2026-04-27 23:04:50 +03:00
|
|
|
|
import logging
|
|
|
|
|
|
|
feat: Evotor user lifecycle, RBAC, admin panel
- Receive Evotor webhooks: POST /user/create, /user/verify, /user/token
- Create users in pending status; match to existing users by email/phone
- Send invite link via Celery notification task; user sets password at /invite
- Abstract EmailProvider/SMSProvider with ConsoleEmailProvider default
- Role-based access control: role enum on users + roles/permissions tables
- Admin panel: /admin/users (list, filter, search, paginate), user detail card
with activate/suspend/reset-password/send-invite/edit/delete actions
- Admin roles management: /admin/roles with per-role permission assignment
- Extend user profile card: role, status, Evotor ID, email confirmation badge
- Auth routes: register, login, logout, confirm-email, forgot/reset password
- Alembic migrations 0002 (full schema + new fields) and 0003 (RBAC + seeds)
- Port Pico CSS + Bootstrap Icons UI from Node.js commit (854c912)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-28 12:01:25 +03:00
|
|
|
|
from fastapi import FastAPI, Request
|
|
|
|
|
|
from fastapi.responses import HTMLResponse
|
|
|
|
|
|
from fastapi.staticfiles import StaticFiles
|
|
|
|
|
|
from starlette.middleware.sessions import SessionMiddleware
|
2026-04-27 23:04:50 +03:00
|
|
|
|
|
|
|
|
|
|
try:
|
|
|
|
|
|
from pythonjsonlogger import jsonlogger
|
|
|
|
|
|
handler = logging.StreamHandler()
|
|
|
|
|
|
handler.setFormatter(jsonlogger.JsonFormatter("%(asctime)s %(levelname)s %(name)s %(message)s"))
|
|
|
|
|
|
logging.root.addHandler(handler)
|
|
|
|
|
|
except ImportError:
|
|
|
|
|
|
logging.basicConfig(level=logging.INFO)
|
|
|
|
|
|
logging.root.setLevel(logging.INFO)
|
|
|
|
|
|
|
feat: Evotor user lifecycle, RBAC, admin panel
- Receive Evotor webhooks: POST /user/create, /user/verify, /user/token
- Create users in pending status; match to existing users by email/phone
- Send invite link via Celery notification task; user sets password at /invite
- Abstract EmailProvider/SMSProvider with ConsoleEmailProvider default
- Role-based access control: role enum on users + roles/permissions tables
- Admin panel: /admin/users (list, filter, search, paginate), user detail card
with activate/suspend/reset-password/send-invite/edit/delete actions
- Admin roles management: /admin/roles with per-role permission assignment
- Extend user profile card: role, status, Evotor ID, email confirmation badge
- Auth routes: register, login, logout, confirm-email, forgot/reset password
- Alembic migrations 0002 (full schema + new fields) and 0003 (RBAC + seeds)
- Port Pico CSS + Bootstrap Icons UI from Node.js commit (854c912)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-28 12:01:25 +03:00
|
|
|
|
from web.config import settings # noqa: E402 — after logging setup
|
|
|
|
|
|
from web.templates_env import templates # noqa: E402
|
2026-04-27 23:04:50 +03:00
|
|
|
|
|
feat: Evotor user lifecycle, RBAC, admin panel
- Receive Evotor webhooks: POST /user/create, /user/verify, /user/token
- Create users in pending status; match to existing users by email/phone
- Send invite link via Celery notification task; user sets password at /invite
- Abstract EmailProvider/SMSProvider with ConsoleEmailProvider default
- Role-based access control: role enum on users + roles/permissions tables
- Admin panel: /admin/users (list, filter, search, paginate), user detail card
with activate/suspend/reset-password/send-invite/edit/delete actions
- Admin roles management: /admin/roles with per-role permission assignment
- Extend user profile card: role, status, Evotor ID, email confirmation badge
- Auth routes: register, login, logout, confirm-email, forgot/reset password
- Alembic migrations 0002 (full schema + new fields) and 0003 (RBAC + seeds)
- Port Pico CSS + Bootstrap Icons UI from Node.js commit (854c912)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-28 12:01:25 +03:00
|
|
|
|
app = FastAPI(title="ЭвоСинк")
|
2026-04-27 23:04:50 +03:00
|
|
|
|
|
feat: Evotor user lifecycle, RBAC, admin panel
- Receive Evotor webhooks: POST /user/create, /user/verify, /user/token
- Create users in pending status; match to existing users by email/phone
- Send invite link via Celery notification task; user sets password at /invite
- Abstract EmailProvider/SMSProvider with ConsoleEmailProvider default
- Role-based access control: role enum on users + roles/permissions tables
- Admin panel: /admin/users (list, filter, search, paginate), user detail card
with activate/suspend/reset-password/send-invite/edit/delete actions
- Admin roles management: /admin/roles with per-role permission assignment
- Extend user profile card: role, status, Evotor ID, email confirmation badge
- Auth routes: register, login, logout, confirm-email, forgot/reset password
- Alembic migrations 0002 (full schema + new fields) and 0003 (RBAC + seeds)
- Port Pico CSS + Bootstrap Icons UI from Node.js commit (854c912)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-28 12:01:25 +03:00
|
|
|
|
app.add_middleware(
|
|
|
|
|
|
SessionMiddleware,
|
|
|
|
|
|
secret_key=settings.SECRET_KEY,
|
|
|
|
|
|
max_age=86400 * 30,
|
|
|
|
|
|
https_only=False,
|
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
|
|
app.mount("/static", StaticFiles(directory="web/static"), name="static")
