Merge pull request #144 from jettysaivarun/143-backenddrf-implement-user-login-api-endpoint-with-password-hashing

Implement login API for issue 143

Author: Golden-Eagle07

backend/apps/authentication/serializers.py

@@ -1,5 +1,7 @@
+from django.contrib.auth import authenticate
 from django.contrib.auth.models import User
 from rest_framework import serializers
+from rest_framework_simplejwt.tokens import RefreshToken
 
 
 class RegisterSerializer(serializers.ModelSerializer):
@@ -27,3 +29,20 @@ def create(self, validated_data):
             password=validated_data["password"],
         )
         return user
+
+
+class LoginSerializer(serializers.Serializer):
+    username = serializers.CharField()
+    password = serializers.CharField(write_only=True)
+
+    def validate(self, attrs):
+        username = attrs.get("username")
+        password = attrs.get("password")
+        user = authenticate(username=username, password=password)
+        if user is None:
+            raise serializers.ValidationError("Invalid username or password")
+        refresh = RefreshToken.for_user(user)
+        attrs["user"] = user
+        attrs["access_token"] = str(refresh.access_token)
+        attrs["refresh_token"] = str(refresh)
+        return attrs

backend/apps/authentication/urls.py

@@ -4,4 +4,5 @@
 
 urlpatterns = [
     path("register/", views.RegisterationView.as_view(), name="register"),
+    path("login/", views.LoginView.as_view(), name="login"),
 ]

backend/apps/authentication/views.py

@@ -4,7 +4,7 @@
 from rest_framework_simplejwt.tokens import RefreshToken
 
 from .models import UserProfile
-from .serializers import RegisterSerializer
+from .serializers import LoginSerializer, RegisterSerializer
 
 
 class RegisterationView(generics.CreateAPIView):
@@ -35,3 +35,30 @@ def create(self, request, *args, **kwargs):
             },
             status=status.HTTP_201_CREATED,
         )
+
+
+class LoginView(generics.CreateAPIView):
+    serializer_class = LoginSerializer
+
+    def create(self, request, *args, **kwags):
+        serializer = self.get_serializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+        user = serializer.validated_data["user"]
+        profile = UserProfile.objects.get(user=user)
+        return Response(
+            {
+                "success": True,
+                "data": {
+                    "tokens": {
+                        "access_token": serializer.validated_data["access_token"],
+                        "refresh_token": serializer.validated_data["refresh_token"],
+                    },
+                    "user": {
+                        "id": str(profile.id),
+                        "username": user.username,
+                        "created_at": user.date_joined,
+                    },
+                },
+            },
+            status=status.HTTP_200_OK,
+        )