update profile

app/auth.py

@@ -9,6 +9,8 @@ from app.models import User
 import os
 import logging
 from dotenv import load_dotenv
+from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
+from jose import JWTError
 
 router = APIRouter()
 logger = logging.getLogger(__name__)
@@ -22,6 +24,29 @@ ALGORITHM = "HS256"
 # Password hashing config
 pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
 
+security = HTTPBearer()
+
+async def get_current_user(token: HTTPAuthorizationCredentials = Depends(security),
+                           db: AsyncSession = Depends(get_db)):
+    credentials_exception = HTTPException(
+        status_code=401,
+        detail="Could not validate credentials",
+        headers={"WWW-Authenticate": "Bearer"},
+    )
+    try:
+        payload = jwt.decode(token.credentials, SECRET_KEY, algorithms=[ALGORITHM])
+        user_id: int = payload.get("user_id")
+        if user_id is None:
+            raise credentials_exception
+    except JWTError:
+        raise credentials_exception
+
+    result = await db.execute(select(User).where(User.id == user_id))
+    user = result.scalar_one_or_none()
+    if user is None:
+        raise credentials_exception
+    return user
+
 
 # Request Schemas
 class SignUp(BaseModel):
@@ -38,6 +63,43 @@ class Login(BaseModel):
     password: str
 
 
+class UpdateProfile(BaseModel):
+    mobile: str | None = None
+    name: str | None = None
+    dob: str | None = None
+    preparing_for: str | None = None
+
+
+@router.put("/auth/profile")
+async def update_profile(data: UpdateProfile,
+                         current_user: User = Depends(get_current_user),
+                         db: AsyncSession = Depends(get_db)):
+    # Update user fields if provided
+    if data.mobile is not None:
+        current_user.mobile = data.mobile
+    if data.name is not None:
+        current_user.name = data.name
+    if data.dob is not None:
+        current_user.dob = data.dob
+    if data.preparing_for is not None:
+        current_user.preparing_for = data.preparing_for
+
+    try:
+        await db.commit()
+        await db.refresh(current_user)
+        return {"message": "Profile updated successfully",
+                "user": {"id": current_user.id,
+                         "email": current_user.email,
+                         "mobile": current_user.mobile,
+                         "name": current_user.name,
+                         "dob": current_user.dob,
+                         "preparing_for": current_user.preparing_for}}
+    except Exception as e:
+        await db.rollback()
+        logger.error(f"Profile update error: {e}")
+        raise HTTPException(status_code=500, detail="Internal Server Error")
+
+
 @router.post("/auth/signup")
 async def signup(data: SignUp, db: AsyncSession = Depends(get_db)):
     # Check if user already exists