import hmac from contextlib import asynccontextmanager from fastapi import Depends, FastAPI, Form, Request from fastapi.responses import HTMLResponse, RedirectResponse from fastapi.staticfiles import StaticFiles from app import auth from app.auth import require_auth from app.config import get_settings from app.db import get_engine from app.models.views import create_views from app.routers import (accounts, categories, gui, imports, planning, scenarios, transactions) from app.routers.gui import templates from app.version import get_version @asynccontextmanager async def lifespan(app: FastAPI): create_views(get_engine()) yield app = FastAPI(title="Finanzberatungs-Tool", lifespan=lifespan) app.mount("/static", StaticFiles(directory="app/static"), name="static") app.include_router(gui.router) app.include_router(accounts.router) app.include_router(transactions.router) app.include_router(categories.router) app.include_router(imports.router) app.include_router(planning.router) app.include_router(scenarios.router) @app.get("/login") def login_form(request: Request): return templates.TemplateResponse(request, "login.html", {}) @app.post("/login") def login(username: str = Form(...), password: str = Form(...)): s = get_settings() if not (hmac.compare_digest(username, s.gui_user) and auth.verify_password(password, s.gui_password_hash)): return HTMLResponse("Login fehlgeschlagen", status_code=401) resp = RedirectResponse("/", status_code=303) resp.set_cookie(auth.COOKIE, auth.make_session_token(), httponly=True, max_age=auth.MAX_AGE, samesite="lax") return resp @app.post("/logout") def logout(): resp = RedirectResponse("/login", status_code=303) resp.delete_cookie(auth.COOKIE) return resp @app.get("/api/version", dependencies=[Depends(require_auth)]) def api_version(): return {"version": get_version()}