from typing import Any, List from fastapi import APIRouter, Depends, HTTPException, status from sqlalchemy.orm import Session from app.core.database import get_db from app.core.dependencies import ( get_current_active_superuser, get_current_active_user, ) from app.models.user import User from app.schemas.user import User as UserSchema from app.schemas.user import UserCreate, UserUpdate from app.services import user as user_service router = APIRouter() @router.get("/me", response_model=UserSchema) def read_user_me( current_user: User = Depends(get_current_active_user), ) -> Any: """ Get current user """ return current_user @router.put("/me", response_model=UserSchema) def update_user_me( *, db: Session = Depends(get_db), user_in: UserUpdate, current_user: User = Depends(get_current_active_user), ) -> Any: """ Update own user """ user = user_service.update(db, db_obj=current_user, obj_in=user_in) return user # Admin endpoints @router.get("/", response_model=List[UserSchema]) def read_users( db: Session = Depends(get_db), skip: int = 0, limit: int = 100, current_user: User = Depends(get_current_active_superuser), ) -> Any: """ Retrieve users. Only for superusers. """ users = user_service.get_multi(db, skip=skip, limit=limit) return users @router.post("/", response_model=UserSchema) def create_user( *, db: Session = Depends(get_db), user_in: UserCreate, current_user: User = Depends(get_current_active_superuser), ) -> Any: """ Create new user. Only for superusers. """ user = user_service.get_by_email(db, email=user_in.email) if user: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail="A user with this email already exists", ) user = user_service.get_by_username(db, username=user_in.username) if user: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail="A user with this username already exists", ) user = user_service.create(db, obj_in=user_in) return user @router.get("/{user_id}", response_model=UserSchema) def read_user_by_id( user_id: int, current_user: User = Depends(get_current_active_user), db: Session = Depends(get_db), ) -> Any: """ Get a specific user by id """ user = user_service.get_by_id(db, user_id=user_id) if user == current_user: return user if not user_service.is_superuser(current_user): raise HTTPException( status_code=status.HTTP_403_FORBIDDEN, detail="The user doesn't have enough privileges", ) return user @router.put("/{user_id}", response_model=UserSchema) def update_user( *, db: Session = Depends(get_db), user_id: int, user_in: UserUpdate, current_user: User = Depends(get_current_active_superuser), ) -> Any: """ Update a user. Only for superusers. """ user = user_service.get_by_id(db, user_id=user_id) if not user: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="User not found", ) user = user_service.update(db, db_obj=user, obj_in=user_in) return user