65 lines
1.9 KiB
Python
65 lines
1.9 KiB
Python
import hmac
|
|
from contextlib import asynccontextmanager
|
|
|
|
from fastapi import Depends, FastAPI, Form, Request
|
|
from fastapi.responses import HTMLResponse, RedirectResponse
|
|
from fastapi.staticfiles import StaticFiles
|
|
|
|
from app import auth
|
|
from app.auth import require_auth
|
|
from app.config import get_settings
|
|
from app.db import get_engine
|
|
from app.models.views import create_views
|
|
from app.routers import (accounts, categories, gui, imports, planning,
|
|
scenarios, transactions)
|
|
from app.routers.gui import templates
|
|
from app.version import get_version
|
|
|
|
|
|
@asynccontextmanager
|
|
async def lifespan(app: FastAPI):
|
|
create_views(get_engine())
|
|
yield
|
|
|
|
|
|
app = FastAPI(title="Finanzberatungs-Tool", lifespan=lifespan)
|
|
|
|
app.mount("/static", StaticFiles(directory="app/static"), name="static")
|
|
|
|
app.include_router(gui.router)
|
|
app.include_router(accounts.router)
|
|
app.include_router(transactions.router)
|
|
app.include_router(categories.router)
|
|
app.include_router(imports.router)
|
|
app.include_router(planning.router)
|
|
app.include_router(scenarios.router)
|
|
|
|
|
|
@app.get("/login")
|
|
def login_form(request: Request):
|
|
return templates.TemplateResponse(request, "login.html", {})
|
|
|
|
|
|
@app.post("/login")
|
|
def login(username: str = Form(...), password: str = Form(...)):
|
|
s = get_settings()
|
|
if not (hmac.compare_digest(username, s.gui_user)
|
|
and auth.verify_password(password, s.gui_password_hash)):
|
|
return HTMLResponse("Login fehlgeschlagen", status_code=401)
|
|
resp = RedirectResponse("/", status_code=303)
|
|
resp.set_cookie(auth.COOKIE, auth.make_session_token(), httponly=True,
|
|
max_age=auth.MAX_AGE, samesite="lax")
|
|
return resp
|
|
|
|
|
|
@app.post("/logout")
|
|
def logout():
|
|
resp = RedirectResponse("/login", status_code=303)
|
|
resp.delete_cookie(auth.COOKIE)
|
|
return resp
|
|
|
|
|
|
@app.get("/api/version", dependencies=[Depends(require_auth)])
|
|
def api_version():
|
|
return {"version": get_version()}
|