58 lines
2.0 KiB
Python
58 lines
2.0 KiB
Python
"""认证路由"""
|
|
|
|
from datetime import datetime
|
|
from fastapi import APIRouter, Depends, HTTPException
|
|
from sqlalchemy.orm import Session
|
|
|
|
from ..database import get_db
|
|
from ..models import User, AuditLog
|
|
from ..security import verify_password, create_access_token
|
|
from ..permissions import get_role_permissions, ROLE_LABELS
|
|
from ..schemas import LoginRequest, TokenResponse
|
|
from ..deps import get_current_user
|
|
|
|
router = APIRouter(prefix="/api/auth", tags=["认证"])
|
|
|
|
|
|
@router.post("/login", response_model=TokenResponse)
|
|
def login(req: LoginRequest, db: Session = Depends(get_db)):
|
|
user = db.query(User).filter(User.username == req.username).first()
|
|
if not user or not verify_password(req.password, user.password_hash):
|
|
raise HTTPException(status_code=401, detail="用户名或密码错误")
|
|
if not user.is_active:
|
|
raise HTTPException(status_code=403, detail="账号已禁用，请联系管理员")
|
|
|
|
token = create_access_token({"sub": str(user.id), "role": user.role})
|
|
perms = get_role_permissions(user.role)
|
|
|
|
# 审计
|
|
db.add(AuditLog(user_id=user.id, username=user.username, action="login", target="auth"))
|
|
db.commit()
|
|
|
|
return TokenResponse(
|
|
access_token=token,
|
|
role=user.role,
|
|
username=user.username,
|
|
permissions=perms,
|
|
)
|
|
|
|
|
|
@router.get("/me")
|
|
def me(current_user: User = Depends(get_current_user)):
|
|
return {
|
|
"id": current_user.id,
|
|
"username": current_user.username,
|
|
"role": current_user.role,
|
|
"role_label": ROLE_LABELS.get(current_user.role, current_user.role),
|
|
"is_active": current_user.is_active,
|
|
"remark": current_user.remark,
|
|
"permissions": get_role_permissions(current_user.role),
|
|
}
|
|
|
|
|
|
@router.post("/logout")
|
|
def logout(current_user: User = Depends(get_current_user), db: Session = Depends(get_db)):
|
|
db.add(AuditLog(user_id=current_user.id, username=current_user.username, action="logout", target="auth"))
|
|
db.commit()
|
|
return {"message": "已登出"}
|