30 lines
1.1 KiB
Python
30 lines
1.1 KiB
Python
## Copyright © 2026 Olaf Kolkman
|
|
## SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
from datetime import datetime, timezone
|
|
from backend.app.database import get_connection, hash_password, verify_password
|
|
|
|
|
|
def authenticate_user(username: str, password: str):
|
|
with get_connection() as conn:
|
|
row = conn.execute('SELECT * FROM users WHERE username = ?', (username,)).fetchone()
|
|
if row is None or not verify_password(password, row['password_hash']):
|
|
return None
|
|
user = dict(row)
|
|
if not row['password_hash'].startswith('scrypt$'):
|
|
conn.execute(
|
|
'UPDATE users SET password_hash = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?',
|
|
(hash_password(password), row['id']),
|
|
)
|
|
conn.commit()
|
|
user['password_hash'] = conn.execute(
|
|
'SELECT password_hash FROM users WHERE id = ?', (row['id'],)
|
|
).fetchone()['password_hash']
|
|
return user
|
|
|
|
|
|
def find_user(username: str):
|
|
with get_connection() as conn:
|
|
row = conn.execute('SELECT * FROM users WHERE username = ?', (username,)).fetchone()
|
|
return dict(row) if row else None
|