from typing import List, Optional from fastapi import APIRouter, Depends, HTTPException, Query, status from sqlalchemy.orm import Session from backend.models import get_db, User from backend.schemas.user import UserCreate, UserUpdate, UserResponse, TokenStatus, UserUpdateProfile from backend.schemas.task import TaskResponse from backend.services.user_service import UserService from backend.services.task_service import TaskService from backend.dependencies import get_current_user, get_current_admin_user router = APIRouter() @router.post("", response_model=UserResponse, status_code=status.HTTP_201_CREATED, summary="创建用户（管理员）") async def create_user( user_data: UserCreate, db: Session = Depends(get_db), current_user: User = Depends(get_current_admin_user) ): """ 创建用户（需要管理员权限） - **jwt_sub**: QQ 扫码登录的唯一用户标识 - **alias**: 用户别名（用于登录） - **role**: 角色（可选，默认 "user"） """ try: user = UserService.create_user(user_data, db) return user except ValueError as e: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail=str(e) ) except Exception as e: raise HTTPException( status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail=f"创建用户失败: {str(e)}" ) @router.get("/me", response_model=UserResponse, summary="获取当前用户信息") async def get_current_user_info( current_user: User = Depends(get_current_user) ): """ 获取当前登录用户的信息 """ # 创建响应对象，手动添加 has_password 字段 user_dict = { "id": current_user.id, "alias": current_user.alias, "jwt_sub": current_user.jwt_sub, "role": current_user.role, "is_approved": current_user.is_approved, "jwt_exp": current_user.jwt_exp, "email": current_user.email, "has_password": bool(current_user.password_hash), "created_at": current_user.created_at, "updated_at": current_user.updated_at, } return user_dict @router.get("/me/status", response_model=dict, summary="获取当前用户审批状态") async def get_user_status( current_user: User = Depends(get_current_user) ): """ 获取用户审批状态（不要求审批通过） """ return { "user_id": current_user.id, "alias": current_user.alias, "is_approved": current_user.is_approved, "created_at": current_user.created_at.isoformat() if current_user.created_at else None } @router.put("/me/profile", response_model=UserResponse, summary="更新个人信息") async def update_current_user_profile( profile_data: UserUpdateProfile, db: Session = Depends(get_db), current_user: User = Depends(get_current_user) ): """ 更新当前用户的个人信息 - **alias**: 新别名（可选） - **current_password**: 当前密码（修改密码时必填） - **new_password**: 新密码（可选） 注意： - 修改密码时必须提供 current_password 和 new_password - 首次设置密码时不需要 current_password """ try: user = UserService.update_user_profile(current_user.id, profile_data, db) return user except ValueError as e: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail=str(e) ) except Exception as e: raise HTTPException( status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail=f"更新个人信息失败: {str(e)}" ) @router.get("/me/token_status", response_model=TokenStatus, summary="获取当前用户 Token 状态") async def get_current_user_token_status( current_user: User = Depends(get_current_user) ): """ 获取当前用户的 Token 状态 """ from datetime import datetime is_valid = True days_until_expiry = None expires_at = None expiring_soon = False if current_user.jwt_exp and current_user.jwt_exp != "0": try: exp_timestamp = int(current_user.jwt_exp) current_timestamp = int(datetime.now().timestamp()) expires_at = exp_timestamp if current_timestamp > exp_timestamp: is_valid = False else: days_until_expiry = (exp_timestamp - current_timestamp) // 86400 # 检查是否在30分钟内过期 minutes_until_expiry = (exp_timestamp - current_timestamp) // 60 expiring_soon = minutes_until_expiry <= 30 except ValueError: pass return { "is_valid": is_valid, "jwt_exp": current_user.jwt_exp, "jwt_sub": current_user.jwt_sub, "expires_at": expires_at, "days_until_expiry": days_until_expiry, "expiring_soon": expiring_soon } @router.get("/me/tasks", response_model=List[TaskResponse], summary="获取当前用户的任务列表") async def get_current_user_tasks( include_inactive: bool = Query(True, description="是否包含未启用的任务"), db: Session = Depends(get_db), current_user: User = Depends(get_current_user) ): """ 获取当前登录用户的所有打卡任务 - **include_inactive**: 是否包含未启用的任务（默认 True） """ try: tasks = TaskService.get_user_tasks(current_user.id, db, include_inactive) return tasks except Exception as e: raise HTTPException( status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail=f"获取任务列表失败: {str(e)}" ) @router.get("", response_model=List[UserResponse], summary="获取所有用户（管理员）") async def get_all_users( skip: int = Query(0, ge=0, description="跳过记录数"), limit: int = Query(100, ge=1, le=500, description="限制记录数"), search: Optional[str] = Query(None, description="搜索关键词（alias 或 jwt_sub）"), role: Optional[str] = Query(None, description="过滤角色 (user/admin)"), db: Session = Depends(get_db), current_user: User = Depends(get_current_admin_user) ): """ 获取所有用户列表（需要管理员权限） - **skip**: 跳过记录数 - **limit**: 限制记录数 - **search**: 搜索关键词（模糊匹配 alias 或 jwt_sub） - **role**: 过滤角色（user/admin） """ try: users = UserService.get_all_users(db, skip, limit, search, role) return users except Exception as e: raise HTTPException( status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail=f"获取用户列表失败: {str(e)}" ) @router.get("/{user_id}", response_model=UserResponse, summary="获取指定用户") async def get_user( user_id: int, db: Session = Depends(get_db), current_user: User = Depends(get_current_user) ): """ 获取指定用户信息 - 普通用户只能查看自己的信息 - 管理员可以查看所有用户信息 """ # 检查权限 if current_user.role != "admin" and current_user.id != user_id: raise HTTPException( status_code=status.HTTP_403_FORBIDDEN, detail="权限不足，只能查看自己的信息" ) user = UserService.get_user_by_id(user_id, db) if not user: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail=f"用户 ID {user_id} 不存在" ) return user @router.put("/{user_id}", response_model=UserResponse, summary="更新用户信息") async def update_user( user_id: int, user_data: UserUpdate, db: Session = Depends(get_db), current_user: User = Depends(get_current_user) ): """ 更新用户信息 - 普通用户只能更新自己的部分信息（不包括 role） - 管理员可以更新所有用户的所有信息 """ # 检查权限 if current_user.role != "admin": if current_user.id != user_id: raise HTTPException( status_code=status.HTTP_403_FORBIDDEN, detail="权限不足，只能更新自己的信息" ) # 普通用户不能修改 role if user_data.role is not None: raise HTTPException( status_code=status.HTTP_403_FORBIDDEN, detail="普通用户不能修改角色" ) try: user = UserService.update_user(user_id, user_data, db) return user except ValueError as e: raise HTTPException( status_code=status.HTTP_400_BAD_REQUEST, detail=str(e) ) except Exception as e: raise HTTPException( status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail=f"更新用户失败: {str(e)}" ) @router.delete("/{user_id}", status_code=status.HTTP_204_NO_CONTENT, summary="删除用户（管理员）") async def delete_user( user_id: int, db: Session = Depends(get_db), current_user: User = Depends(get_current_admin_user) ): """ 删除用户（需要管理员权限） """ try: UserService.delete_user(user_id, db) return None except ValueError as e: raise HTTPException( status_code=status.HTTP_404_NOT_FOUND, detail=str(e) ) except Exception as e: raise HTTPException( status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail=f"删除用户失败: {str(e)}" )