Feature/school 920/error 401

main/users/schemes.py

@@ -1,6 +1,7 @@
 from drf_spectacular.utils import extend_schema, OpenApiResponse, OpenApiExample
 
 from users.serializers import RegisterSerializer, RegisterConflictErrorSerializer
+from users.serializers import LoginSerializer, UserProfileSerializer
 
 register_schema = extend_schema(
     summary="Register a new user",
@@ -33,3 +34,42 @@
     },
     tags=["users"],
 )
+
+login_schema = extend_schema(
+    summary="User login",
+    description="Authenticate user and return JWT tokens and user profile",
+    request=LoginSerializer,
+    responses={
+        200: OpenApiResponse(
+            response=UserProfileSerializer,
+            description="Successful authentication",
+            examples=[
+                OpenApiExample(
+                    "Success Response",
+                    value={
+                        "token": {
+                            "access": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9...",
+                            "refresh": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9..."
+                        },
+                        "user": {
+                            "id": 1,
+                            "email": "user@example.com",
+                            "login": "username",
+                            "type": "developer"
+                        }
+                    }
+                )
+            ]
+        ),
+        401: OpenApiResponse(
+            description="Invalid credentials",
+            examples=[
+                OpenApiExample(
+                    "Invalid credentials",
+                    value={"error": {"non_field_errors": ["invalid_credentials"]}}
+                )
+            ]
+        )
+    },
+    tags=["users"],
+)

main/users/serializers.py

@@ -34,3 +34,29 @@ class RegisterConflictErrorSerializer(serializers.Serializer):
     Error = serializers.DictField(
         child=serializers.ListField(child=serializers.CharField())
     )
+
+
+class LoginSerializer(serializers.Serializer):
+    email = serializers.EmailField()
+    password = serializers.CharField(write_only=True, min_length=6)
+
+    def validate(self, attrs):
+        email = attrs.get('email')
+        password = attrs.get('password')
+
+        try:
+            user = User.objects.get(email=email)
+        except User.DoesNotExist:
+            raise serializers.ValidationError("invalid_credentials")
+
+        if not user.check_password(password):
+            raise serializers.ValidationError("invalid_credentials")
+
+        attrs['user'] = user
+        return attrs
+
+
+class UserProfileSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = User
+        fields = ['id', 'email', 'login', 'type']  # required profile fields

main/users/urls.py

@@ -1,5 +1,7 @@
 from django.urls import path
 
-from users.views import RegisterView
+from users.views import RegisterView, LoginView
 
-urlpatterns = [path("auth/register/", RegisterView.as_view(), name="register")]
+urlpatterns = [path("auth/register/", RegisterView.as_view(), name="register"),
+    path("auth/login/", LoginView.as_view(), name="login"),
+]

main/users/views.py

@@ -4,8 +4,8 @@
 from rest_framework.views import APIView
 
 from users.jwt_utils import JWTService
-from users.schemes import register_schema
-from users.serializers import RegisterSerializer
+from users.schemes import register_schema, login_schema
+from users.serializers import RegisterSerializer, LoginSerializer, UserProfileSerializer
 
 
 class RegisterView(APIView):
@@ -31,3 +31,30 @@ def post(self, request):
             },
             status=status.HTTP_201_CREATED,
         )
+
+
+class LoginView(APIView):
+    @login_schema
+    def post(self, request):
+        serializer = LoginSerializer(data=request.data)
+
+        if not serializer.is_valid():
+            return Response(
+                {"Error": serializer.errors},
+                status=status.HTTP_401_UNAUTHORIZED
+            )
+
+        user = serializer.validated_data['user']
+        jwt_service = JWTService()
+        access_token, refresh_token = jwt_service.create_token(user)
+
+        return Response(
+            {
+                "token": {
+                    "access": access_token,
+                    "refresh": refresh_token,
+                },
+                "user": UserProfileSerializer(user).data,
+            },
+            status=status.HTTP_200_OK
+        )