e0e69fdf15
- SQLite-Store (app/store.py) hinter Store-Interface: Nutzer + Sessions persistent - Bearer-Token-Auth (app/auth.py); Nutzerverwaltung via Admin-Key (POST /api/admin/users) - GET /api/me, PUT /api/me/prefs (dauerhafte Nutzer-Praeferenzen) - chat/speak/transcribe/sessions auth-geschuetzt; Mandanten-Trennung (fremde Session -> 403) - Route-Aufloesung: Defaults < Profil < ENV < Nutzer-Prefs < Session < Request - SessionManager (in-memory) durch Store ersetzt - AUTH_ENABLED-Schalter (prod an, dev/Tests aus); DB_PATH/ADMIN_API_KEY - Doku aktualisiert (README, BEDIENUNGSANLEITUNG, Architektur, deploy-env); data/ gitignored - Tests: 29 gruen (Auth, Mandanten, Persistenz, Routing) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
14 lines
550 B
Python
14 lines
550 B
Python
from fastapi import APIRouter, Depends
|
|
|
|
from app.auth import require_admin
|
|
from app.dependencies import get_store
|
|
from app.schemas import UserCreate, UserCreated
|
|
|
|
router = APIRouter()
|
|
|
|
|
|
@router.post("/admin/users", response_model=UserCreated, dependencies=[Depends(require_admin)])
|
|
async def create_user(payload: UserCreate):
|
|
"""Legt einen Nutzer an und gibt das Bearer-Token EINMALIG zurueck."""
|
|
user, token = get_store().create_user(payload.display_name)
|
|
return UserCreated(user_id=user.id, display_name=user.display_name, token=token)
|