import uuid from fastapi import APIRouter, Depends, HTTPException, status from sqlalchemy.ext.asyncio import AsyncSession from app.core.deps import get_db_session, require_roles from app.crud import user as user_crud from app.schemas.user import UserCreate, UserRead, UserUpdate router = APIRouter() @router.get("/", response_model=list[UserRead]) async def list_users( skip: int = 0, limit: int = 100, db: AsyncSession = Depends(get_db_session), current_user=Depends(require_roles(["ADMIN"])), ) -> list[UserRead]: users = await user_crud.list_users(db, skip=skip, limit=limit) return list(users) @router.post("/", response_model=UserRead, status_code=status.HTTP_201_CREATED) async def create_user( user_in: UserCreate, db: AsyncSession = Depends(get_db_session), current_user=Depends(require_roles(["ADMIN"])), ) -> UserRead: existing = await user_crud.get_by_username(db, user_in.username) if existing: raise HTTPException( status_code=status.HTTP_409_CONFLICT, detail="Username already exists", ) user = await user_crud.create_user(db, user_in) return user @router.patch("/{user_id}", response_model=UserRead) async def update_user( user_id: uuid.UUID, user_in: UserUpdate, db: AsyncSession = Depends(get_db_session), current_user=Depends(require_roles(["ADMIN"])), ) -> UserRead: db_user = await user_crud.get_by_id(db, user_id) if not db_user: raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="User not found") user = await user_crud.update_user(db, db_user, user_in) return user