Complete admin package restructuring

packages/sshecret-admin/src/sshecret_admin/frontend/router.py

@@ -0,0 +1,133 @@
+"""Frontend router."""
+
+# pyright: reportUnusedFunction=false
+
+import logging
+import os
+from pathlib import Path
+from typing import Annotated
+
+from fastapi import APIRouter, Depends, HTTPException, Request
+
+from jinja2_fragments.fastapi import Jinja2Blocks
+
+from sqlmodel import Session, select
+from starlette.datastructures import URL
+
+
+from sshecret_admin.auth import PasswordDB, User, decode_token
+from sshecret_admin.core.dependencies import BaseDependencies
+from sshecret_admin.services.admin_backend import AdminBackend
+
+from .dependencies import FrontendDependencies
+from .exceptions import RedirectException
+from .views import audit, auth, clients, index, secrets
+
+
+LOG = logging.getLogger(__name__)
+
+
+access_token = "access_token"
+refresh_token = "refresh_token"
+
+
+def create_router(dependencies: BaseDependencies) -> APIRouter:
+    """Create frontend router."""
+
+    app = APIRouter(include_in_schema=False)
+
+    script_path = Path(os.path.dirname(os.path.realpath(__file__)))
+
+    template_path = script_path / "templates"
+
+    templates = Jinja2Blocks(directory=template_path)
+
+    async def get_admin_backend(
+        session: Annotated[Session, Depends(dependencies.get_db_session)]
+    ):
+        """Get admin backend API."""
+        password_db = session.exec(select(PasswordDB).where(PasswordDB.id == 1)).first()
+        if not password_db:
+            raise HTTPException(
+                500, detail="Error: The password manager has not yet been set up."
+            )
+        admin = AdminBackend(dependencies.settings, password_db.encrypted_password)
+        yield admin
+
+    async def get_user_from_token(
+        token: str,
+        session: Session,
+    ) -> User | None:
+        """Get user from a token."""
+        token_data = decode_token(dependencies.settings, token)
+        if not token_data:
+            return None
+        user = session.exec(
+            select(User).where(User.username == token_data.username)
+        ).first()
+        if not user or user.disabled:
+            return None
+        return user
+
+    async def get_user_from_refresh_token(
+        request: Request,
+        session: Annotated[Session, Depends(dependencies.get_db_session)],
+    ) -> User:
+        """Get user from refresh token."""
+        next = URL("/login").include_query_params(next=request.url.path)
+        credentials_error = RedirectException(to=next)
+        token = request.cookies.get("refresh_token")
+        if not token:
+            raise credentials_error
+
+        user = await get_user_from_token(token, session)
+        if not user:
+            raise credentials_error
+        return user
+
+    async def get_user_from_access_token(
+        request: Request,
+        session: Annotated[Session, Depends(dependencies.get_db_session)],
+    ) -> User:
+        """Get user from access token."""
+        token = request.cookies.get("access_token")
+        next = URL("/refresh").include_query_params(next=request.url.path)
+        credentials_error = RedirectException(to=next)
+        if not token:
+            raise credentials_error
+
+        user = await get_user_from_token(token, session)
+        if not user:
+            raise credentials_error
+        return user
+
+    async def get_login_status(
+        request: Request,
+        session: Annotated[Session, Depends(dependencies.get_db_session)],
+    ) -> bool:
+        """Get login status."""
+        token = request.cookies.get("access_token")
+        if not token:
+            return False
+
+        user = await get_user_from_token(token, session)
+        if not user:
+            return False
+        return True
+
+    view_dependencies = FrontendDependencies.create(
+        dependencies,
+        get_admin_backend,
+        templates,
+        get_user_from_access_token,
+        get_user_from_refresh_token,
+        get_login_status,
+    )
+
+    app.include_router(audit.create_router(view_dependencies))
+    app.include_router(auth.create_router(view_dependencies))
+    app.include_router(clients.create_router(view_dependencies))
+    app.include_router(index.create_router(view_dependencies))
+    app.include_router(secrets.create_router(view_dependencies))
+
+    return app