|
|
|
|
|
|
|
|
|
|
|
|
# ── Routers ───────────────────────────────────────────────────────────────────
|
|
|
|
|
|
from web.routes.auth import router as auth_router # noqa: E402
|
|
|
|
|
|
from web.routes.reset import router as reset_router # noqa: E402
|
|
|
|
|
|
from web.routes.invite import router as invite_router # noqa: E402
|
|
|
|
|
|
from web.routes.profile import router as profile_router # noqa: E402
|
|
|
|
|
|
from web.routes.evotor_webhooks import router as evotor_webhooks_router # noqa: E402
|
|
|
|
|
|
from web.routes.admin import router as admin_router # noqa: E402
|
|
|
|
|
|
|
|
|
|
|
|
app.include_router(auth_router)
|
|
|
|
|
|
app.include_router(reset_router)
|
|
|
|
|
|
app.include_router(invite_router)
|
|
|
|
|
|
app.include_router(profile_router)
|
|
|
|
|
|
app.include_router(evotor_webhooks_router)
|
|
|
|
|
|
app.include_router(admin_router)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# ── Health ────────────────────────────────────────────────────────────────────
|
2026-04-27 23:04:50 +03:00
|
|
|
|
@app.get("/health")
|
|
|
|
|
|
async def health():
|
|
|
|
|
|
return {"status": "ok"}
|
feat: Evotor user lifecycle, RBAC, admin panel
- Receive Evotor webhooks: POST /user/create, /user/verify, /user/token
- Create users in pending status; match to existing users by email/phone
- Send invite link via Celery notification task; user sets password at /invite
- Abstract EmailProvider/SMSProvider with ConsoleEmailProvider default
- Role-based access control: role enum on users + roles/permissions tables
- Admin panel: /admin/users (list, filter, search, paginate), user detail card
with activate/suspend/reset-password/send-invite/edit/delete actions
- Admin roles management: /admin/roles with per-role permission assignment
- Extend user profile card: role, status, Evotor ID, email confirmation badge
- Auth routes: register, login, logout, confirm-email, forgot/reset password
- Alembic migrations 0002 (full schema + new fields) and 0003 (RBAC + seeds)
- Port Pico CSS + Bootstrap Icons UI from Node.js commit (854c912)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-28 12:01:25 +03:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# ── Root redirect ─────────────────────────────────────────────────────────────
|
|
|
|
|
|
@app.get("/")
|
|
|
|
|
|
async def root(request: Request):
|
|
|
|
|
|
from fastapi.responses import RedirectResponse
|
|
|
|
|
|
user_id = request.session.get("user_id")
|
|
|
|
|
|
if user_id:
|
|
|
|
|
|
return RedirectResponse("/profile", 303)
|
|
|
|
|
|
return RedirectResponse("/login", 303)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# ── 403 handler ───────────────────────────────────────────────────────────────
|
|
|
|
|
|
from fastapi import HTTPException # noqa: E402
|
|
|
|
|
|
from fastapi.exception_handlers import http_exception_handler # noqa: E402
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@app.exception_handler(403)
|
|
|
|
|
|
async def forbidden_handler(request: Request, exc: HTTPException) -> HTMLResponse:
|
test: add test suite with 65 tests, 73% coverage
- Unit tests: password hashing, notification providers, webhook field parsing
- Integration tests: auth routes (register/login/confirm-email/logout),
invite flow, Evotor webhooks (/user/create, /user/verify, /user/token),
admin panel (access control, activate/suspend/delete/reset-password)
- conftest: SQLite in-memory engine, transactional sessions, factory-boy
factories (UserFactory with UserRoleEnum variants)
- Fix bcrypt: replace passlib (broken on Python 3.14 + bcrypt 5.x) with
direct bcrypt calls; drop passlib from requirements.txt
- Fix datetime.utcnow() deprecation across routes and tests
- Fix Jinja2 TemplateResponse signature (request as first positional arg)
- Add coverage config to pyproject.toml
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-28 12:27:42 +03:00
|
|
|
|
return templates.TemplateResponse(request, "message.html", {
|
feat: Evotor user lifecycle, RBAC, admin panel
- Receive Evotor webhooks: POST /user/create, /user/verify, /user/token
- Create users in pending status; match to existing users by email/phone
- Send invite link via Celery notification task; user sets password at /invite
- Abstract EmailProvider/SMSProvider with ConsoleEmailProvider default
- Role-based access control: role enum on users + roles/permissions tables
- Admin panel: /admin/users (list, filter, search, paginate), user detail card
with activate/suspend/reset-password/send-invite/edit/delete actions
- Admin roles management: /admin/roles with per-role permission assignment
- Extend user profile card: role, status, Evotor ID, email confirmation badge
- Auth routes: register, login, logout, confirm-email, forgot/reset password
- Alembic migrations 0002 (full schema + new fields) and 0003 (RBAC + seeds)
- Port Pico CSS + Bootstrap Icons UI from Node.js commit (854c912)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-28 12:01:25 +03:00
|
|
|
|
"user": None,
|
|
|
|
|
|
"title": "Нет доступа",
|
|
|
|
|
|
"message": "У вас недостаточно прав для просмотра этой страницы.",
|
|
|
|
|
|
"link": "/profile",
|
|
|
|
|
|
"link_text": "В личный кабинет",
|
|
|
|
|
|
"jivosite_widget_id": settings.JIVOSITE_WIDGET_ID,
|
|
|
|
|
|
}, status_code=403)
|