From 910495b5d8774861f8d7401fdfc1411ed44b1397 Mon Sep 17 00:00:00 2001
From: Taseen18 <taseen.rahman7@gmail.com>
Date: Tue, 26 Mar 2024 18:20:23 +0000
Subject: [PATCH] updates to JWT auth

everytime a JWT is verified it now stores the users details in Users ORM, if user already exists, details are updated
---
 .../authentication.cpython-311.pyc            | Bin 2561 -> 3129 bytes
 backend/to_do_list/authentication.py          |  26 ++++++++++++++----
 2 files changed, 21 insertions(+), 5 deletions(-)

diff --git a/backend/to_do_list/__pycache__/authentication.cpython-311.pyc b/backend/to_do_list/__pycache__/authentication.cpython-311.pyc
index 303dbf72a3a07b7cf47ffecc798226013793fe23..d6dabda2e6c455153291bb88a7e2f3c33661be5b 100644
GIT binary patch
delta 1352
zcmah|U2NM_6u#GX;@D0cH+5QvB%RyBXxa#E6O9(uB7r(8HcGV(BoKnstsUr;w8C}?
znq10wD&nQ=P8u4UmIo+I+oU00wzo~%v`K)JRGw;Cn#2q5nKmTE6ZfWd(Ei}s_w)Jr
z&N-j|j>}gS@rPK92Y7woMVEhJe-bGuu-K*XzW*!za~ke~jKkD9bR8ypd0kki0Jwnn
z)>;k+x$fvZcsRFR6ML+N{lA(K@v)kSEeA6JI4T5oJ&JY7q7!mhC*p+l_!;`5gpO0)
zques@@Kz4Txl$~kV-8mmJ6;%j@s7vUCDLqQ9Y-z%Q2>F%o083S0zmIV=cygjiFJs1
zcyBGt;~ct79RY*Djs{VzwJWfn1!fWg`?<i!x$eN$yHPKlUFqE8e{$uACw~F$;h+xy
zxH7XWJY`DK5xxaysYmN|uq=Eg)F592pVIGw8qD>etF*lmGOF5q#Rq<D$ui7R)vz^P
zvo)VD&zqKATF|P7&sDT-Ge?_5znLUJ?m9>L5mMOZMRcRAEmdsm*dYI=QBz4m)t2m!
zj0JmsPO}YN)fRMh&NPU9Eb+EwppTh-a0p#ub}}!iSkfJ4rr^^b8n#KkPM=+zJ!;I^
zmLJ2R(xO?~s(nO+&sf?g=uqe|jH2&Cqq(-Se>pxwg!t_CTpt=1d3ma;qE_fPmi!8q
zLZKVsD&5b`q8HiW6;Do|I(Xt>o&7P<l=H5fU)}Ge)N|?6>3Zq%Y%^7KQ^n2H_(p2{
zO6B&e&D6A;nqEENDLc*yr-l0T<-<*7udD3cRK_-xu`BQ09%w34t}?ay`k!Ht?LYIz
zW~Q)_DO_W{z9BEW(@XWWSmp>6TYz9AQ!d;COg8?2z?W026Kl`6L?EYeI+pPU@@ve=
zxYs|7FQS(nz!%<=<Wt-U?rY(suqON-?`Z)#mcJ_{8$Dx9Y21~@8}0KC5*cnvBd#>k
zkVeo&)_7|cwgBV;yqn0liQSDoGmZB@Ah>6ynb6#X)`)6<;nkuE6&uzw_^DmbPek_@
z!Oh|;;^ZKGi|w84qi^+vCI?X|lAGF%8Rx-$jKJJQAQC_r8`cnp&pStp8VV5&Pe!wV
z?nK^!S@Z&z&5x2c1p=h&-;uHEqP|oyUN-k(m;9^NR~WET2t8EeUYp24()r2wjp!=H
Nd+p?dr%>9n{sEk^LKXl3

