Python fastapi 单点登录

# 安装所需的库
# pip install fastapi[all] pyjwt

from fastapi import FastAPI, HTTPException, Depends
from fastapi.security import OAuth2PasswordRequestForm, OAuth2PasswordBearer
from datetime import datetime, timedelta
from jwt import PyJWTError, encode, decode

# 配置参数
JWT_SECRET = "secret"
JWT_ALGORITHM = "HS256"
ACCESS_TOKEN_EXPIRE_MINUTES = 30

# 假设的用户数据库
USERS = {
    "user1": {
        "password": "pass1",
        "name": "User One"
    },
    "user2": {
        "password": "pass2",
        "name": "User Two"
    }
}

# 创建FastAPI实例
app = FastAPI()

# 创建JWT工具函数

def create_access_token(data: dict, expires_delta: timedelta):
    to_encode = data.copy()
    expire = datetime.utcnow() + expires_delta
    to_encode.update({"exp": expire})
    encoded_jwt = encode(to_encode, JWT_SECRET, algorithm=JWT_ALGORITHM)
    return encoded_jwt

def decode_access_token(token: str):
    try:
        payload = decode(token, JWT_SECRET, algorithms=[JWT_ALGORITHM])
        username: str = payload.get("sub")
        if username is None:
            raise HTTPException(status_code=400, detail="Invalid token")
        return username
    except PyJWTError:
        raise HTTPException(status_code=401, detail="Invalid token")

# JWT依赖项
oauth2_scheme = OAuth2PasswordBearer(tokenUrl="token")

# 定义登录路由
@app.post("/token")
def login(form_data: OAuth2PasswordRequestForm = Depends()):
    username = form_data.username
    password = form_data.password
    if username not in USERS or USERS[username]["password"] != password:
        raise HTTPException(status_code=400, detail="Incorrect username or password")

    access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
    access_token = create_access_token(
        data={"sub": username},
        expires_delta=access_token_expires
    )
    return {"access_token": access_token, "token_type": "bearer"}

# 定义需要登录的路由
@app.get("/protected_route")
def protected_route(token: str = Depends(oauth2_scheme)):
    username = decode_access_token(token)
    user_data = USERS[username]
    return {"message": f"Hello, {user_data['name']}!"}