Update app.py

app.py

@@ -111,14 +111,32 @@ async def login(form_data: OAuth2PasswordRequestForm = Depends(), db: Session =
         raise HTTPException(status_code=400, detail="Invalid email or password")
         
     user = authenticate_user(db, form_data.username, form_data.password)
-    if not user:
+    if user and user.is_verified:  # Check if user is verified
+        access_token = create_access_token(
+            data={"sub": user.email},
+            expires_delta=timedelta(minutes=auth_views.ACCESS_TOKEN_EXPIRE_MINUTES)
+        )
+
+        # Redirect the user to the protected route with the token in the URL
+        url = app.url_path_for("get_protected")  # Ensure you have a name="get_protected" in your app.get("/protected") decorator
+        #return RedirectResponse(url=f"/protected?token={access_token}", status_code=status.HTTP_303_SEE_OTHER)
+        #return RedirectResponse(f"{url}?token={access_token}")
+
+        response = RedirectResponse(f"{url}?token={access_token}", status_code=status.HTTP_303_SEE_OTHER)
+        response.set_cookie(key="access_token", value=f"Bearer {access_token}", httponly=True)
+       # response.set_cookie(key="access_token", value=access_token, httponly=True)
+        return response
+    elif user and not user.is_verified:  # User is not verified
         raise HTTPException(
-            status_code=status.HTTP_401_UNAUTHORIZED,
-            detail="Incorrect email or password",
-            headers={"WWW-Authenticate": "Bearer"},
+            status_code=400,
+            detail="You must verify your email before accessing this resource."
+        )
+    else:
+        # If authentication fails, return to the login page with an error message
+        return templates.TemplateResponse(
+            "login.html", 
+            {"request": request, "error_message": "Invalid email or password"}
         )
-    access_token = create_access_token(data={"sub": user.email})
-    return JSONResponse(content={"access_token": access_token, "token_type": "bearer"})
     
 @app.get("/login", response_class=HTMLResponse)
 async def login(request: Request, db: Session = Depends(get_db)):