于小丘
cd35c6fbed
Reorganized model structure by replacing 'object' and 'items' with a unified 'item' model using UUIDs, and moved base model logic into separate files. Updated routes to use the new item model and improved request/response handling. Enhanced user and setting models, added utility functions, and improved error handling throughout the codebase. Also added initial .idea project files and minor admin API improvements. Co-Authored-By: 砂糖橘 <54745033+Foxerine@users.noreply.github.com>
36 lines
1.1 KiB
Python
36 lines
1.1 KiB
Python
from typing import Annotated
|
|
|
|
import jwt
|
|
from fastapi import Depends
|
|
from fastapi import HTTPException
|
|
from jwt import InvalidTokenError
|
|
from sqlmodel.ext.asyncio.session import AsyncSession
|
|
|
|
import JWT
|
|
from model import User
|
|
from model.database import Database
|
|
|
|
|
|
# 验证是否为管理员
|
|
async def get_current_user(
|
|
token: Annotated[str, Depends(JWT.oauth2_scheme)],
|
|
session: Annotated[AsyncSession, Depends(Database.get_session)],
|
|
) -> User:
|
|
"""
|
|
验证用户身份并返回当前用户信息。
|
|
"""
|
|
not_login_exception = HTTPException(
|
|
status_code=401,
|
|
detail="Login required",
|
|
headers={"WWW-Authenticate": "Bearer"},
|
|
)
|
|
|
|
try:
|
|
payload = jwt.decode(token, await JWT.get_secret_key(), algorithms=[JWT.ALGORITHM])
|
|
username = payload.get("sub")
|
|
stored_account = await User.get(session, User.email == username)
|
|
if username is None or stored_account.email != username:
|
|
raise not_login_exception
|
|
return stored_account
|
|
except InvalidTokenError:
|
|
raise not_login_exception |