Who Am I? in Python

After logging in, a client holds a token. On every later request it sends the token back in the Authorization header, written as the word Bearer, a space, then the token. The shop looks the token up in the tokens table to find out who is calling.

Many routes will need that answer, so the lookup goes in a helper function that any route can call. Two tools help: request.headers.get takes a second value, the default for a missing header, and a JOIN goes from a row in one table to the row it points to in another. Both on a made-up example:

lang = request.headers.get("Accept-Language", "")   # "" when the header is missing
short = lang.replace("-US", "")                     # "en-US" becomes "en"
row = db.execute("SELECT products.name FROM orders JOIN products ON products.id = orders.product_id WHERE orders.id = ?", (5,)).fetchone()

GET /me answers the logged-in user's id and email. With no token, or a token the shop never gave out, it answers 401. Below, <token> and <token2> stand for the random tokens the logins answered:

POST /register  {"email": "ana@example.com", "password": "secret123"}  →  201  {"email": "ana@example.com", "id": 1}
POST /register  {"email": "ben@example.com", "password": "tea4two"}    →  201  {"email": "ben@example.com", "id": 2}
POST /login  {"email": "ana@example.com", "password": "secret123"}  →  200  {"token": "<token>"}
POST /login  {"email": "ben@example.com", "password": "tea4two"}    →  200  {"token": "<token2>"}
GET /me  Authorization: Bearer <token>   →  200  {"email": "ana@example.com", "id": 1}
GET /me  Authorization: Bearer <token2>  →  200  {"email": "ben@example.com", "id": 2}
GET /me  (no header)  →  401  {"error": "Login required"}
GET /me  Authorization: Bearer 0123456789abcdef0123456789abcdef  →  401  {"error": "Login required"}

Your task: write a helper current_user() that reads the token from the Authorization header and returns its user's id and email, or None. Then add GET /me: answer {"error": "Login required"} with 401 when there is no user, otherwise the user as JSON.

Assignment
Follow the Coding Tutorial to write the current_user() helper and the /me route that uses it.

Hint
The default "" keeps header a text, so .replace works even when the header is missing. An empty or unknown token matches no row, and fetchone() gives None: that is the 401 case.