107 lines
3.9 KiB
Python
107 lines
3.9 KiB
Python
from fastapi import APIRouter, Depends, HTTPException, status
|
|
from sqlalchemy.orm import Session
|
|
from typing import List
|
|
import ulid
|
|
|
|
from app.core.database.db_session import get_db
|
|
from app.repositories.setting_repository import setting_repository
|
|
from app.models.SettingModel import Setting
|
|
from app.schemas.Settings import SettingCreate, SettingUpdate, SettingResponse
|
|
from app.models.UserModel import User
|
|
from app.core.permissions.RoleChecker import get_current_user, PermissionChecker
|
|
|
|
router = APIRouter(prefix="/api/v1/settings", tags=["Configuration Settings"])
|
|
|
|
@router.post("/create", response_model=SettingResponse, status_code=status.HTTP_201_CREATED)
|
|
def create_setting(
|
|
data: SettingCreate,
|
|
db: Session = Depends(get_db),
|
|
current_user: User = Depends(PermissionChecker("settings.create"))
|
|
):
|
|
existing = setting_repository.get_by_key(db, data.setting_key)
|
|
if existing:
|
|
raise HTTPException(status_code=400, detail="Setting key already exists.")
|
|
|
|
setting_id = str(ulid.ULID())
|
|
new_setting = Setting(
|
|
setting_id=setting_id,
|
|
setting_key=data.setting_key,
|
|
setting_value=data.setting_value,
|
|
description=data.description,
|
|
is_public=data.is_public
|
|
)
|
|
|
|
setting_repository.create(db, new_setting)
|
|
return new_setting
|
|
|
|
@router.get("/key/{key_name}", response_model=SettingResponse)
|
|
def get_setting_by_key(
|
|
key_name: str,
|
|
db: Session = Depends(get_db),
|
|
current_user: User = Depends(get_current_user)
|
|
):
|
|
setting = setting_repository.get_by_key(db, key_name)
|
|
if not setting:
|
|
raise HTTPException(status_code=404, detail="Setting not found")
|
|
|
|
# Restrict private settings to admin/system users
|
|
if not setting.is_public and current_user.role.role_name.lower() not in ["admin", "super admin"] and current_user.user_id != "internal-mcp":
|
|
raise HTTPException(status_code=403, detail="Access denied to private settings")
|
|
|
|
return setting
|
|
|
|
@router.get("/public", response_model=List[SettingResponse])
|
|
def get_public_settings(
|
|
db: Session = Depends(get_db),
|
|
current_user: User = Depends(get_current_user)
|
|
):
|
|
return setting_repository.get_public_settings(db)
|
|
|
|
@router.put("/update/{key_name}", response_model=SettingResponse)
|
|
def update_setting(
|
|
key_name: str,
|
|
payload: SettingUpdate,
|
|
db: Session = Depends(get_db),
|
|
current_user: User = Depends(PermissionChecker("settings.update"))
|
|
):
|
|
setting = setting_repository.get_by_key(db, key_name)
|
|
if not setting:
|
|
raise HTTPException(status_code=404, detail="Setting not found")
|
|
|
|
setting.setting_value = payload.setting_value
|
|
if payload.description is not None:
|
|
setting.description = payload.description
|
|
if payload.is_public is not None:
|
|
setting.is_public = payload.is_public
|
|
|
|
setting_repository.update(db, setting)
|
|
return setting
|
|
|
|
@router.post("/save/{key_name}", response_model=SettingResponse)
|
|
def save_setting(
|
|
key_name: str,
|
|
payload: SettingUpdate,
|
|
db: Session = Depends(get_db),
|
|
current_user: User = Depends(get_current_user)
|
|
):
|
|
setting = setting_repository.get_by_key(db, key_name)
|
|
if not setting:
|
|
setting_id = str(ulid.ULID())
|
|
setting = Setting(
|
|
setting_id=setting_id,
|
|
setting_key=key_name,
|
|
group="invoice_branding" if "branding" in key_name else "storefront",
|
|
setting_value=payload.setting_value,
|
|
description=payload.description or f"Setting for {key_name}",
|
|
is_public=payload.is_public if payload.is_public is not None else True
|
|
)
|
|
setting_repository.create(db, setting)
|
|
else:
|
|
setting.setting_value = payload.setting_value
|
|
if payload.description is not None:
|
|
setting.description = payload.description
|
|
if payload.is_public is not None:
|
|
setting.is_public = payload.is_public
|
|
setting_repository.update(db, setting)
|
|
|
|
return setting
|