Update main.py

main.py

@@ -186,16 +186,32 @@ from jwt import ExpiredSignatureError, InvalidTokenError  # Ensure you've import
 
 @app.get("/login", response_class=HTMLResponse)
 async def login(request: Request, db: Session = Depends(get_db)):
-    # Try to retrieve the access token from the cookie
     access_token = request.cookies.get("access_token")
 
     if access_token:
         try:
-            # Remove the 'Bearer ' prefix and verify the token
             user_email = verify_token(access_token.split("Bearer ")[1])
             if user_email:
-                # If token is valid, redirect to /protected
-                return RedirectResponse(url="/protected")
+                # Retrieve the user from the database
+                db_user = db.query(User).filter(User.email == user_email).first()
+                if not db_user:
+                    raise HTTPException(status_code=HTTP_401_UNAUTHORIZED, detail="User not found")
+
+                # Check if user is verified
+                if not db_user.is_verified:
+                    raise HTTPException(status_code=HTTP_401_UNAUTHORIZED, detail="User is not verified")
+
+                # Create a new access token for the user
+                new_access_token = auth_views.create_access_token(
+                    data={"sub": db_user.email},
+                    expires_delta=timedelta(minutes=auth_views.ACCESS_TOKEN_EXPIRE_MINUTES)
+                )
+
+                # Redirect the user to the protected route
+                url = app.url_path_for("get_protected")
+                response = RedirectResponse(url)
+                response.set_cookie(key="access_token", value=f"Bearer {new_access_token}", httponly=True)
+                return response
         except ExpiredSignatureError:
             # Token has expired. You could redirect to the login page or inform the user
             raise HTTPException(status_code=HTTP_401_UNAUTHORIZED, detail="Token expired")
@@ -210,6 +226,7 @@ async def login(request: Request, db: Session = Depends(get_db)):
     # If not authenticated, show the login page
     return templates.TemplateResponse("login.html", {"request": request})
 
+        
 
 @app.post("/login")
 async def login_post(