create project

app/src/routers/routers.py

@@ -0,0 +1,158 @@
+from fastapi import (
+    APIRouter,
+    Depends,
+    status,
+    HTTPException
+)
+from fastapi.responses import JSONResponse
+from fastapi.encoders import jsonable_encoder
+from fastapi.security import OAuth2PasswordRequestForm
+from fastapi import File, UploadFile, FastAPI
+from ..models.models import (
+    UserModel,
+    ShowUserModel,
+    UpdateUserModel
+)
+from ..dependecies import (
+    get_current_user,
+    authenticate_user,
+    create_access_token,
+    get_password_hash
+)
+from ..settings import db, ACCESS_TOKEN_EXPIRE_MINUTES
+
+from typing import List
+from datetime import datetime, timedelta
+
+import re
+from pydantic import BaseModel, Field
+class LoginRequest(BaseModel):
+    username: str
+    password: str
+router = APIRouter()
+# ============= Creating path operations ==============
+@router.post("/create_user", response_description="Add new user", response_model=UserModel)
+async def create_user(user: UserModel, file: UploadFile = File(...)):
+    if re.match("admin|dev|simple mortal", user.role):
+        datetime_now = datetime.now()
+        user.created_at = datetime_now.strftime("%m/%d/%y %H:%M:%S")
+        user.password = get_password_hash(user.password)
+        user = jsonable_encoder(user)
+        file_location = f"../media/"
+        current_time = datetime_now.strftime("%H:%M:%S_%d-%m-%Y_")
+        file_save = file_location + current_time + file.filename
+        user.avatar = current_time + file.filename
+        with open(file_save, "wb+") as file_object:
+                    file_object.write(file.file.read())
+        new_user = await db["users"].insert_one(user)
+        await db["users"].update_one({"_id": new_user.inserted_id}, {
+                                     "$rename": {"password": "hashed_pass"}})
+
+        created_user = await db["users"].find_one({"_id": new_user.inserted_id})
+        return JSONResponse(status_code=status.HTTP_201_CREATED, content=created_user)
+
+    raise HTTPException(status_code=406, detail="User role not acceptable")
+
+
+
+@router.post("/login")
+async def login_for_access_token(body: LoginRequest):
+    print(body)
+    user = await authenticate_user(body.username, body.password)
+    print(body)
+    if not user:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="Incorect ID or password",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+    access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
+    access_token = create_access_token(
+        data={"sub": user["username"]}, expires_delta=access_token_expires
+    )
+    await db["users"].update_one({"username": body.username}, {"$set": {
+        "last_login": datetime.now().strftime("%m/%d/%y %H:%M:%S"),
+        "is_active": "true"
+    }})
+
+    return {"access_token": access_token, "token_type": "bearer"}
+
+@router.post("/token")
+async def login_for_access_token_2(body: LoginRequest):
+    print(body)
+    user = await authenticate_user(body.username, body.password)
+    print(body)
+    if not user:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="Incorect ID or password",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+    access_token_expires = timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
+    access_token = create_access_token(
+        data={"sub": user["username"]}, expires_delta=access_token_expires
+    )
+    await db["users"].update_one({"username": body.username}, {"$set": {
+        "last_login": datetime.now().strftime("%m/%d/%y %H:%M:%S"),
+        "is_active": "true"
+    }})
+
+    return {"access_token": access_token, "token_type": "bearer"}
+
+@router.get(
+    "/list", response_description="List all users", response_model=List[ShowUserModel]
+)
+async def list_users(current_user: ShowUserModel = Depends(get_current_user)):
+    users = await db["users"].find().to_list(1000)
+    for user in users:
+        user["is_active"] = "false"
+        try:
+            last_login = datetime.strptime(user["last_login"], "%m/%d/%y %H:%M:%S")
+            my_delta = datetime.now() - last_login
+            if my_delta <= timedelta(days=30):
+                user["is_active"] = "true"
+        except ValueError:
+            pass
+
+    return users
+
+
+
+@router.get("/current", response_description="Current User", response_model=ShowUserModel)
+async def current_user(current_user: ShowUserModel = Depends(get_current_user)):
+    return current_user
+
+
+
+
+@router.put("/admin/{user_id}", response_description="Update a user", response_model=UpdateUserModel)
+async def update_user(user_id: str, user: UpdateUserModel, current_user: UserModel = Depends(get_current_user)):
+    if current_user["role"] == "admin":
+        user = {k: v for k, v in user.dict().items() if v is not None}
+
+
+        if len(user) >= 1:
+            update_result = await db["users"].update_one({"_id": user_id}, {"$set": user})
+
+            if update_result.modified_count == 1:
+                if (
+                    updated_user := await db["users"].find_one({"_id": user_id})
+                ) is not None:
+                    return updated_user
+
+        if (existing_user := await db["users"].find_one({"_id": user_id})) is not None:
+            return existing_user
+
+        raise HTTPException(status_code=404, detail=f"User {user_id} not found")
+    else:
+        raise HTTPException(status_code=403, detail=f"Not having sufficient rights to modify the content")
+
+
+
+@router.delete("/delete_user/{user_id}", response_description="Delete a user")
+async def delete_user(user_id: str, current_user: ShowUserModel = Depends(get_current_user)):
+    delete_result = await db["users"].delete_one({"_id": user_id})
+    if delete_result.deleted_count == 1:
+        return JSONResponse(status_code=status.HTTP_204_NO_CONTENT)
+
+    raise HTTPException(status_code=404, detail=f"User {user_id} not found")