169 lines
4.2 KiB
Python
169 lines
4.2 KiB
Python
"""Shared web-layer request models and auth helpers."""
|
|
|
|
from contextvars import ContextVar
|
|
|
|
from fastapi import Cookie, HTTPException, Request
|
|
from fastapi.responses import RedirectResponse
|
|
from pydantic import BaseModel
|
|
|
|
from app.db import auth_db
|
|
|
|
current_request = ContextVar("current_request", default=None)
|
|
|
|
|
|
class RegisterRequest(BaseModel):
|
|
email: str
|
|
password: str
|
|
invite_code: str = ""
|
|
|
|
|
|
class VerifyEmailRequest(BaseModel):
|
|
email: str
|
|
code: str
|
|
|
|
|
|
class LoginRequest(BaseModel):
|
|
email: str
|
|
password: str
|
|
|
|
|
|
class ResendVerificationRequest(BaseModel):
|
|
email: str
|
|
|
|
|
|
class SendCodeRequest(BaseModel):
|
|
email: str
|
|
|
|
|
|
class CompleteRegistrationRequest(BaseModel):
|
|
email: str
|
|
code: str
|
|
password: str
|
|
invite_code: str = ""
|
|
|
|
|
|
class ChangePasswordRequest(BaseModel):
|
|
old_password: str
|
|
new_password: str
|
|
|
|
|
|
class WatchlistRequest(BaseModel):
|
|
symbol: str
|
|
|
|
|
|
class ObservationRequest(BaseModel):
|
|
rec_id: int
|
|
note: str = ""
|
|
|
|
|
|
class PushRulesRequest(BaseModel):
|
|
watchlist_only: bool = False
|
|
min_score: int = 0
|
|
min_rr: float = 0
|
|
push_buy_now: bool = True
|
|
push_wait_pullback: bool = True
|
|
push_observe: bool = False
|
|
quiet_start: str = ""
|
|
quiet_end: str = ""
|
|
|
|
|
|
class SchedulerToggleRequest(BaseModel):
|
|
enabled: bool
|
|
|
|
|
|
class SchedulerIntervalRequest(BaseModel):
|
|
every_seconds: int
|
|
|
|
|
|
class SchedulerTriggerRequest(BaseModel):
|
|
force: bool = False
|
|
|
|
|
|
def auth_error(exc: Exception, status_code: int = 400):
|
|
raise HTTPException(status_code=status_code, detail=str(exc))
|
|
|
|
|
|
def is_local_request(request: Request = None) -> bool:
|
|
request = request or current_request.get()
|
|
if not request or not request.client:
|
|
return False
|
|
host = (request.client.host or "").split(":")[0]
|
|
return host in ("127.0.0.1", "localhost", "::1", "testclient")
|
|
|
|
|
|
def local_debug_user():
|
|
return {"id": 0, "email": "local@alphax.dev", "is_admin": True, "local_debug": True}
|
|
|
|
|
|
def require_user(altcoin_session: str = ""):
|
|
user = auth_db.get_user_by_session_token(altcoin_session)
|
|
if user:
|
|
return user
|
|
if is_local_request():
|
|
return local_debug_user()
|
|
if not user:
|
|
raise HTTPException(status_code=401, detail="请先登录")
|
|
return user
|
|
|
|
|
|
def require_active_subscription(altcoin_session: str = ""):
|
|
user = require_user(altcoin_session)
|
|
if user.get("local_debug"):
|
|
return user, {"plan_name": "本地调试", "local_debug": True}
|
|
sub = auth_db.get_current_subscription(user["id"])
|
|
if not sub:
|
|
raise HTTPException(status_code=402, detail="订阅已过期或未开通，请先开通订阅")
|
|
return user, sub
|
|
|
|
|
|
def require_admin(altcoin_session: str = ""):
|
|
user = require_user(altcoin_session)
|
|
if user.get("local_debug"):
|
|
return user
|
|
if not auth_db.is_user_admin(user["id"]):
|
|
raise HTTPException(status_code=403, detail="需要管理员权限")
|
|
return user
|
|
|
|
|
|
def login_redirect():
|
|
return RedirectResponse(url="/auth?tab=login", status_code=302)
|
|
|
|
|
|
def subscription_redirect():
|
|
return RedirectResponse(url="/subscription?expired=1", status_code=302)
|
|
|
|
|
|
def has_active_subscription(user) -> bool:
|
|
if is_local_request():
|
|
return True
|
|
if not user:
|
|
return False
|
|
try:
|
|
if auth_db.is_user_admin(user["id"]):
|
|
return True
|
|
except Exception:
|
|
pass
|
|
return bool(auth_db.get_current_subscription(user["id"]))
|
|
|
|
|
|
def require_page_user(request: Request, require_subscription: bool = True):
|
|
user = auth_db.get_user_by_session_token(request.cookies.get("altcoin_session", ""))
|
|
if user:
|
|
if require_subscription and not has_active_subscription(user):
|
|
return user, subscription_redirect()
|
|
return user, None
|
|
if is_local_request(request):
|
|
return local_debug_user(), None
|
|
if not user:
|
|
return None, login_redirect()
|
|
return user, None
|
|
|
|
|
|
def require_api_user_with_subscription(altcoin_session: str = Cookie(default="")):
|
|
user = require_user(altcoin_session)
|
|
if user.get("local_debug"):
|
|
return user
|
|
if not has_active_subscription(user):
|
|
raise HTTPException(status_code=402, detail="订阅已过期或未开通，请先开通订阅")
|
|
return user
|