20 lines
2.5 KiB
Plaintext
20 lines
2.5 KiB
Plaintext
|
a
|
|||
|
|
X3GjZ ã @ sþ d Z ddlmZ ddlmZ ddlmZmZmZ ddl m
|
|||
|
|
Z
|
|||
|
|
ddl m Z ddl
|
|||
|
|
mZ ddlmZ dd lmZmZmZ dd
|
|||
|
|
lmZ dd lmZ e
|
|||
|
|
d d
|
|||
|
|
�Zeeƒeeƒfee edœdd„Zeeƒfeedœdd„Z G dd„ dƒZ e ej ƒZ e ej ƒZ!e ej"ƒZ#dS )u+ FastAPI dependencies för auth och databas.é )ÚOptional)ÚUUID)ÚDependsÚ
|
|||
|
|
HTTPExceptionÚstatus)ÚOAuth2PasswordBearer)Ú AsyncSession)Úselect)Úget_db)ÚUserÚUserRoleÚ
|
|||
|
|
UserStatus)Ú TokenPayload)Ú decode_tokenz/api/v1/auth/login)ÚtokenUrl)ÚtokenÚdbÚreturnc à s¢ t tjdddid�}t| ƒ}|d u s2| d¡dkr6|‚| d¡}|d u rL|‚| ttƒ tj t
|
|||
|
|
|ƒk¡¡I d H }| ¡ }|d u r„|‚|jt j
|
|||
|
|
kržt tjdd �‚|S )
|
|||
|
|
Nz Could not validate credentialszWWW-AuthenticateÚBearer)Ú status_codeÚdetailÚheadersÚtypeÚaccessÚsubz#User account is inactive or pending©r r )r r ÚHTTP_401_UNAUTHORIZEDr ÚgetÚexecuter r ÚwhereÚidr Úscalar_one_or_noner
|
|||
|
|
ÚACTIVEÚHTTP_403_FORBIDDEN)r r Zcredentials_exceptionÚpayloadÚuser_idÚresultÚuser© r( úI/home/bernt/.openclaw/workspace/landvex-admin-backend/app/dependencies.pyÚget_current_user s* ý
|
|||
|
|
$ þr* ©Ú current_userr c à s | j sttjdd�‚| S )Nz Superuser privilege requiredr )Z is_superuserr r r# )r, r( r( r) Ú get_current_active_superuser0 s þr- c @ s2 e Zd Zedœdd„Zeeƒfeedœdd„ZdS )Ú RoleChecker©Úmin_rolec C s
|
|||
|
|
|| _ d S )Nr/ )Úselfr0 r( r( r) Ú__init__< s zRoleChecker.__init__r+ c à s> ddl m} ||jƒ|| jƒk r:ttjd| jj› d�d�‚|S )Nr )Ú
|
|||
|
|
role_levelzRequires role z
|
|||
|
|
or higherr )Ú app.securityr3 Úroler0 r r r# Úvalue)r1 r, r3 r( r( r) Ú__call__? s þzRoleChecker.__call__N) Ú__name__Ú
|
|||
|
|
__module__Ú __qualname__r r2 r r* r r7 r( r( r( r) r. ; s r. N)$Ú__doc__Útypingr Úuuidr Úfastapir r r Zfastapi.securityr Úsqlalchemy.ext.asyncior Ú
|
|||
|
|
sqlalchemyr Ú app.databaser
|