from typing import Any, List from fastapi import APIRouter, Depends, HTTPException, status from sqlalchemy.orm import Session from app.core.auth import get_current_active_user, get_current_active_superuser from app.crud import user as crud_user from app.db.session import get_db from app.models.user import User as UserModel from app.schemas.user import User, UserCreate, UserUpdate router = APIRouter() @router.get("/me", response_model=User) def read_user_me(current_user: UserModel = Depends(get_current_active_user)) -> Any: """ Get current user. """ return current_user @router.patch("/me", response_model=User) def update_user_me( *, db: Session = Depends(get_db), user_in: UserUpdate, current_user: UserModel = Depends(get_current_active_user) ) -> Any: """ Update current user. """ user = crud_user.update_user(db, db_user=current_user, user_in=user_in) return user @router.get("", response_model=List[User]) def read_users( db: Session = Depends(get_db), skip: int = 0, limit: int = 100, current_user: UserModel = Depends(get_current_active_superuser) ) -> Any: """ Retrieve users. Only for superusers. """ users = crud_user.get_users(db, skip=skip, limit=limit) return users @router.post("", response_model=User, status_code=status.HTTP_201_CREATED) def create_user( *, db: Session = Depends(get_db), user_in: UserCreate, current_user: UserModel = Depends(get_current_active_superuser) ) -> Any: """ Create new user. Only for superusers. """ user = crud_user.get_user_by_email(db, email=user_in.email) if user: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail="A user with this email already exists", ) user = crud_user.create_user(db, user_in=user_in) return user @router.get("/{user_id}", response_model=User) def read_user_by_id( user_id: int, db: Session = Depends(get_db), current_user: UserModel = Depends(get_current_active_user) ) -> Any: """ Get a specific user by id. Regular users can only get their own user. Superusers can get any user. """ user = crud_user.get_user(db, user_id=user_id) if not user: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="User not found", ) if user.id != current_user.id and not current_user.is_superuser: raise HTTPException( status_code=status.HTTP_403_FORBIDDEN, detail="The user doesn't have enough privileges", ) return user @router.patch("/{user_id}", response_model=User) def update_user( *, db: Session = Depends(get_db), user_id: int, user_in: UserUpdate, current_user: UserModel = Depends(get_current_active_superuser) ) -> Any: """ Update a user. Only for superusers. """ user = crud_user.get_user(db, user_id=user_id) if not user: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="User not found", ) user = crud_user.update_user(db, db_user=user, user_in=user_in) return user @router.delete("/{user_id}", response_model=User) def delete_user( *, db: Session = Depends(get_db), user_id: int, current_user: UserModel = Depends(get_current_active_superuser) ) -> Any: """ Delete a user. Only for superusers. """ user = crud_user.get_user(db, user_id=user_id) if not user: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="User not found", ) user = crud_user.delete_user(db, user_id=user_id) return user