db.py

import bcrypt


# A simplified, insecure user DB for demonstration. Use a proper DB and hash passwords.
users_db = {
    "user": {
        "id": 1,
        "password": bcrypt.hashpw("password".encode("utf-8"), bcrypt.gensalt()),
        "username": "user",
        "sessions": [],
    }
}


def get_user(username: str):
    return users_db.get(username)


def save_session(username: str, session: str):
    username, session_id = session.split(":")
    user = users_db[username]
    if not user:
        return
    user["sessions"].append(session_id)


def get_session(session: str):
    username, session_id = session.split(":")
    user = get_user(username)
    if not user:
        return None
    if session_id in user["sessions"]:
        return user


def delete_session(session: str):
    if not session:
        return None
    username, session_id = session.split(":")
    user = get_user(username)
    if not user:
        return None
    if session_id in user["sessions"]:
        user["sessions"].remove(session_id)
        return user