feat(auth): update token authentication

Update user authentication.

Author: AlvaroLucioRibeiro

src/utils/security.py

@@ -2,16 +2,16 @@
 from jose import JWTError, jwt
 from sqlalchemy.orm import Session
 from models.user_model import User
-from fastapi.security import OAuth2PasswordBearer
 from datetime import datetime, timedelta, timezone
 from fastapi import Depends, HTTPException, status
 from schemas.users.CRUD.read import get_user_by_email
+from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
 from modules.config import SECRET_KEY, ALGORITHM, ACCESS_TOKEN_EXPIRE_MINUTES
 
-oauth2_scheme = OAuth2PasswordBearer(tokenUrl="/auth/login")
+security_scheme = HTTPBearer()
 
 
-def create_access_token(data: dict):
+def create_access_token(data: dict) -> str:
     """
     Create a JWT access token.
 
@@ -29,17 +29,19 @@ def create_access_token(data: dict):
 
 
 def get_current_user(
-    db: Session = Depends(get_db), token: str = Depends(oauth2_scheme)
+    db: Session = Depends(get_db),
+    token: HTTPAuthorizationCredentials = Depends(security_scheme),
 ) -> User:
     """
     Decode the JWT token to get the current authenticated user.
 
     Acts as a dependency for protected routes: validates the token,
-    extracts the subject (email), and fetches the user from the DB.
+    extracts the subject (email), and fetches the user from the database.
 
     Args:
         db (Session): Database session dependency.
-        token (str): JWT token passed in the Authorization header.
+        token (HTTPAuthorizationCredentials): JWT token passed in the
+            Authorization header.
 
     Raises:
         HTTPException: Raised if the token is invalid, expired,
@@ -54,7 +56,7 @@ def get_current_user(
         headers={"WWW-Authenticate": "Bearer"},
     )
     try:
-        payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
+        payload = jwt.decode(token.credentials, SECRET_KEY, algorithms=[ALGORITHM])
         email: str = payload.get("sub")
         if email is None:
             raise credentials_exception