from typing import Any, List from fastapi import APIRouter, Body, Depends, HTTPException, status from fastapi.encoders import jsonable_encoder from pydantic import EmailStr from sqlalchemy.orm import Session from app import crud, models, schemas from app.api import deps from app.db.session import get_db router = APIRouter() @router.get("/", response_model=List[schemas.User]) def read_users( db: Session = Depends(get_db), skip: int = 0, limit: int = 100, current_user: models.User = Depends(deps.get_current_active_superuser), ) -> Any: """ Retrieve users. Only for superusers. """ users = crud.user.get_multi(db, skip=skip, limit=limit) return users @router.post("/", response_model=schemas.User, status_code=status.HTTP_201_CREATED) def create_user( *, db: Session = Depends(get_db), user_in: schemas.UserCreate, current_user: models.User = Depends(deps.get_current_active_superuser), ) -> Any: """ Create new user. Only for superusers. """ user = crud.user.get_by_email(db, email=user_in.email) if user: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail="A user with this email already exists in the system.", ) user = crud.user.create(db, obj_in=user_in) return user @router.get("/me", response_model=schemas.User) def read_user_me( current_user: models.User = Depends(deps.get_current_user), ) -> Any: """ Get current user. """ return current_user @router.put("/me", response_model=schemas.User) def update_user_me( *, db: Session = Depends(get_db), full_name: str = Body(None), email: EmailStr = Body(None), password: str = Body(None), current_user: models.User = Depends(deps.get_current_user), ) -> Any: """ Update own user. """ current_user_data = jsonable_encoder(current_user) user_in = schemas.UserUpdate(**current_user_data) if full_name is not None: user_in.full_name = full_name if email is not None: if email != current_user.email: # Check if email is already taken existing_user = crud.user.get_by_email(db, email=email) if existing_user: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail="Email already registered", ) user_in.email = email if password is not None: user_in.password = password user = crud.user.update(db, db_obj=current_user, obj_in=user_in) return user @router.get("/{user_id}", response_model=schemas.User) def read_user_by_id( user_id: str, current_user: models.User = Depends(deps.get_current_active_superuser), db: Session = Depends(get_db), ) -> Any: """ Get a specific user by id. Only for superusers. """ user = crud.user.get(db, user_id=user_id) if not user: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="User not found", ) return user @router.put("/{user_id}", response_model=schemas.User) def update_user( *, db: Session = Depends(get_db), user_id: str, user_in: schemas.UserUpdate, current_user: models.User = Depends(deps.get_current_active_superuser), ) -> Any: """ Update a user. Only for superusers. """ user = crud.user.get(db, user_id=user_id) if not user: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="User not found", ) user = crud.user.update(db, db_obj=user, obj_in=user_in) return user