delta 893
zcmdlf(I~>VoR^o20SHP;KcxDzZscQP<YohMnSuE8ET+xUj0TJnB|;z-5Re5{4Pr0g
zo_vr|#HfZfg)4<SlW`5tGA0Iw)j$jZF+f%=TP=GHdyzm1Crp%qA%%DHb!Pc`zGaL+
z)j$jZj0`nwHOy&D!3@d_B|I=u28Jv+TZN%Wl#!uC8cB{1#!lf!HLZye#SDI!I)oYZ
zFrh4jAp#hND8N)PFaWhm)pFplUa*D()$>h^DGaq7bsXi4<qQ?fkqqUGnnHe6tfeJs
zx)xRJPN|8Lf3T!Wa;0S!6_>>4CFZ8y;t4J-NK8sBP7N(iEt))!Ra}Uds}#soNG?iE
zEJ;nN66PwMe23MRQEjpmn;Mg*;A9uJgvl$}WGCNd3uNS+tjlgXxsY9$1r*YgyV=jO
za{w8|)r^zlIdYi=IO8Xu=g{)IE2A*S=ems9B^k2=>=%OLFC^w)2r9TBV|G!d@QO@f
zr*DVL1oa#IVjmcodG+oJh+Ys=yC|T3ML_)m7(E4v=v)-gy&|A{K|pu%J<e3Wc*YM5
zjGQp?u8_<XA;SwsQ5RxjFABw75sJIO6ZZoMJ}`q60U5<oKzAL~aWr*SVmPei$mhz%
ze8fQ1m6iD@E2}Hl<mp_RzB)h^D;YimNrobA5CQTEm|zDoiZy^l0~~%}5@!Y3j-4zr
zoXpD|;RUkumXH%LbRA1eGE(zOGLsWaGV}8wCL4f^Hv|zN+kSD_<mRW8=A_ycnE|<=
o6k6O3B!E6(WPC7rJ-3^S1S7~s?Boo-D-xC;!IEEaC;{6A057P*NB{r;

diff --git a/backend/to_do_list/authentication.py b/backend/to_do_list/authentication.py
index d1f30cd9..a3f4f0bb 100644
--- a/backend/to_do_list/authentication.py
+++ b/backend/to_do_list/authentication.py
@@ -1,4 +1,3 @@
-# authentication.py in your Django app
 from django.contrib.auth.models import User
 from django.conf import settings
 from rest_framework import authentication, exceptions
@@ -15,11 +14,28 @@ def authenticate(self, request):
         try:
             payload = jwt.decode(token, settings.SUPABASE_SECRET_KEY, algorithms=['HS256'], audience='authenticated')
             user_id = payload['sub']
-            user, created = User.objects.get_or_create(username=user_id, defaults={'first_name': 'SupabaseUser'})
+            email = payload.get('email', '')
+            first_name = payload.get('user_metadata', {}).get('first_name', '')
+            last_name = payload.get('user_metadata', {}).get('last_name', '')
+
+            # Check if the user exists and update/create accordingly
+            user, created = User.objects.get_or_create(username=user_id, defaults={
+                'first_name': first_name,
+                'last_name': last_name,
+                'email': email
+            })
+            
+            # If the user was not created (i.e., it already exists), update its details
+            if not created:
+                user.first_name = first_name
+                user.last_name = last_name
+                user.email = email
+                user.save()
+
             if created:
-                print("\nuser created")
+                print("\nNew user authenticated and created")
             else:
-                print("\nuser authenticated")
+                print("User authenticated")
 
             return (user, token)
 
@@ -28,4 +44,4 @@ def authenticate(self, request):
         except jwt.InvalidTokenError:
             raise exceptions.AuthenticationFailed('Invalid token')
         except Exception as e:
-            raise exceptions.AuthenticationFailed('Unexpected error during authentication', e)
+            raise exceptions.AuthenticationFailed(f'Unexpected error during authentication: {e}')