import jwt from fastapi.security import OAuth2PasswordBearer from passlib.context import CryptContext from datetime import datetime, timedelta oauth2_scheme = OAuth2PasswordBearer(tokenUrl="/api/token") pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto") SECRET_KEY = "alicorns" ALGORITHM = "HS256" ACCESS_TOKEN_EXPIRE_MINUTES = 30 def get_password_hash(password: str) -> str: return pwd_context.hash(password) def verify_password(plain_password: str, hashed_password: str) -> bool: return pwd_context.verify(plain_password, hashed_password) def create_access_token(*, data: dict, expires_delta: timedelta = None): to_encode = data.copy() if expires_delta: expire = datetime.utcnow() + expires_delta else: expire = datetime.utcnow() + timedelta(minutes=15) to_encode.update({"exp": expire}) encoded_jwt = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM) return encoded_jwt