79 lines
2.6 KiB
Python
79 lines
2.6 KiB
Python
"""CRUD operations for User model."""
|
|
|
|
from typing import Optional
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.crud.base import CRUDBase
|
|
from app.models.user import User
|
|
from app.schemas.user import UserCreate, UserUpdate
|
|
from app.core.security import get_password_hash, verify_password
|
|
|
|
|
|
class CRUDUser(CRUDBase[User, UserCreate, UserUpdate]):
|
|
"""CRUD operations for User model."""
|
|
|
|
def get_by_email(self, db: Session, *, email: str) -> Optional[User]:
|
|
"""Get user by email."""
|
|
return db.query(User).filter(User.email == email).first()
|
|
|
|
def get_by_username(self, db: Session, *, username: str) -> Optional[User]:
|
|
"""Get user by username."""
|
|
return db.query(User).filter(User.username == username).first()
|
|
|
|
def create(self, db: Session, *, obj_in: UserCreate) -> User:
|
|
"""Create a new user with hashed password."""
|
|
db_obj = User(
|
|
username=obj_in.username,
|
|
email=obj_in.email,
|
|
hashed_password=get_password_hash(obj_in.password),
|
|
is_active=obj_in.is_active,
|
|
is_superuser=obj_in.is_superuser,
|
|
)
|
|
# Set permissions if provided
|
|
if obj_in.permissions is not None:
|
|
db_obj.permissions = obj_in.permissions
|
|
db.add(db_obj)
|
|
db.commit()
|
|
db.refresh(db_obj)
|
|
return db_obj
|
|
|
|
def update(
|
|
self, db: Session, *, db_obj: User, obj_in: UserUpdate
|
|
) -> User:
|
|
"""Update user, hashing password if provided."""
|
|
update_data = obj_in.model_dump(exclude_unset=True)
|
|
|
|
if "password" in update_data and update_data["password"]:
|
|
hashed_password = get_password_hash(update_data["password"])
|
|
del update_data["password"]
|
|
update_data["hashed_password"] = hashed_password
|
|
|
|
# Handle permissions separately since it uses a property setter
|
|
if "permissions" in update_data:
|
|
db_obj.permissions = update_data.pop("permissions")
|
|
|
|
return super().update(db, db_obj=db_obj, obj_in=update_data)
|
|
|
|
def authenticate(
|
|
self, db: Session, *, username: str, password: str
|
|
) -> Optional[User]:
|
|
"""Authenticate a user by username and password."""
|
|
user = self.get_by_username(db, username=username)
|
|
if not user:
|
|
return None
|
|
if not verify_password(password, user.hashed_password):
|
|
return None
|
|
return user
|
|
|
|
def is_active(self, user: User) -> bool:
|
|
"""Check if user is active."""
|
|
return user.is_active
|
|
|
|
def is_superuser(self, user: User) -> bool:
|
|
"""Check if user is superuser."""
|
|
return user.is_superuser
|
|
|
|
|
|
# Create instance
|
|
user = CRUDUser(User)
|