于小丘
209cb24ab4
- Implement PhysicalFile model to manage physical file references and reference counting. - Create Policy model with associated options and group links for storage policies. - Introduce Redeem and Report models for handling redeem codes and reports. - Add Settings model for site configuration and user settings management. - Develop Share model for sharing objects with unique codes and associated metadata. - Implement SourceLink model for managing download links associated with objects. - Create StoragePack model for managing user storage packages. - Add Tag model for user-defined tags with manual and automatic types. - Implement Task model for managing background tasks with status tracking. - Develop User model with comprehensive user management features including authentication. - Introduce UserAuthn model for managing WebAuthn credentials. - Create WebDAV model for managing WebDAV accounts associated with users.
68 lines
2.0 KiB
Python
68 lines
2.0 KiB
Python
from typing import Annotated
|
||
from uuid import UUID
|
||
|
||
from fastapi import Depends
|
||
import jwt
|
||
|
||
from sqlmodels.user import User
|
||
from utils import JWT
|
||
from .dependencies import SessionDep
|
||
from utils import http_exceptions
|
||
|
||
async def auth_required(
|
||
session: SessionDep,
|
||
token: Annotated[str, Depends(JWT.oauth2_scheme)],
|
||
) -> User:
|
||
"""
|
||
AuthRequired 需要登录
|
||
"""
|
||
try:
|
||
payload = jwt.decode(token, JWT.SECRET_KEY, algorithms=["HS256"])
|
||
user_id = payload.get("sub")
|
||
|
||
if user_id is None:
|
||
http_exceptions.raise_unauthorized("账号或密码错误")
|
||
|
||
user_id = UUID(user_id)
|
||
|
||
# 从数据库获取用户信息（预加载 group 关系）
|
||
user = await User.get(session, User.id == user_id, load=User.group)
|
||
if not user:
|
||
http_exceptions.raise_unauthorized("账号或密码错误")
|
||
|
||
return user
|
||
|
||
except jwt.InvalidTokenError:
|
||
http_exceptions.raise_unauthorized("凭据过期或无效")
|
||
|
||
async def admin_required(
|
||
user: Annotated[User, Depends(auth_required)],
|
||
) -> User:
|
||
"""
|
||
验证是否为管理员。
|
||
|
||
使用方法：
|
||
>>> APIRouter(dependencies=[Depends(admin_required)])
|
||
"""
|
||
if user.group.admin:
|
||
return user
|
||
raise http_exceptions.raise_forbidden("Admin Required")
|
||
|
||
|
||
def verify_download_token(token: str) -> tuple[str, UUID, UUID] | None:
|
||
"""
|
||
验证下载令牌并返回 (jti, file_id, owner_id)。
|
||
|
||
:param token: JWT 令牌字符串
|
||
:return: (jti, file_id, owner_id) 或 None（验证失败）
|
||
"""
|
||
try:
|
||
payload = jwt.decode(token, JWT.SECRET_KEY, algorithms=["HS256"])
|
||
if payload.get("type") != "download":
|
||
http_exceptions.raise_unauthorized("Download token required")
|
||
jti = payload.get("jti")
|
||
if not jti:
|
||
http_exceptions.raise_unauthorized("Download token required")
|
||
return jti, UUID(payload["file_id"]), UUID(payload["owner_id"])
|
||
except jwt.InvalidTokenError:
|
||
http_exceptions.raise_unauthorized("Download token required") |