8549e98f8d
Connections/Catalog/VK/Sync nav links only shown for regular users or when admin is viewing as a user. Admin/system users land on /admin/users after login. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
101 lines
4.5 KiB
Python
101 lines
4.5 KiB
Python
import logging
|
||
|
||
from fastapi import Depends, FastAPI, Request
|
||
from fastapi.responses import HTMLResponse
|
||
from fastapi.staticfiles import StaticFiles
|
||
from starlette.middleware.sessions import SessionMiddleware
|
||
|
||
try:
|
||
from pythonjsonlogger import jsonlogger
|
||
handler = logging.StreamHandler()
|
||
handler.setFormatter(jsonlogger.JsonFormatter("%(asctime)s %(levelname)s %(name)s %(message)s"))
|
||
logging.root.addHandler(handler)
|
||
except ImportError:
|
||
logging.basicConfig(level=logging.INFO)
|
||
logging.root.setLevel(logging.INFO)
|
||
|
||
from web.config import settings # noqa: E402 — after logging setup
|
||
from web.templates_env import templates # noqa: E402
|
||
|
||
app = FastAPI(title="ЭвоСинк")
|
||
|
||
app.add_middleware(
|
||
SessionMiddleware,
|
||
secret_key=settings.SECRET_KEY,
|
||
max_age=86400 * 30,
|
||
https_only=False,
|
||
)
|
||
|
||
app.mount("/static", StaticFiles(directory="web/static"), name="static")
|
||
|
||
# ── Routers ───────────────────────────────────────────────────────────────────
|
||
from web.routes.auth import router as auth_router # noqa: E402
|
||
from web.routes.reset import router as reset_router # noqa: E402
|
||
from web.routes.invite import router as invite_router # noqa: E402
|
||
from web.routes.profile import router as profile_router # noqa: E402
|
||
from web.routes.evotor_webhooks import router as evotor_webhooks_router # noqa: E402
|
||
from web.routes.admin import router as admin_router # noqa: E402
|
||
from web.routes.catalog import router as catalog_router # noqa: E402
|
||
from web.routes.connections import router as connections_router # noqa: E402
|
||
from web.routes.vk_catalog import router as vk_catalog_router # noqa: E402
|
||
from web.routes.logs import router as logs_router # noqa: E402
|
||
from web.routes.sync import router as sync_router # noqa: E402
|
||
from web.database import get_db # noqa: E402
|
||
from web.models.user import User # noqa: E402
|
||
|
||
app.include_router(auth_router)
|
||
app.include_router(reset_router)
|
||
app.include_router(invite_router)
|
||
app.include_router(profile_router)
|
||
app.include_router(evotor_webhooks_router)
|
||
app.include_router(admin_router)
|
||
app.include_router(catalog_router)
|
||
app.include_router(connections_router)
|
||
app.include_router(vk_catalog_router)
|
||
app.include_router(logs_router)
|
||
app.include_router(sync_router)
|
||
|
||
|
||
# ── Catalog redirect ─────────────────────────────────────────────────────────
|
||
@app.get("/catalog")
|
||
async def catalog_redirect():
|
||
from fastapi.responses import RedirectResponse
|
||
return RedirectResponse("/catalog/stores", 302)
|
||
|
||
|
||
# ── Health ────────────────────────────────────────────────────────────────────
|
||
@app.get("/health")
|
||
async def health():
|
||
return {"status": "ok"}
|
||
|
||
|
||
# ── Root redirect ─────────────────────────────────────────────────────────────
|
||
@app.get("/")
|
||
async def root(request: Request, db=Depends(get_db)):
|
||
from fastapi.responses import RedirectResponse
|
||
from web.models.user import UserRoleEnum
|
||
user_id = request.session.get("user_id")
|
||
if user_id:
|
||
user = db.get(User, user_id)
|
||
if user and user.role in (UserRoleEnum.admin, UserRoleEnum.system):
|
||
return RedirectResponse("/admin/users", 303)
|
||
return RedirectResponse("/profile", 303)
|
||
return RedirectResponse("/login", 303)
|
||
|
||
|
||
# ── 403 handler ───────────────────────────────────────────────────────────────
|
||
from fastapi import HTTPException # noqa: E402
|
||
from fastapi.exception_handlers import http_exception_handler # noqa: E402
|
||
|
||
|
||
@app.exception_handler(403)
|
||
async def forbidden_handler(request: Request, exc: HTTPException) -> HTMLResponse:
|
||
return templates.TemplateResponse(request, "message.html", {
|
||
"user": None,
|
||
"title": "Нет доступа",
|
||
"message": "У вас недостаточно прав для просмотра этой страницы.",
|
||
"link": "/profile",
|
||
"link_text": "В личный кабинет",
|
||
"jivosite_widget_id": settings.JIVOSITE_WIDGET_ID,
|
||
}, status_code=403)
|