FastAPI application with SQLAlchemy ORM, SQL Server connection, and JWT (JSON Web Token) authentication.

• Modern FastAPI framework with automatic API documentation
• User registration and authentication
• JWT access tokens and refresh tokens
• SQL Server database integration
• RESTful API endpoints with OpenAPI/Swagger docs
• Type hints and Pydantic models
• Async support
• CORS middleware
• User profile management
• Token validation and refresh

app/
├── models/
│   └── user.py          # SQLAlchemy User model with token fields
├── routes/
│   └── auth_routes.py   # FastAPI authentication endpoints
├── services/
│   ├── auth_service.py  # Authentication business logic
│   └── jwt_service.py   # JWT token management
├── schemas.py           # Pydantic models for request/response
├── dependencies.py      # FastAPI dependencies for authentication
├── __init__.py          # FastAPI app factory
└── database.py          # Database configuration

1. Install dependencies:

   pip install -r requirements.txt

2. Configure database:

   • Copy .env.example to .env
   • Update DATABASE_URL with your SQL Server connection string
   • Set JWT_SECRET_KEY for token signing

3. Run the application:

   python serve.py

   Or using uvicorn directly:

   uvicorn serve:app --host 0.0.0.0 --port 8000 --reload

4. Access API documentation:

   • Swagger UI: http://localhost:8000/docs
   • ReDoc: http://localhost:8000/redoc

• POST /api/auth/register - Register new user
• POST /api/auth/login - Login and get JWT tokens
• POST /api/auth/refresh - Refresh access token using refresh token
• POST /api/auth/logout - Logout and revoke tokens
• GET /api/auth/profile - Get user profile (requires JWT token)
• PUT /api/auth/profile - Update user profile (requires JWT token)
• GET /api/auth/users - Get all users (requires JWT token)
• POST /api/auth/validate-token - Validate JWT token (fast validation)
• GET /api/auth/token-info - Get information about current JWT token

curl -X POST http://localhost:8000/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{
    "username": "testuser",
    "email": "test@example.com",
    "password": "password123",
    "first_name": "Test",
    "last_name": "User"
  }'

curl -X POST http://localhost:8000/api/auth/login \
  -H "Content-Type: application/json" \
  -d '{
    "username": "testuser",
    "password": "password123"
  }'

curl -X GET http://localhost:8000/api/auth/profile \
  -H "Authorization: Bearer YOUR_JWT_ACCESS_TOKEN"

curl -X POST http://localhost:8000/api/auth/validate-token \
  -H "Content-Type: application/json" \
  -d '{
    "token": "YOUR_JWT_ACCESS_TOKEN"
  }'

curl -X POST http://localhost:8000/api/auth/refresh \
  -H "Content-Type: application/json" \
  -d '{
    "refresh_token": "YOUR_JWT_REFRESH_TOKEN"
  }'

• Access tokens: JWT tokens with 1 hour expiration
• Refresh tokens: JWT tokens with 30 day expiration
• Token Structure: Contains user information (user_id, username, email, etc.)
• Security: HMAC SHA256 algorithm for signing
• Validation: Fast token validation without database lookup available
• Revocation: Tokens can be revoked by removing from database

Access Token contains:

• user_id: User's database ID
• username: User's username
• email: User's email
• first_name: User's first name
• last_name: User's last name
• is_active: User's active status
• type: "access"
• exp: Expiration timestamp
• iat: Issued at timestamp
• nbf: Not before timestamp

Refresh Token contains:

• user_id: User's database ID
• username: User's username
• type: "refresh"
• exp: Expiration timestamp
• iat: Issued at timestamp
• nbf: Not before timestamp

• Python 3.7+
• SQL Server
• ODBC Driver 17 for SQL Server
• FastAPI and Uvicorn for ASGI server
• PyJWT library for JWT token handling
• Pydantic for data validation

• Automatic API Documentation: Swagger UI and ReDoc available at /docs and /redoc
• Type Safety: Full type hints support with Pydantic models
• Performance: High performance, on par with NodeJS and Go
• Modern Python: Uses modern Python features (Python 3.6+ type hints)
• Standards-based: Based on OpenAPI and JSON Schema
• Async Support: Native async/await support
• Dependency Injection: Advanced dependency injection system
• Data Validation: Automatic request/response validation