from typing import Any, List from fastapi import APIRouter, Body, Depends, HTTPException, status from fastapi.encoders import jsonable_encoder from sqlalchemy.orm import Session from app.api.deps import get_current_active_user, get_current_admin_user, get_db from app.crud.user import user from app.models.user import User as UserModel from app.schemas.user import User, UserUpdate router = APIRouter() @router.get("/me", response_model=User) def read_user_me( current_user: UserModel = Depends(get_current_active_user), ) -> Any: """ Get current user. """ return current_user @router.put("/me", response_model=User) def update_user_me( *, db: Session = Depends(get_db), user_in: UserUpdate, current_user: UserModel = Depends(get_current_active_user), ) -> Any: """ Update own user. """ return user.update(db, db_obj=current_user, obj_in=user_in) @router.get("/{user_id}", response_model=User) def read_user_by_id( user_id: int, current_user: UserModel = Depends(get_current_active_user), db: Session = Depends(get_db), ) -> Any: """ Get a specific user by id. """ db_user = user.get(db, id=user_id) if not db_user: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="User not found", ) if user_id != current_user.id and not current_user.is_admin: raise HTTPException( status_code=status.HTTP_403_FORBIDDEN, detail="The user doesn't have enough privileges", ) return db_user @router.get("/", response_model=List[User]) def read_users( db: Session = Depends(get_db), skip: int = 0, limit: int = 100, current_user: UserModel = Depends(get_current_admin_user), ) -> Any: """ Retrieve users. Only for admins. """ users = user.get_multi(db, skip=skip, limit=limit) return users @router.put("/{user_id}", response_model=User) def update_user( *, db: Session = Depends(get_db), user_id: int, user_in: UserUpdate, current_user: UserModel = Depends(get_current_admin_user), ) -> Any: """ Update a user. Only for admins. """ db_user = user.get(db, id=user_id) if not db_user: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="User not found", ) return user.update(db, db_obj=db_user, obj_in=user_in)