Cheng Zhou
63 lines
2.6 KiB
Python
63 lines
2.6 KiB
Python
import uuid
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException, Query, status
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
|
|
from app.core.deps import get_db_session, is_system_admin, require_roles
|
|
from app.crud import user as user_crud
|
|
from app.models.user import User, UserStatus
|
|
from app.schemas.user import AdminUserListResponse, UserAdminReviewRequest, UserResponse
|
|
|
|
router = APIRouter(prefix="/users")
|
|
|
|
|
|
@router.get("/", response_model=AdminUserListResponse)
|
|
async def list_users_for_review(
|
|
status_filter: UserStatus = Query(default=UserStatus.PENDING, alias="status"),
|
|
db: AsyncSession = Depends(get_db_session),
|
|
current_user=Depends(require_roles(["ADMIN"])),
|
|
) -> AdminUserListResponse:
|
|
users = await user_crud.list_users_by_status(db, status=status_filter)
|
|
return AdminUserListResponse(items=list(users), total=len(users))
|
|
|
|
|
|
async def _get_review_user(db: AsyncSession, user_id: uuid.UUID) -> User:
|
|
user = await user_crud.get_by_id(db, user_id)
|
|
if not user:
|
|
raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="用户不存在")
|
|
if is_system_admin(user):
|
|
raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="管理员账号不允许审核")
|
|
return user
|
|
|
|
|
|
@router.post("/{user_id}/approve", response_model=UserResponse)
|
|
async def approve_user(
|
|
user_id: uuid.UUID,
|
|
review: UserAdminReviewRequest,
|
|
db: AsyncSession = Depends(get_db_session),
|
|
current_user=Depends(require_roles(["ADMIN"])),
|
|
) -> UserResponse:
|
|
if review.action != "approve":
|
|
raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="非法操作")
|
|
user = await _get_review_user(db, user_id)
|
|
if user.status != UserStatus.PENDING:
|
|
raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="仅允许审核待审核用户")
|
|
user = await user_crud.approve_user(db, user, admin_id=current_user.id)
|
|
return user
|
|
|
|
|
|
@router.post("/{user_id}/reject", response_model=UserResponse)
|
|
async def reject_user(
|
|
user_id: uuid.UUID,
|
|
review: UserAdminReviewRequest,
|
|
db: AsyncSession = Depends(get_db_session),
|
|
current_user=Depends(require_roles(["ADMIN"])),
|
|
) -> UserResponse:
|
|
if review.action not in ("reject", "approve"):
|
|
raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="非法操作")
|
|
user = await _get_review_user(db, user_id)
|
|
if user.status != UserStatus.PENDING:
|
|
raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="仅允许审核待审核用户")
|
|
user = await user_crud.reject_user(db, user, admin_id=current_user.id)
|
|
return user
|