from flask import Flask, request, jsonify

import jwt

app = Flask(__name__)

SECRET_KEY = 'supersecretkey'

@app.route('/login', methods=['POST'])

def login():

auth = request.authorization

if auth and auth.username == 'admin' and auth.password == 'password':

token = jwt.encode({'username': auth.username}, SECRET_KEY, algorithm='HS256')

return jsonify({'token': token})

return jsonify({'message': 'Invalid credentials'}), 401

@app.route('/protected', methods=['GET'])

def protected():

token = request.headers.get('Authorization').split(" ")[1]

try:

decoded = jwt.decode(token, SECRET_KEY, algorithms=['HS256'])

return jsonify({'message': f'Hello {decoded["username"]}!'})

except jwt.ExpiredSignatureError:

return jsonify({'message': 'Token expired'}), 401

except jwt.InvalidTokenError:

return jsonify({'message': 'Invalid token'}), 401