Sadmin
5a2c9a0688
- Модели audit_events (immutable) + audit_changes (field-level old→new);
Alembic 008_e2_audit.
- backend/audit.py: audit_log() (событие + изменения), audit_retention_days
(90 дней из security_settings), visible_unit_ids (рекурсивный CTE:
своё подразделение + подчинённые; РЦУ РЧС/legacy → None = без фильтра),
can_access_unit, _uuid_hex.
- backend/routers/admin_users.py (manage_users/view_audit):
GET /admin/users (фильтры status/unit/q, скоуп по подразделению),
POST (создание с must_change_password, роль, скоуп-проверка),
PATCH /{id} (роль/юнит/статус/сброс пароля, field-level аудит),
GET /units (справочник подразделений), GET /audit (ретеншн-фильтр).
coordinator управляет только своим юнитом+подчинёнными и не трогает РЦУ.
- Грабли SQLite-тестов: UUID колонки хранят hex без дефисов — сравнения
только в hex-пространстве (_uuid_hex); StaticPool обязателен.
- Тесты E2 (8): создание/блокировка/сброс пароля/скоуп координатора/
cross-oblast 403/без права 403/аудит user_create.
210 passed, 5 skipped.
65 lines
2.0 KiB
Python
65 lines
2.0 KiB
Python
from __future__ import annotations
|
|
|
|
import os
|
|
from contextlib import asynccontextmanager
|
|
|
|
from fastapi import FastAPI
|
|
from fastapi.middleware.cors import CORSMiddleware
|
|
|
|
from backend.database import init_db
|
|
from backend.routers.admin import router as admin_router
|
|
from backend.routers.admin_users import router as admin_users_router
|
|
from backend.routers.analyze import router as analyze_router
|
|
from backend.routers.auth import router as auth_router
|
|
from backend.routers.cases import router as cases_router
|
|
from backend.routers.closed_cases import router as closed_cases_router
|
|
from backend.routers.geocode import router as geocode_router
|
|
from backend.routers.health import router as health_router
|
|
from backend.routers.stats import router as stats_router
|
|
from backend.routers.water import router as water_router
|
|
|
|
|
|
def _parse_origins(value: str) -> list[str]:
|
|
origins = [origin.strip() for origin in value.split(',') if origin.strip()]
|
|
return origins or ['http://localhost:3000', 'http://127.0.0.1:3000']
|
|
|
|
|
|
cors_origins = _parse_origins(os.getenv('CORS_ORIGINS', 'http://localhost:3000,http://127.0.0.1:3000'))
|
|
allow_credentials = os.getenv('CORS_ALLOW_CREDENTIALS', 'true').strip().lower() in {'1', 'true', 'yes', 'on'}
|
|
if '*' in cors_origins:
|
|
allow_credentials = False
|
|
|
|
|
|
@asynccontextmanager
|
|
async def lifespan(app: FastAPI):
|
|
init_db()
|
|
yield
|
|
|
|
|
|
app = FastAPI(title='Vector API', version='0.1.0', lifespan=lifespan)
|
|
|
|
app.add_middleware(
|
|
CORSMiddleware,
|
|
allow_origins=cors_origins,
|
|
allow_credentials=allow_credentials,
|
|
allow_methods=['*'],
|
|
allow_headers=['*'],
|
|
)
|
|
|
|
|
|
app.include_router(health_router)
|
|
app.include_router(auth_router)
|
|
app.include_router(analyze_router)
|
|
app.include_router(cases_router)
|
|
app.include_router(closed_cases_router)
|
|
app.include_router(stats_router)
|
|
app.include_router(admin_router)
|
|
app.include_router(admin_users_router)
|
|
app.include_router(water_router)
|
|
app.include_router(geocode_router)
|
|
|
|
|
|
@app.get('/')
|
|
def root() -> dict[str, str]:
|
|
return {'name': 'Vector API', 'status': 'ok'}
|