from typing import Any, List from fastapi import APIRouter, Body, Depends, HTTPException, status from fastapi.encoders import jsonable_encoder from sqlalchemy.orm import Session from app.api import deps from app.crud import crud_user from app.models.user import User from app.schemas.user import User as UserSchema from app.schemas.user import UserUpdate router = APIRouter() @router.get("/me", response_model=UserSchema) def read_user_me( current_user: User = Depends(deps.get_current_active_user), ) -> Any: """ Get current user. """ return current_user @router.put("/me", response_model=UserSchema) def update_user_me( *, db: Session = Depends(deps.get_db), password: str = Body(None), first_name: str = Body(None), last_name: str = Body(None), email: str = Body(None), current_user: User = Depends(deps.get_current_active_user), ) -> Any: """ Update current user. """ current_user_data = jsonable_encoder(current_user) user_in = UserUpdate(**current_user_data) if password is not None: user_in.password = password if first_name is not None: user_in.first_name = first_name if last_name is not None: user_in.last_name = last_name if email is not None: # Check if email already exists for another user existing_user = crud_user.user.get_by_email(db, email=email) if existing_user and existing_user.id != current_user.id: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail="Email already registered", ) user_in.email = email user = crud_user.user.update(db, db_obj=current_user, obj_in=user_in) return user @router.get("/{user_id}", response_model=UserSchema) def read_user_by_id( user_id: int, current_user: User = Depends(deps.get_current_active_user), db: Session = Depends(deps.get_db), ) -> Any: """ Get a specific user by id. """ user = crud_user.user.get(db, id=user_id) if user == current_user: return user if not crud_user.user.is_superuser(current_user): raise HTTPException( status_code=status.HTTP_403_FORBIDDEN, detail="Not enough permissions", ) return user @router.get("/", response_model=List[UserSchema]) def read_users( db: Session = Depends(deps.get_db), skip: int = 0, limit: int = 100, current_user: User = Depends(deps.get_current_active_superuser), ) -> Any: """ Retrieve users. Only for superusers. """ users = crud_user.user.get_multi(db, skip=skip, limit=limit) return users