add limited db support in regards to the remember me button

routes/sso.py

@@ -1,36 +1,77 @@
-from fastapi import APIRouter, Request, Form, Response
+from fastapi import APIRouter, Request, Form, Response, Depends
 from fastapi.responses import RedirectResponse
-from typing import Optional
+from sqlalchemy.orm import Session as DBSession
+from database import SessionLocal, User, Session
+from config import settings, cipher
 from services import auth
+import uuid
 
 router = APIRouter()
 
+def get_db():
+    db = SessionLocal()
+    try:
+        yield db
+    finally:
+        db.close()
+
 @router.post('/spfn/generate_token')
 async def login(
     request: Request, 
-    username: Optional[str] = Form(None), 
-    password: Optional[str] = Form(None),
-    frontend_origin: Optional[str] = Form(None)
+    username: str = Form(...), 
+    password: str = Form(...),
+    frontend_origin: str = Form(None),
+    rememberMe: bool = Form(False),
+    db: DBSession = Depends(get_db)
 ):
     host = (frontend_origin or request.headers.get("referer") or "/").rstrip('/')
-    sep = "&" if "?" in host else "?"
-
-    if not username or not password:
-        return RedirectResponse(f"{host}/users/auth/splatfestival/{sep}error=auth&username={username or ''}", 303)
-
+    
     try:
-        token = auth.get_token(username, password)
-        if not token:
-            return RedirectResponse(f"{host}/users/auth/splatfestival/{sep}error=auth&username={username}", 303)
+        print("fetching spfn token")
+        data = auth.get_token(username, password)
+        if not data or "token" not in data:
+            print("auth failed")
+            return RedirectResponse(f"{host}/login?error=auth", 303)
 
-        # Logging profile for debugging
-        profile = auth.get_profile(token)
-        if profile:
-            print(f"=== PROFILE ===\n{profile}\n===============")
+        print("encrypting password")
+        enc_pass = cipher.encrypt(password.encode()).decode()
+        
+        print(f"checking user {username}")
+        user = db.query(User).filter(User.username == username).first()
+        if not user:
+            print("creating new user")
+            user = User(
+                username=username, 
+                local_hash=auth.hash_password(password), 
+                spfn_pass_enc=enc_pass
+            )
+            db.add(user)
+        else:
+            print("updating user")
+            user.spfn_pass_enc = enc_pass
+        
+        db.flush() 
+        
+        print("creating session")
+        new_session = Session(username=username, remember_me=rememberMe)
+        db.add(new_session)
+        db.commit()
 
-        redirect_arg = request.query_params.get('redirect')
-        target = redirect_arg if redirect_arg else f"{host}/friend_list/"
-        return RedirectResponse(url=target, status_code=303)
+        print("setting cookie and redirecting")
+        response = RedirectResponse(url=f"{host}/friend_list/", status_code=303)
+        cookie_age = 2592000 if rememberMe else None
+        
+        response.set_cookie(
+            key="session_id",
+            value=new_session.id,
+            httponly=settings.cookie_httponly,
+            secure=True,
+            samesite="lax",
+            max_age=cookie_age
+        )
+        return response
 
     except Exception as e:
-        return Response(content=f"Proxy Error: {str(e)}", status_code=500)
+        print(f"error: {str(e)}")
+        db.rollback()
+        return Response(content=f"internal error: {str(e)}", status_code=500)