56 lines
1.8 KiB
Python
56 lines
1.8 KiB
Python
|
from fastapi import APIRouter, Depends, Query
|
||
|
|
from sqlalchemy import select
|
||
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
||
|
|
|
||
|
|
from app.auth.deps import CurrentUser, get_current_user
|
||
|
|
from app.config import get_settings
|
||
|
|
from app.database import get_db
|
||
|
|
from app.domain import ALL_ROLES
|
||
|
|
from app.models import User, UserRole
|
||
|
|
from app.schemas.user import MeOut, UserOut
|
||
|
|
|
||
|
|
router = APIRouter(tags=["users"])
|
||
|
|
|
||
|
|
|
||
|
|
@router.get("/me", response_model=MeOut)
|
||
|
|
async def get_me(current: CurrentUser = Depends(get_current_user)) -> MeOut:
|
||
|
|
u = current.user
|
||
|
|
return MeOut(
|
||
|
|
id=u.id,
|
||
|
|
display_name=u.display_name,
|
||
|
|
email=u.email,
|
||
|
|
employee_id=u.employee_id,
|
||
|
|
is_active=u.is_active,
|
||
|
|
roles=sorted(current.roles),
|
||
|
|
last_login_at=u.last_login_at,
|
||
|
|
auth_mode=get_settings().auth_mode,
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
@router.get("/users", response_model=list[UserOut])
|
||
|
|
async def list_users(
|
||
|
|
role: str | None = Query(default=None, description="Filter to users holding this role"),
|
||
|
|
_: CurrentUser = Depends(get_current_user),
|
||
|
|
db: AsyncSession = Depends(get_db),
|
||
|
|
) -> list[UserOut]:
|
||
|
|
"""User directory for pickers (e.g. Disposition Authority dropdown,
|
||
|
|
'Notify These People'). Only active users are returned."""
|
||
|
|
stmt = select(User).where(User.is_active.is_(True)).order_by(User.display_name)
|
||
|
|
if role:
|
||
|
|
if role not in ALL_ROLES:
|
||
|
|
return []
|
||
|
|
stmt = stmt.join(UserRole, UserRole.user_id == User.id).where(UserRole.role == role)
|
||
|
|
users = (await db.execute(stmt)).scalars().unique().all()
|
||
|
|
return [
|
||
|
|
UserOut(
|
||
|
|
id=u.id,
|
||
|
|
display_name=u.display_name,
|
||
|
|
email=u.email,
|
||
|
|
employee_id=u.employee_id,
|
||
|
|
is_active=u.is_active,
|
||
|
|
roles=u.roles,
|
||
|
|
last_login_at=u.last_login_at,
|
||
|
|
)
|
||
|
|
for u in users
|
||
|
|
]
|