20 lines
2.4 KiB
Plaintext
20 lines
2.4 KiB
Plaintext
|
a
|
|||
|
|
^1GjZ ã @ sþ d Z ddlmZ ddlmZ ddlmZmZmZ ddl m
|
|||
|
|
Z
|
|||
|
|
ddl m Z ddl
|
|||
|
|
mZ ddlmZ dd lmZmZmZ dd
|
|||
|
|
lmZ dd lmZ e
|
|||
|
|
d d
|
|||
|
|
�Zeeƒeeƒfee edœdd„Zeeƒfeedœdd„Z G dd„ dƒZ e ej ƒZ e ej ƒZ!e ej"ƒZ#dS )u+ FastAPI dependencies för auth och databas.é )ÚOptional)ÚUUID)ÚDependsÚ
|
|||
|
|
HTTPExceptionÚstatus)ÚOAuth2PasswordBearer)Ú AsyncSession)Úselect)Úget_db)ÚUserÚUserRoleÚ
|
|||
|
|
UserStatus)Ú TokenPayload)Ú decode_tokenz/api/v1/auth/login)ZtokenUrl)ÚtokenÚdbÚreturnc à s¢ t tjdddid�}t| ƒ}|d u s2| d¡dkr6|‚| d¡}|d u rL|‚| ttƒ tj t
|
|||
|
|
|ƒk¡¡I d H }| ¡ }|d u r„|‚|jt j
|
|||
|
|
kržt tjdd �‚|S )
|
|||
|
|
Nz Could not validate credentialszWWW-AuthenticateZBearer)Ú status_codeÚdetailZheadersÚtypeÚaccessÚsubz#User account is inactive or pending©r r )r r ZHTTP_401_UNAUTHORIZEDr ÚgetZexecuter r ÚwhereÚidr Zscalar_one_or_noner
|
|||
|
|
ZACTIVEÚHTTP_403_FORBIDDEN)r r Zcredentials_exceptionZpayloadZuser_idÚresultÚuser© r úapp/dependencies.pyÚget_current_user s* ý
|
|||
|
|
$ þr! ©Ú current_userr c à s | j sttjdd�‚| S )Nz Superuser privilege requiredr )Z is_superuserr r r )r# r r r Ú get_current_active_superuser0 s þr$ c @ s2 e Zd Zedœdd„Zeeƒfeedœdd„ZdS )Ú RoleChecker©Úmin_rolec C s
|
|||
|
|
|| _ d S )Nr& )Úselfr' r r r Ú__init__< s zRoleChecker.__init__r" c à s> ddl m} ||jƒ|| jƒk r:ttjd| jj› d�d�‚|S )Nr )Ú
|
|||
|
|
role_levelzRequires role z
|
|||
|
|
or higherr )Ú app.securityr* Zroler' r r r Úvalue)r( r# r* r r r Ú__call__? s þzRoleChecker.__call__N) Ú__name__Ú
|
|||
|
|
__module__Ú __qualname__r r) r r! r r- r r r r r% ; s r% N)$Ú__doc__Útypingr Zuuidr Zfastapir r r Zfastapi.securityr Zsqlalchemy.ext.asyncior Z
|
|||
|
|
sqlalchemyr Z app.databaser
|