Código não recebido do Mercado Livre
", 400 logger.info(f"GET callback - Code received: {code[:20]}...") try: token_data = auth_service.exchange_code_for_token(code) logger.info(f"Token exchange successful. User ID: {token_data.get('user_id')}") auth_service.save_tokens(token_data) logger.info("Tokens saved successfully!") # Return success HTML page return """{str(e)}
", 500 # Handle POST (from frontend) data = request.json logger.info(f"POST callback - Request data: {data}") code = data.get('code') if data else None if not code: logger.error("No code in request") return jsonify({"error": "No code provided"}), 400 logger.info(f"Code received: {code[:20]}...") try: logger.info("Exchanging code for tokens...") token_data = auth_service.exchange_code_for_token(code) logger.info(f"Token exchange successful. User ID: {token_data.get('user_id')}") logger.info("Saving tokens to database...") auth_service.save_tokens(token_data) logger.info("Tokens saved successfully!") return jsonify({"message": "Authentication successful", "success": True}) except Exception as e: logger.error(f"Callback error: {e}", exc_info=True) return jsonify({"error": str(e)}), 500 @api_bp.route('/auth/ml/status', methods=['GET']) def get_auth_status(): """Returns ML connection status""" db = SessionLocal() try: token = db.query(OAuthToken).filter_by(provider="mercadolivre").first() if not token: return jsonify({ "connected": False, "message": "Not connected" }) is_expired = False now_ts = datetime.utcnow() expires_ts = token.expires_at if expires_ts: if expires_ts.tzinfo: expires_ts = expires_ts.replace(tzinfo=None) if expires_ts < now_ts: is_expired = True return jsonify({ "connected": not is_expired, "seller_id": token.seller_id or token.user_id, "expires_at": expires_ts.isoformat() if expires_ts else None, "is_expired": is_expired }) finally: db.close() # ==================== USER LOGIN ==================== @api_bp.route('/auth/login', methods=['POST']) def login(): """User login endpoint""" from app.models.user import User db = SessionLocal() try: data = request.get_json() email = data.get('email', '').strip().lower() password = data.get('password', '') if not email or not password: return jsonify({"success": False, "error": "Email e senha obrigatórios"}), 400 user = db.query(User).filter(User.email == email).first() if not user or not user.verify_password(password): return jsonify({"success": False, "error": "Credenciais inválidas"}), 401 if not user.is_active: return jsonify({"success": False, "error": "Usuário desativado"}), 401 user.last_login = datetime.utcnow() db.commit() token = generate_token(user.id, user.email, user.role) response = jsonify({ "success": True, "data": { "token": token, "user": { "id": user.id, "email": user.email, "name": user.name, "role": user.role } } }) # Configurar Cookie de Autenticação is_production = "localhost" not in request.host response.set_cookie( key="auth_token", value=token, httponly=True, secure=is_production, # Só exige HTTPS se for produção samesite="Lax", max_age=24 * 3600 ) return response except Exception as e: error_msg = str(e) if "OperationalError" in error_msg or "Access denied" in error_msg: logger.critical(f"DATABASE CONNECTION ERROR: {error_msg}") return jsonify({"success": False, "error": "Erro de conexão com o banco de dados. Verifique as credenciais."}), 503 logger.error(f"Login error: {error_msg}") return jsonify({"success": False, "error": error_msg}), 500 finally: db.close() @api_bp.route('/auth/verify', methods=['GET']) def verify_auth(): """Verify if token is valid""" token = None if 'Authorization' in request.headers: auth_header = request.headers['Authorization'] if auth_header.startswith('Bearer '): token = auth_header.split(' ')[1] if not token: return jsonify({"success": False, "valid": False}), 401 payload = verify_token(token) if not payload: return jsonify({"success": False, "valid": False}), 401 return jsonify({ "success": True, "valid": True, "user": { "id": payload.get("user_id"), "email": payload.get("email"), "role": payload.get("role") } }) @api_bp.route('/auth/profile', methods=['PUT']) @require_auth def update_profile(): """Update user profile (name)""" from app.models.user import User db = SessionLocal() try: data = request.get_json() name = data.get('name', '').strip() if not name: return jsonify({"success": False, "error": "Nome não pode estar vazio"}), 400 user = db.query(User).filter(User.id == request.user_id).first() if not user: return jsonify({"success": False, "error": "Usuário não encontrado"}), 404 user.name = name db.commit() return jsonify({ "success": True, "data": { "id": user.id, "email": user.email, "name": user.name, "role": user.role } }) except Exception as e: db.rollback() logger.error(f"Profile update error: {e}") return jsonify({"success": False, "error": str(e)}), 500 finally: db.close() @api_bp.route('/auth/password', methods=['PUT']) @require_auth def change_password(): """Change user password""" from app.models.user import User db = SessionLocal() try: data = request.get_json() current_password = data.get('current_password', '') new_password = data.get('new_password', '') if not current_password or not new_password: return jsonify({"success": False, "error": "Preencha todos os campos"}), 400 if len(new_password) < 6: return jsonify({"success": False, "error": "A nova senha deve ter pelo menos 6 caracteres"}), 400 user = db.query(User).filter(User.id == request.user_id).first() if not user: return jsonify({"success": False, "error": "Usuário não encontrado"}), 404 # Verify current password if not user.verify_password(current_password): return jsonify({"success": False, "error": "Senha atual incorreta"}), 401 # Update password user.password_hash = User.hash_password(new_password) db.commit() return jsonify({"success": True, "message": "Senha alterada com sucesso"}) except Exception as e: db.rollback() logger.error(f"Password change error: {e}") return jsonify({"success": False, "error": str(e)}), 500 finally: db.close()