Separated session management from its FastAPI-dependent parts, creating authsession.py on main level.

Startup/main/scripts cleanup, now runs with passkey-auth command that takes CLI arguments.

passkey/fastapi/mainapp.py

@@ -0,0 +1,68 @@
+import contextlib
+from contextlib import asynccontextmanager
+from pathlib import Path
+
+from fastapi import Cookie, FastAPI, Request, Response
+from fastapi.responses import (
+    FileResponse,
+)
+from fastapi.staticfiles import StaticFiles
+
+from ..authsession import get_session
+from . import ws
+from .api import register_api_routes
+from .reset import register_reset_routes
+
+STATIC_DIR = Path(__file__).parent.parent / "frontend-build"
+
+
+@asynccontextmanager
+async def lifespan(app: FastAPI):
+    from ..db import sql
+
+    await sql.init()
+    yield
+
+
+app = FastAPI(lifespan=lifespan)
+
+# Mount the WebSocket subapp
+app.mount("/auth/ws", ws.app)
+
+# Register API routes
+register_api_routes(app)
+register_reset_routes(app)
+
+
+@app.get("/auth/forward-auth")
+async def forward_authentication(request: Request, auth=Cookie(None)):
+    """A validation endpoint to use with Caddy forward_auth or Nginx auth_request."""
+    with contextlib.suppress(ValueError):
+        s = await get_session(auth)
+        # If authenticated, return a success response
+        if s.info and s.info["type"] == "authenticated":
+            return Response(
+                status_code=204,
+                headers={
+                    "x-auth-user-uuid": str(s.user_uuid),
+                },
+            )
+
+    # Serve the index.html of the authentication app if not authenticated
+    return FileResponse(
+        STATIC_DIR / "index.html",
+        status_code=401,
+        headers={"www-authenticate": "PrivateToken"},
+    )
+
+
+# Serve static files
+app.mount(
+    "/auth/assets", StaticFiles(directory=STATIC_DIR / "assets"), name="static assets"
+)
+
+
+@app.get("/auth/")
+async def redirect_to_index():
+    """Serve the main authentication app."""
+    return FileResponse(STATIC_DIR / "index.html")