122 lines
6.0 KiB
Python
122 lines
6.0 KiB
Python
from contextlib import asynccontextmanager
|
|
from urllib.parse import urlparse, parse_qs
|
|
|
|
from fastapi import FastAPI, HTTPException, Request
|
|
from fastapi.middleware.cors import CORSMiddleware
|
|
from fastapi.responses import JSONResponse
|
|
from fastapi.exception_handlers import http_exception_handler
|
|
|
|
from app.core.install_secrets import ensure_install_secrets
|
|
from app.core.config import settings
|
|
from app.core.jwt_denylist import ensure_jwt_revocation_backend
|
|
from app.core.app_settings import bootstrap_settings
|
|
from app.core.storage import ensure_bucket
|
|
from app.core import database as db_module
|
|
from app.db.token_cleanup import cleanup_expired_tokens
|
|
from app.db.base import Base
|
|
from app.db import models as _models # noqa: F401
|
|
from app.db.seed import run_seed
|
|
from app.modules.auth.router import router as auth_router
|
|
from app.modules.users.router import router as users_router
|
|
from app.modules.content.router import router as content_router
|
|
from app.modules.admin.router import router as admin_router
|
|
from app.modules.media.router import router as media_router
|
|
from app.modules.test.router import router as test_router
|
|
from app.modules.sync.router import router as sync_router, enterprise_router as sync_enterprise_router
|
|
from app.modules.zootech.router import router as zootech_router
|
|
from app.modules.zootech.wesp_compat import router as wesp_compat_router
|
|
from app.modules.zootech.wesp_compat_auth import router as wesp_compat_auth_router
|
|
from app.modules.zootech.wesp_compat_sync import router as wesp_compat_sync_router
|
|
from app.modules.zootech.wesp_compat_admin import router as wesp_compat_admin_router
|
|
from app.modules.zootech.wesp_compat_misc import router as wesp_compat_misc_router
|
|
from app.modules.zootech.wesp_compat_reports import router as wesp_compat_reports_router
|
|
from app.modules.zootech.wesp_compat_analytics import router as wesp_compat_analytics_router
|
|
from app.modules.enterprise.router import router as enterprise_router
|
|
|
|
|
|
def _assert_production_guards() -> None:
|
|
if settings.app_env.lower() != "production":
|
|
return
|
|
if settings.enable_test_routes:
|
|
raise RuntimeError("ENABLE_TEST_ROUTES must be false in production")
|
|
if settings.enable_docs:
|
|
raise RuntimeError("ENABLE_DOCS must be false in production")
|
|
if not settings.enable_rate_limit:
|
|
raise RuntimeError("ENABLE_RATE_LIMIT must be true in production")
|
|
if not settings.cookie_secure:
|
|
raise RuntimeError("COOKIE_SECURE must be true in production")
|
|
if settings.jwt_access_secret.startswith("change-me-"):
|
|
raise RuntimeError("JWT_ACCESS_SECRET placeholder is not allowed in production")
|
|
if settings.jwt_refresh_pepper.startswith("change-me-"):
|
|
raise RuntimeError("JWT_REFRESH_PEPPER placeholder is not allowed in production")
|
|
parsed = urlparse(settings.database_url)
|
|
if parsed.username == "user" and parsed.password == "pass":
|
|
raise RuntimeError("Default database credentials are not allowed in production")
|
|
if parsed.scheme.startswith("postgresql"):
|
|
sslmode = parse_qs(parsed.query).get("sslmode", [""])[0]
|
|
if sslmode != "require":
|
|
raise RuntimeError("DATABASE_URL must contain sslmode=require in production")
|
|
|
|
|
|
def create_app() -> FastAPI:
|
|
@asynccontextmanager
|
|
async def lifespan(_: FastAPI):
|
|
ensure_install_secrets()
|
|
bootstrap_settings()
|
|
ensure_jwt_revocation_backend()
|
|
_assert_production_guards()
|
|
if settings.enable_test_routes:
|
|
Base.metadata.create_all(db_module.engine)
|
|
run_seed()
|
|
cleanup_expired_tokens()
|
|
ensure_bucket()
|
|
yield
|
|
|
|
app = FastAPI(
|
|
title="Compton API",
|
|
version="1.0.0",
|
|
docs_url="/api/v1/docs" if settings.enable_docs else None,
|
|
openapi_url="/api/v1/openapi.json" if settings.enable_docs else None,
|
|
lifespan=lifespan,
|
|
)
|
|
app.add_middleware(
|
|
CORSMiddleware,
|
|
allow_origins=settings.cors_origins,
|
|
allow_credentials=True,
|
|
allow_methods=["GET", "POST", "PATCH", "DELETE", "OPTIONS"],
|
|
allow_headers=["Authorization", "Content-Type", "X-Request-ID"],
|
|
)
|
|
|
|
@app.exception_handler(HTTPException)
|
|
async def wesp_compat_http_exception_handler(request: Request, exc: HTTPException):
|
|
if isinstance(exc.detail, dict) and exc.detail.get("status") == "error":
|
|
return JSONResponse(status_code=exc.status_code, content=exc.detail)
|
|
return await http_exception_handler(request, exc)
|
|
|
|
@app.get("/api/v1/health")
|
|
async def health() -> dict[str, str]:
|
|
return {"status": "ok"}
|
|
|
|
app.include_router(auth_router, prefix="/api/v1/auth", tags=["auth"])
|
|
app.include_router(users_router, prefix="/api/v1/users", tags=["users"])
|
|
app.include_router(content_router, prefix="/api/v1/content", tags=["content"])
|
|
app.include_router(admin_router, prefix="/api/v1/admin", tags=["admin"])
|
|
app.include_router(media_router, prefix="/api/v1/media", tags=["media"])
|
|
app.include_router(sync_router, prefix="/api/v1/sync", tags=["sync"])
|
|
app.include_router(sync_enterprise_router, prefix="/api/v1/enterprise", tags=["enterprise"])
|
|
app.include_router(enterprise_router, prefix="/api/v1/enterprise", tags=["enterprise"])
|
|
app.include_router(zootech_router, prefix="/api/v1/zootech", tags=["zootech"])
|
|
app.include_router(wesp_compat_router, prefix="/api", tags=["zootech-wesp-compat"])
|
|
app.include_router(wesp_compat_auth_router, prefix="/api", tags=["zootech-wesp-compat"])
|
|
app.include_router(wesp_compat_sync_router, prefix="/api", tags=["zootech-wesp-compat"])
|
|
app.include_router(wesp_compat_admin_router, prefix="/api", tags=["zootech-wesp-compat"])
|
|
app.include_router(wesp_compat_misc_router, prefix="/api", tags=["zootech-wesp-compat"])
|
|
app.include_router(wesp_compat_reports_router, prefix="/api", tags=["zootech-wesp-compat"])
|
|
app.include_router(wesp_compat_analytics_router, prefix="/api", tags=["zootech-wesp-compat"])
|
|
if settings.enable_test_routes:
|
|
app.include_router(test_router, prefix="/api/v1/test", tags=["test"])
|
|
return app
|
|
|
|
|
|
app = create_app()
|