Move auth session signing into auth_service.login

backend/app/services/protocols.py

@@ -6,41 +6,42 @@ layers depend on, without binding them to concrete module implementations.
 
 from __future__ import annotations
 
-from collections.abc import Awaitable, Callable
-from typing import Protocol, runtime_checkable
+from typing import TYPE_CHECKING, Protocol, runtime_checkable
 
-import aiosqlite
-import aiohttp
+if TYPE_CHECKING:
+    from collections.abc import Awaitable, Callable
 
-from app.models.auth import Session
-from app.models.ban import BanOrigin, JailBannedIpsResponse, TimeRange
-from app.models.blocklist import (
-    BlocklistSource,
-    ImportLogListResponse,
-    ImportRunResult,
-    ImportSourceResult,
-    PreviewResponse,
-    ScheduleConfig,
-    ScheduleInfo,
-)
-from app.models.config import (
-    AddLogPathRequest,
-    GlobalConfigResponse,
-    GlobalConfigUpdate,
-    JailConfigListResponse,
-    JailConfigResponse,
-    JailConfigUpdate,
-    LogPreviewRequest,
-    LogPreviewResponse,
-    MapColorThresholdsResponse,
-    MapColorThresholdsUpdate,
-    RegexTestResponse,
-    Fail2BanLogResponse,
-    ServiceStatusResponse,
-)
-from app.models.geo import GeoBatchLookup, GeoEnricher, GeoInfo
-from app.models.history import HistoryListResponse, IpDetailResponse
-from app.models.server import ServerSettingsResponse, ServerSettingsUpdate, ServerStatus
+    import aiohttp
+    import aiosqlite
+
+    from app.models.auth import Session
+    from app.models.ban import BanOrigin, JailBannedIpsResponse, TimeRange
+    from app.models.blocklist import (
+        BlocklistSource,
+        ImportLogListResponse,
+        ImportRunResult,
+        ImportSourceResult,
+        PreviewResponse,
+        ScheduleConfig,
+        ScheduleInfo,
+    )
+    from app.models.config import (
+        AddLogPathRequest,
+        GlobalConfigResponse,
+        GlobalConfigUpdate,
+        JailConfigListResponse,
+        JailConfigResponse,
+        JailConfigUpdate,
+        LogPreviewRequest,
+        LogPreviewResponse,
+        MapColorThresholdsResponse,
+        MapColorThresholdsUpdate,
+        RegexTestResponse,
+    )
+    from app.models.geo import GeoBatchLookup, GeoEnricher, GeoInfo
+    from app.models.history import HistoryListResponse, IpDetailResponse
+    from app.models.jail import JailDetailResponse, JailListResponse
+    from app.models.server import ServerSettingsResponse, ServerSettingsUpdate, ServerStatus
 
 
 class AuthService(Protocol):
@@ -51,8 +52,9 @@ class AuthService(Protocol):
         db: aiosqlite.Connection,
         password: str,
         session_duration_minutes: int,
+        session_secret: str,
         session_repo: object | None = None,
-    ) -> Session:
+    ) -> tuple[str, str]:
         ...
 
     async def validate_session(