mirror of
https://github.com/mealie-recipes/mealie.git
synced 2025-08-02 03:55:22 +02:00
ea7c4771ee
* add default assets for user profile * add recipe avatar * change user_id to UUID * add profile image upload * setup image cache keys * cleanup tests and add image tests * purge user data on delete * new user repository tests * add user_id validator for int -> UUID conversion * delete depreciated route * force set content type * refactor tests to use temp directory * validate parent exists before createing * set user_id to correct type * update instruction id * reset primary key on migration
61 lines
1.9 KiB
Python
61 lines
1.9 KiB
Python
from datetime import timedelta
|
|
|
|
from fastapi import HTTPException, status
|
|
from fastapi.param_functions import Depends
|
|
from sqlalchemy.orm.session import Session
|
|
|
|
from mealie.core.dependencies import get_current_user
|
|
from mealie.core.security import create_access_token
|
|
from mealie.db.database import get_database
|
|
from mealie.db.db_setup import generate_session
|
|
from mealie.routes.routers import UserAPIRouter
|
|
from mealie.schema.user import CreateToken, LoingLiveTokenIn, LongLiveTokenInDB, PrivateUser
|
|
|
|
router = UserAPIRouter()
|
|
|
|
|
|
@router.post("/api-tokens", status_code=status.HTTP_201_CREATED)
|
|
async def create_api_token(
|
|
token_name: LoingLiveTokenIn,
|
|
current_user: PrivateUser = Depends(get_current_user),
|
|
session: Session = Depends(generate_session),
|
|
):
|
|
"""Create api_token in the Database"""
|
|
|
|
token_data = {"long_token": True, "id": str(current_user.id)}
|
|
|
|
five_years = timedelta(1825)
|
|
token = create_access_token(token_data, five_years)
|
|
|
|
token_model = CreateToken(
|
|
name=token_name.name,
|
|
token=token,
|
|
user_id=current_user.id,
|
|
)
|
|
|
|
db = get_database(session)
|
|
|
|
new_token_in_db = db.api_tokens.create(token_model)
|
|
|
|
if new_token_in_db:
|
|
return {"token": token}
|
|
|
|
|
|
@router.delete("/api-tokens/{token_id}")
|
|
async def delete_api_token(
|
|
token_id: int,
|
|
current_user: PrivateUser = Depends(get_current_user),
|
|
session: Session = Depends(generate_session),
|
|
):
|
|
"""Delete api_token from the Database"""
|
|
db = get_database(session)
|
|
token: LongLiveTokenInDB = db.api_tokens.get(token_id)
|
|
|
|
if not token:
|
|
raise HTTPException(status.HTTP_404_NOT_FOUND, f"Could not locate token with id '{token_id}' in database")
|
|
|
|
if token.user.email == current_user.email:
|
|
deleted_token = db.api_tokens.delete(token_id)
|
|
return {"token_delete": deleted_token.name}
|
|
else:
|
|
raise HTTPException(status.HTTP_403_FORBIDDEN)
|