from typing import Any, List from fastapi import APIRouter, Depends, HTTPException, status from sqlalchemy.ext.asyncio import AsyncSession from app.core.database import get_db from app.crud import user as crud_user from app.schemas.user import User, UserUpdate from app.api.deps import get_current_active_user, get_current_active_superuser router = APIRouter() @router.get("/users/me", response_model=User) async def read_user_me( current_user: User = Depends(get_current_active_user), ) -> Any: """ Get current user information. """ return current_user @router.put("/users/me", response_model=User) async def update_user_me( user_in: UserUpdate, current_user: User = Depends(get_current_active_user), db: AsyncSession = Depends(get_db), ) -> Any: """ Update own user information. """ user = await crud_user.update(db, db_obj=current_user, obj_in=user_in) return user @router.get("/users", response_model=List[User]) async def read_users( skip: int = 0, limit: int = 100, current_user: User = Depends(get_current_active_superuser), db: AsyncSession = Depends(get_db), ) -> Any: """ Retrieve users. Only available to superusers. """ users = await crud_user.get_users(db, skip=skip, limit=limit) return users @router.get("/users/{user_id}", response_model=User) async def read_user_by_id( user_id: str, current_user: User = Depends(get_current_active_user), db: AsyncSession = Depends(get_db), ) -> Any: """ Get a specific user by id. """ user = await crud_user.get_by_id(db, user_id=user_id) if user == current_user: return user if not current_user.is_superuser: raise HTTPException( status_code=status.HTTP_403_FORBIDDEN, detail="Not enough permissions to access this resource", ) if not user: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="User not found", ) return user @router.put("/users/{user_id}", response_model=User) async def update_user( user_id: str, user_in: UserUpdate, current_user: User = Depends(get_current_active_superuser), db: AsyncSession = Depends(get_db), ) -> Any: """ Update a user. Only available to superusers. """ user = await crud_user.get_by_id(db, user_id=user_id) if not user: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail="User not found", ) user = await crud_user.update(db, db_obj=user, obj_in=user_in) return user