mirror of
https://github.com/mealie-recipes/mealie.git
synced 2025-12-11 12:55:15 -05:00
71d3db7aef
* Moves dependencies directly to controllers * Reduces use of @cached_property - (I have a suspicion that this is a factor in memory usage) * reduce duplicate ways to access the same property on a controller.
62 lines
2.1 KiB
Python
62 lines
2.1 KiB
Python
from functools import cached_property
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException
|
|
from pydantic import UUID4
|
|
|
|
from mealie.core import security
|
|
from mealie.routes._base import BaseAdminController, controller
|
|
from mealie.routes._base.mixins import HttpRepo
|
|
from mealie.schema.response.pagination import PaginationQuery
|
|
from mealie.schema.response.responses import ErrorResponse
|
|
from mealie.schema.user.user import UserIn, UserOut, UserPagination
|
|
|
|
router = APIRouter(prefix="/users", tags=["Admin: Users"])
|
|
|
|
|
|
@controller(router)
|
|
class AdminUserManagementRoutes(BaseAdminController):
|
|
@cached_property
|
|
def repo(self):
|
|
if not self.user:
|
|
raise Exception("No user is logged in.")
|
|
|
|
return self.repos.users
|
|
|
|
# =======================================================================
|
|
# CRUD Operations
|
|
|
|
@property
|
|
def mixins(self):
|
|
return HttpRepo[UserIn, UserOut, UserOut](self.repo, self.logger, self.registered_exceptions)
|
|
|
|
@router.get("", response_model=UserPagination)
|
|
def get_all(self, q: PaginationQuery = Depends(PaginationQuery)):
|
|
response = self.repo.page_all(
|
|
pagination=q,
|
|
override=UserOut,
|
|
)
|
|
|
|
response.set_pagination_guides(router.url_path_for("get_all"), q.dict())
|
|
return response
|
|
|
|
@router.post("", response_model=UserOut, status_code=201)
|
|
def create_one(self, data: UserIn):
|
|
data.password = security.hash_password(data.password)
|
|
return self.mixins.create_one(data)
|
|
|
|
@router.get("/{item_id}", response_model=UserOut)
|
|
def get_one(self, item_id: UUID4):
|
|
return self.mixins.get_one(item_id)
|
|
|
|
@router.put("/{item_id}", response_model=UserOut)
|
|
def update_one(self, item_id: UUID4, data: UserOut):
|
|
# Prevent self demotion
|
|
if self.user.id == item_id and self.user.admin != data.admin:
|
|
raise HTTPException(status_code=403, detail=ErrorResponse.respond("you cannot demote yourself"))
|
|
|
|
return self.mixins.update_one(data, item_id)
|
|
|
|
@router.delete("/{item_id}", response_model=UserOut)
|
|
def delete_one(self, item_id: UUID4):
|
|
return self.mixins.delete_one(item_id)
|