            
          

            from fastapi import Depends, FastAPI, HTTPException, status
from fastapi.security import OAuth2AuthorizationCodeBearer
from jose import JWTError, jwt

app = FastAPI()

# Kuchli, tasodifiy ravishda yaratilgan maxfiy kalit bilan almashtiring
SECRET_KEY = "YOUR_SECRET_KEY"
ALGORITHM = "HS256"

# Tasodifiy foydalanuvchi bazasi (ishlab chiqarishda haqiqiy bazaga almashtiring)
users = {
    "johndoe": {
        "username": "johndoe",
        "scopes": ["read", "write"]
    }
}

# OAuth2 sxemasi - token tasdiqlash uchun AuthorizationCodeBearer dan foydalanish
oauth2_scheme = OAuth2AuthorizationCodeBearer(authorizationUrl="/auth", tokenUrl="/token") # Ushbu URL'lar Avtorizatsiya Serveri tomonidan boshqariladi.

# So'rovlarni tasdiqlash uchun vosita
async def get_current_user(token: str = Depends(oauth2_scheme)):
    credentials_exception = HTTPException(
        status_code=status.HTTP_401_UNAUTHORIZED,
        detail="Kredensiallarni tasdiqlash mumkin emas",
        headers={"WWW-Authenticate": "Bearer"},
    )
    try:
        payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
        username: str = payload.get("sub")
        if username is None:
            raise credentials_exception
    except JWTError:
        raise credentials_exception
    user = users.get(username)
    if user is None:
        raise credentials_exception
    return user

async def get_current_active_user(current_user = Depends(get_current_user)):
    return current_user

# Namuna himoyalangan oxirgi nuqta
@app.get("/users/me")
async def read_users_me(current_user = Depends(get_current_active_user)):
    return {"username": current_user["username"], "scopes": current_user["scopes"]}

            

              
                Copy
              
            
          

            from fastapi import Depends, FastAPI, HTTPException, status
from fastapi.security import HTTPBasic, HTTPBasicCredentials
from jose import JWTError, jwt
from datetime import datetime, timedelta

app = FastAPI()

# Kuchli, tasodifiy ravishda yaratilgan maxfiy kalit bilan almashtiring
SECRET_KEY = "YOUR_SECRET_KEY"
ALGORITHM = "HS256"
ACCESS_TOKEN_EXPIRE_MINUTES = 30

# Tasodifiy mijoz bazasi (ishlab chiqarishda haqiqiy bazaga almashtiring)
clients = {
    "client_id": {
        "client_secret": "client_secret",
        "scopes": ["read", "write"]
    }
}

# Kirish tokenini yaratish funksiyasi
def create_access_token(data: dict, expires_delta: timedelta):
    to_encode = data.copy()
    expire = datetime.utcnow() + expires_delta
    to_encode.update({"exp": expire})
    encoded_jwt = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
    return encoded_jwt

# HTTP Asosiy Avtentifikatsiya sxemasi
security = HTTPBasic()

# Token yaratish uchun oxirgi nuqta
@app.post("/token")
async def login(credentials: HTTPBasicCredentials = Depends(security)):
    client = clients.get(credentials.username)
    if not client:
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Noto'g'ri mijoz ID yoki sir",
            headers={"WWW-Authenticate": "Basic"},
        )
    if credentials.password != client["client_secret"]:
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Noto'g'ri mijoz ID yoki sir",
            headers={"WWW-Authenticate": "Basic"},
        )
    access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
    access_token = create_access_token(
        data={"sub": credentials.username, "scopes": client["scopes"]},
        expires_delta=access_token_expires,
    )
    return {"access_token": access_token, "token_type": "bearer"}

# So'rovlarni tasdiqlash uchun vosita
async def get_current_client(token: str):
    credentials_exception = HTTPException(
        status_code=status.HTTP_401_UNAUTHORIZED,
        detail="Kredensiallarni tasdiqlash mumkin emas",
        headers={"WWW-Authenticate": "Bearer"},
    )
    try:
        payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
        client_id: str = payload.get("sub")
        if client_id is None:
            raise credentials_exception
    except JWTError:
        raise credentials_exception
    client = clients.get(client_id)
    if client is None:
        raise credentials_exception
    return client

async def get_current_active_client(current_client = Depends(get_current_client)):
    return current_client

# Namuna himoyalangan oxirgi nuqta
@app.get("/data")
async def read_data(current_client = Depends(get_current_active_client)):
    return {"message": "Mijoz tomonidan kirilgan ma'lumotlar: " + current_client["client_secret"]}

            

