6c47d3c57d
- Add admin auth dependency and role checks - Expand channel and restaurant API routes - Improve YouTube transcript fetching - Enhance daemon worker with better error handling and scheduling Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
58 lines
1.7 KiB
Python
58 lines
1.7 KiB
Python
"""Auth API routes — Google SSO login and user info."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException
|
|
from pydantic import BaseModel
|
|
|
|
from core.auth import verify_google_token, find_or_create_user, create_jwt
|
|
from api.deps import get_current_user
|
|
|
|
router = APIRouter()
|
|
|
|
|
|
class GoogleLoginRequest(BaseModel):
|
|
id_token: str
|
|
|
|
|
|
@router.post("/google")
|
|
def login_google(body: GoogleLoginRequest):
|
|
"""Verify Google ID token and return JWT + user info."""
|
|
try:
|
|
google_info = verify_google_token(body.id_token)
|
|
except ValueError as e:
|
|
raise HTTPException(401, f"Invalid Google token: {e}")
|
|
|
|
user = find_or_create_user(
|
|
provider="google",
|
|
provider_id=google_info["sub"],
|
|
email=google_info.get("email"),
|
|
nickname=google_info.get("name"),
|
|
avatar_url=google_info.get("picture"),
|
|
)
|
|
access_token = create_jwt(user)
|
|
return {"access_token": access_token, "user": user}
|
|
|
|
|
|
@router.get("/me")
|
|
def get_me(current_user: dict = Depends(get_current_user)):
|
|
"""Return current authenticated user info including admin status."""
|
|
from core.db import conn
|
|
user_id = current_user.get("sub") or current_user.get("id")
|
|
with conn() as c:
|
|
cur = c.cursor()
|
|
cur.execute(
|
|
"SELECT id, email, nickname, avatar_url, is_admin FROM tasteby_users WHERE id = :id",
|
|
{"id": user_id},
|
|
)
|
|
row = cur.fetchone()
|
|
if not row:
|
|
raise HTTPException(404, "User not found")
|
|
return {
|
|
"id": row[0],
|
|
"email": row[1],
|
|
"nickname": row[2],
|
|
"avatar_url": row[3],
|
|
"is_admin": bool(row[4]),
|
|
}
|