Xjw (dZddlZddlZddlZddlmZddlmZmZddl m Z eje Z ejjejj!eddZeedefd Zd Zd edefd Zd edefd ZdedefdZy)uV Authentication helper for the Scheduler service. Supports two auth strategies (checked in order): 1. JWT Bearer token — validated with the same HS256 secret as Laravel. 2. X-Token header — looked up in the MYL_MASTER.users table (mirrors PHP AuthHelper::verifyAuth). If neither header is present, the request is rejected with 401. N) load_dotenv)Request HTTPException)get_master_connectionz..z.envreturncJtjd}|s td|S)z Resolve the JWT secret following a secure multi-tiered approach: environment variable -> .env file value (already loaded). JWT_SECRETzTJWT_SECRET is not configured. Set it in the .env file or as an environment variable.)osgetenv RuntimeError)secrets //var/www/html/myl_app/scheduler-service/auth.py_get_jwt_secretrs/ YY| $F  E   MHS256tokenct} tj||tgdgdi}|S#tj$rt ddtj $r}t dd|d}~wwxYw) z9Decode and verify a JWT token. Returns the payload dict.require)expiatsub) algorithmsoptionszToken has expired. status_codedetailzInvalid token: N)rjwtdecode JWT_ALGORITHMExpiredSignatureErrorrInvalidTokenError)rr payloadexcs r _verify_jwtr%,s  F **  %0    $ $J4HII   ocU$;   s#02A7"A22A7ct5}|j5}|jd|f|j}dddddds t dd|S#1swY"xYw#1swY&xYw)z?Look up the token in MYL_MASTER.users (mirrors PHP AuthHelper).z,SELECT * FROM users WHERE token = %s LIMIT 1Nrz%Invalid token. Authentication failed.r)rcursorexecutefetchoner)rconncurusers r_verify_x_tokenr-As  "D [[] "c KK> <<>D  "" $K   K " """s"A-$A!A-!A* &A--A6requestc|jjdd}|jdr|dd}t|S|jjdd}|r t |St dd ) z Authenticate the incoming request. Returns a dict representing the authenticated user/payload. Raises HTTPException(401) on failure. AuthorizationzBearer NzX-TokenrzHAuthentication required. Provide Authorization Bearer or X-Token header.r)headersget startswithr%r-r)r. auth_header jwt_tokenx_tokens r authenticater9Rsw//%%or:Ki(O 9%%oo!!)R0Gw'' Y r)__doc__r loggingrdotenvrfastapirrdbr getLogger__name__loggerpathjoindirname__file__ _ENV_PATHstrrr dictr%r-r9rrrJs   *$   8 $ GGLL2D& A I    s t *34"'dr