from typing import Any from fastapi import APIRouter, Body, Depends, File, HTTPException, UploadFile from fastapi.encoders import jsonable_encoder from pydantic import EmailStr from sqlalchemy.orm import Session from app import crud, models, schemas from app.api import deps from app.core.config import settings from app.utils.file_storage import save_upload_file, validate_image_file router = APIRouter() @router.get("/me", response_model=schemas.User) def read_user_me( db: Session = Depends(deps.get_db), current_user: models.User = Depends(deps.get_current_active_user), ) -> Any: """ Get current user. """ return current_user @router.put("/me", response_model=schemas.User) def update_user_me( *, db: Session = Depends(deps.get_db), password: str = Body(None), full_name: str = Body(None), email: EmailStr = Body(None), current_user: models.User = Depends(deps.get_current_active_user), ) -> Any: """ Update own user. """ current_user_data = jsonable_encoder(current_user) user_in = schemas.UserUpdate(**current_user_data) if password is not None: user_in.password = password if full_name is not None: user_in.full_name = full_name if email is not None: user_in.email = email user = crud.user.update(db, db_obj=current_user, obj_in=user_in) return user @router.post("/me/profile-image", response_model=schemas.User) async def upload_profile_image( *, db: Session = Depends(deps.get_db), file: UploadFile = File(...), current_user: models.User = Depends(deps.get_current_active_user), ) -> Any: """ Upload a profile image for the current user. """ validate_image_file(file) # Save the profile image filename = save_upload_file( file, str(settings.ATTACHMENTS_DIR), file_id=current_user.id, ) # Update the user's profile image field user_in = schemas.UserUpdate(profile_image=filename) user = crud.user.update(db, db_obj=current_user, obj_in=user_in) return user @router.get("/{user_id}", response_model=schemas.User) def read_user_by_id( user_id: str, current_user: models.User = Depends(deps.get_current_active_user), db: Session = Depends(deps.get_db), ) -> Any: """ Get a specific user by id. """ user = crud.user.get(db, id=user_id) if user == current_user: return user if not crud.user.is_superuser(current_user): raise HTTPException( status_code=400, detail="The user doesn't have enough privileges" ) return user