bj  dZddlmZddlZddlZddlmZmZmZm Z ddl m Z ddl m Z mZmZmZmZddlmZmZmZmZddlmZmZmZmZdd lmZdd lmZee Z!ed d g Z"ddZ#Gdde Z$Gdde Z%e"jMddZ'e"jMdddZ(e"jMdd dZ)e"jMded!dZ*e"jWdeeefd"dZ,y)#uP routes/auth.py POST /api/auth/captcha/challenge — generate math CAPTCHA POST /api/auth/captcha/refresh — get a fresh challenge POST /api/auth/captcha/verify — verify answer POST /api/auth/login — access key → JWT GET /api/auth/me — current candidate info ) annotationsN) APIRouterDepends HTTPExceptionstatus) BaseModel) LoginRequest LoginResponse CandidateOutCaptchaVerifyResponseSuccessResponse)validate_access_key create_tokenget_redirect_urlget_stage_name)create_challengerefresh_challengeverify_challengevalidate_captcha_token)get_current_candidate) get_loggerz /api/authauth)prefixtagscDtj|xsidtdS)zReturn a pretty-printed JSON string safe for logging. ensure_ascii=False so non-Latin scripts (Hindi etc.) print readably instead of as \uXXXX escape sequences.F)indentdefault ensure_ascii)jsondumpsstrdatas f/Users/priyanka/Documents/AI_Agent_Assessment/pepole_hub_candidate/people_hub_candidate/routes/auth.py_prettyr&&s ::djbCe LLc"eZdZUded<ded<y)CaptchaVerifyRequestr" session_idanswerN__name__ __module__ __qualname____annotations__r'r%r)r)/s O Kr'r)ceZdZUded<y)CaptchaRefreshRequestr"r*Nr,r1r'r%r3r34sOr'r3z/captcha/challengectjdt}tjdt||S)zDGenerate a fresh math CAPTCHA challenge. Always called on page load.u=POST /api/auth/captcha/challenge → generating new challengeu!captcha/challenge response → %s)loginforr&)results r%captcha_challenger8:s1HH LM  FHH 176?C Mr'z/captcha/refreshctjdt|jt |j }tjdt||S)z6Invalidate the current challenge and return a new one.u%POST /api/auth/captcha/refresh → %sucaptcha/refresh response → %s)r5r6r& model_dumprr*bodyr7s r%captcha_refreshr=CsEHH 5wt?P7QR t /FHH /A Mr'z/captcha/verifyc tjdt|jt |j |j }tjdtt|tr|n|j|S)z#Verify the candidate's math answer.u$POST /api/auth/captcha/verify → %sucaptcha/verify response → %s) r5r6r&r:rr*r+ isinstancedictr;s r%captcha_verifyrALsgHH 4gdoo>O6PQ doot{{ ;FHH .VT*0A0A0C1 Mr'z/login)response_modelctjdt|j|jret |js;tj d|jttjdtjd t|j}|s;tj d |jttj"d tjd t|j%d |j%d |j%d|j%d|j%ddt'|j%dxsd}t)|d |d |}t+|}t-|}tjd|||t/|dt1t3|j%d dt3|j%d xsdt3|j%dxsdt3|j%dxsdt5|j%dxsgt3|j%dxsd|j%d|j%d|t3|j%dxsd ||}tjdt|j|S#tjtf$r6}tjd|ttj dd}~wwxYw)u Validate access key + captcha token → return JWT + redirect URL. Flow: 1. (Optional) verify CAPTCHA token. 2. Look up `participant` row in PostgreSQL by UPPER(access_key). 3. Mint JWT carrying { sub: candidate_id, name, stage }. 4. Compute redirect URL from current_stage: 1 → /people_hub_assessment 2 → /people_hub_role_play 3 → /people_hub_coding_assessment uPOST /api/auth/login → %sz.login: CAPTCHA token invalid for access_key=%rz.TQ!v+AqD.D >HH #WT]3  %% ?s $ B%2B%)r$z dict | Nonereturnr")r<r3)r<r))r<r )rVr@)-__doc__ __future__rr r\fastapirrrrpydanticrmodels.schemasr r r r r services.auth_servicerrrrservices.captcha_servicerrrrmiddleware.auth_middlewarer utils.loggerrr-r5routerr&r)r3postr8r=rArirbrpr1r'r%r}s"# ===# +VH 5 M9 I  !"#  !  Xm4Q5QlE/2 !67&3&r'