              
                Copy
              
            
          

            from fastapi import Depends, FastAPI, HTTPException, status
from fastapi.security import OAuth2PasswordRequestForm
from jose import JWTError, jwt
from passlib.context import CryptContext
from datetime import datetime, timedelta
import secrets  # Xavfsiz tasodifiy qatorlar yaratish uchun

app = FastAPI()

# Kuchli, tasodifiy ravishda yaratilgan maxfiy kalit bilan almashtiring
SECRET_KEY = "YOUR_SECRET_KEY"
ALGORITHM = "HS256"
ACCESS_TOKEN_EXPIRE_MINUTES = 30
REFRESH_TOKEN_EXPIRE_DAYS = 30  # Yangilash tokenlari uchun uzoqroq amal qilish muddati

# Parolni shifrlash sozlamalari
pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")

# Tasodifiy foydalanuvchi bazasi (ishlab chiqarishda haqiqiy bazaga almashtiring)
users = {
    "johndoe": {
        "username": "johndoe",
        "hashed_password": pwd_context.hash("password123"),
        "scopes": ["read", "write"],
        "refresh_token": None  # Yangilash tokenini shu yerda saqlang
    }
}

# Parolni tasdiqlash funksiyasi (oldingisidek)
def verify_password(plain_password, hashed_password):
    return pwd_context.verify(plain_password, hashed_password)

# Kirish tokenini yaratish funksiyasi (oldingisidek)
def create_access_token(data: dict, expires_delta: timedelta):
    to_encode = data.copy()
    expire = datetime.utcnow() + expires_delta
    to_encode.update({"exp": expire})
    encoded_jwt = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
    return encoded_jwt

# Yangilash tokenini yaratish funksiyasi
def create_refresh_token():
    return secrets.token_urlsafe(32)  # Xavfsiz tasodifiy qator yarating

# Token yaratish uchun OAuth2 oxirgi nuqtasi
@app.post("/token")
async def login(form_data: OAuth2PasswordRequestForm = Depends()):
    user = users.get(form_data.username)
    if not user:
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Noto'g'ri foydalanuvchi nomi yoki parol",
            headers={"WWW-Authenticate": "Bearer"},
        )
    if not verify_password(form_data.password, user["hashed_password"]):
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Noto'g'ri foydalanuvchi nomi yoki parol",
            headers={"WWW-Authenticate": "Bearer"},
        )

    # Yangilash tokenini yarating va saqlang (haqiqiy dunyoda xavfsiz tarzda ma'lumotlar bazasida)
    refresh_token = create_refresh_token()
    user["refresh_token"] = refresh_token  # Hozirda foydalanuvchi ob'ektiga saqlang (ishlab chiqarish uchun XAVFSIZ EMAS)

    access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
    access_token = create_access_token(
        data={"sub": user["username"], "scopes": user["scopes"]},
        expires_delta=access_token_expires,
    )
    return {"access_token": access_token, "token_type": "bearer", "refresh_token": refresh_token}

# Kirish tokenini yangilash uchun oxirgi nuqta
@app.post("/refresh_token")
async def refresh_access_token(refresh_token: str):
    # Yangilash tokeni orqali foydalanuvchini toping (xavfsiz tarzda ma'lumotlar bazasini so'rang)
    user = next((user for user in users.values() if user["refresh_token"] == refresh_token), None)

    if not user:
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Noto'g'ri yangilash tokeni",
            headers={"WWW-Authenticate": "Bearer"},
        )

    # Yangi kirish tokenini yarating
    access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
    access_token = create_access_token(
        data={"sub": user["username"], "scopes": user["scopes"]},
        expires_delta=access_token_expires,
    )

    return {"access_token": access_token, "token_type": "bearer"}

# So'rovlarni tasdiqlash uchun vosita (oldingisidek)
async def get_current_user(token: str):
    credentials_exception = HTTPException(
        status_code=status.HTTP_401_UNAUTHORIZED,
        detail="Kredensiallarni tasdiqlash mumkin emas",
        headers={"WWW-Authenticate": "Bearer"},
    )
    try:
        payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
        username: str = payload.get("sub")
        if username is None:
            raise credentials_exception
    except JWTError:
        raise credentials_exception
    user = next((user for user in users.values() if user["username"] == username), None)
    if user is None:
        raise credentials_exception
    return user

async def get_current_active_user(current_user = Depends(get_current_user)):
    return current_user

# Namuna himoyalangan oxirgi nuqta (oldingisidek)
@app.get("/users/me")
async def read_users_me(current_user = Depends(get_current_active_user)):
    return {"username": current_user["username"], "scopes": current_user["scopes"]}

            

              
                Copy