Update auth.py

auth.py

@@ -127,7 +127,29 @@ def get_current_user(token: str = Depends(verify_token)):
     return token
 
 
+from typing import Optional
 
 
 
+async def protected_route(request: Request, token: Optional[str] = None, db: Session = Depends(get_db)):
+    # Try to get the token from the query parameter first, then fall back to the cookie
+    token = token or request.cookies.get("access_token")
+    if not token:
+        raise HTTPException(status_code=401, detail="Not authenticated")
+
+    try:
+        payload = decode(token, auth_views.SECRET_KEY, algorithms=[auth_views.ALGORITHM])
+        user_email = payload.get("sub")
+        if user_email is None:
+            raise HTTPException(status_code=401, detail="Not authenticated")
+    except PyJWTError:
+        raise HTTPException(status_code=401, detail="Could not validate credentials")
+
+    db_user = get_user_by_email(db, user_email)
+    if db_user is None or not db_user.is_verified:
+        raise HTTPException(status_code=401, detail="User not found or not verified in the database")
+
+    return templates.TemplateResponse("protected.html", {"request": request, "user": db_user})
+
+