copilot-swe-agent[bot]
56f7f2351f
- Add UserProfile model (app/models.py) with per-user settings: display_name, daily_upload_limit, notes, is_blocked - Add Alembic migration 013_add_user_profiles for the new table - Add REST API at /api/admin/users/ with list, get, upsert (PUT), delete endpoints (admin-only) - Add HTML template admin_users.html with Alpine.js: filterable user list, paginated table, edit/create modal, delete confirmation modal - Add view handler at /admin/users (admin-only redirect guard) - Register routers in app/api/__init__.py and app/views/__init__.py - Add 'Users' link to admin nav dropdown in base.html (desktop + mobile) - Add 27 tests covering auth, list, get, upsert, delete, and model constraints - Register UserProfile in conftest.py model imports - Document new endpoints in docs/API.md Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
45 lines
1.3 KiB
Python
45 lines
1.3 KiB
Python
"""Admin view: user management dashboard."""
|
|
|
|
import logging
|
|
|
|
from fastapi import HTTPException, Request, status
|
|
from fastapi.responses import RedirectResponse
|
|
|
|
from app.views.base import APIRouter, get_db, require_login, settings, templates # noqa: F401
|
|
|
|
logger = logging.getLogger(__name__)
|
|
router = APIRouter()
|
|
|
|
|
|
def _require_admin(request: Request):
|
|
"""Return the session user if they are an admin, else redirect."""
|
|
user = request.session.get("user")
|
|
if not user or not user.get("is_admin"):
|
|
logger.warning("Non-admin user attempted to access /admin/users")
|
|
return None
|
|
return user
|
|
|
|
|
|
@router.get("/admin/users")
|
|
@require_login
|
|
async def admin_users_page(request: Request):
|
|
"""Admin user management dashboard — lists all known users."""
|
|
user = _require_admin(request)
|
|
if user is None:
|
|
return RedirectResponse(url="/", status_code=status.HTTP_302_FOUND)
|
|
|
|
try:
|
|
return templates.TemplateResponse(
|
|
"admin_users.html",
|
|
{
|
|
"request": request,
|
|
"app_version": settings.version,
|
|
},
|
|
)
|
|
except Exception as e:
|
|
logger.error(f"Error loading admin users page: {e}")
|
|
raise HTTPException(
|
|
status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
|
|
detail="Failed to load admin users page",
|
|
)
|