Files
Wu Clan e1edcade21 Add RBAC authorisation and some tools or optimisations (#41)
* WIP: add rbac authorization

* Perform pre-commit fixes

* add rbac route whitelist

* add init test data user role associations

* Restore database table id naming to fix generic crud base

* Add database section value uniqueness settings

* Update the test directory to tests

* Update route_name file name to health_check

* Split user auth and user action interfaces

* Fix conflict between merge and current branch

* Add pymysql dependencies

* Fix RBAC authentication method

* Add the select serialisation tool

* Fix missing return messages due to global exception handler slicing

* Update the user interface with associated relationships

* Add items to be completed

* Perform pre-commit fixes

* Add pre-made routers

* Paging data return structure optimisation

* Split user auth and user interface tests

* Fix user register test data structure error

* Fix duplicate named test classes
2023-05-17 22:13:37 +08:00

80 lines
3.1 KiB
Python

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
from fastapi import APIRouter
from backend.app.common.jwt import DependsUser, CurrentUser, DependsSuperUser
from backend.app.common.pagination import paging_data, PageDepends
from backend.app.common.response.response_schema import response_base
from backend.app.database.db_mysql import CurrentSession
from backend.app.schemas.user import CreateUser, GetUserInfo, ResetPassword, UpdateUser, Avatar
from backend.app.services.user_service import UserService
from backend.app.utils.serializers import select_to_json
router = APIRouter()
@router.post('/register', summary='用户注册')
async def user_register(obj: CreateUser):
await UserService.register(obj)
return response_base.response_200()
@router.post('/password/reset', summary='密码重置')
async def password_reset(obj: ResetPassword):
await UserService.pwd_reset(obj)
return response_base.response_200()
@router.get('/{username}', summary='查看用户信息', dependencies=[DependsUser])
async def userinfo(username: str):
current_user = await UserService.get_userinfo(username)
data = GetUserInfo(**select_to_json(current_user))
return response_base.response_200(data=data, exclude={'password'})
@router.put('/{username}', summary='更新用户信息')
async def update_userinfo(username: str, obj: UpdateUser, current_user: CurrentUser):
count = await UserService.update(username=username, current_user=current_user, obj=obj)
if count > 0:
return response_base.response_200()
return response_base.fail()
@router.put('/{username}/avatar', summary='更新头像')
async def update_avatar(username: str, avatar: Avatar, current_user: CurrentUser):
count = await UserService.update_avatar(username=username, current_user=current_user, avatar=avatar)
if count > 0:
return response_base.response_200()
return response_base.fail()
@router.get('', summary='获取所有用户', dependencies=[DependsUser, PageDepends])
async def get_all_users(db: CurrentSession):
user_list = await UserService.get_user_list()
page_data = await paging_data(db, user_list, GetUserInfo)
return response_base.response_200(data=page_data)
@router.post('/{pk}/super', summary='修改用户超级权限', dependencies=[DependsSuperUser])
async def super_set(pk: int):
count = await UserService.update_permission(pk)
if count > 0:
return response_base.response_200()
return response_base.fail()
@router.post('/{pk}/action', summary='修改用户状态', dependencies=[DependsSuperUser])
async def active_set(pk: int):
count = await UserService.update_active(pk)
if count > 0:
return response_base.response_200()
return response_base.fail()
@router.delete('/{username}', summary='用户注销', description='用户注销 != 用户退出,注销之后用户将从数据库删除')
async def delete_user(username: str, current_user: CurrentUser):
count = await UserService.delete(username=username, current_user=current_user)
if count > 0:
return response_base.response_200()
return response_base.fail()