76df695111
- Minimale Web-UI (app/web/, vanilla, same-origin -> kein CORS): Text-Prompt + Mikrofon-Button (Aufnahme im Browser -> /ws/voice -> Antwort wird vorgelesen), Token-Streaming, PCM-Wiedergabe, Identitaet/Logout/Admin im Menue - Forward-/Trusted-Header-Auth (app/auth.py): Identitaet aus SSO-Header, nur von TRUSTED_PROXY_IPS akzeptiert; sonst Token/Anonymous-Fallback. Auto-Provisioning via store.get_or_create_user_by_external_id (+ external_id-Spalte/Migration) - /api/me um is_admin + sso_logout_url erweitert; GET /api/admin/users (Liste) und GET /api/admin/request-headers (SSO-Header-Discovery), Admin-gated - StaticFiles-Mount; Config: TRUSTED_AUTH_HEADER/_PROXY_IPS, ADMIN_USERS, SSO_LOGOUT_URL - WS-Auth liest Identitaet aus dem Handshake-Header - Deploy: nginx-Vorlage (WS-Upgrade!) + deploy/README.md (HTTPS/SSO/Firewall/Discovery) - Tests: Forward-Auth (Provisioning, Admin-Flag, Proxy-IP-Trust, 401/403, Static) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
47 lines
1.7 KiB
Python
47 lines
1.7 KiB
Python
from fastapi import APIRouter, Depends, HTTPException
|
|
|
|
from app.auth import require_user, is_admin_user
|
|
from app.config import settings
|
|
from app.dependencies import get_store
|
|
from app.schemas import UserPrefs, MemoryCreate, MemoryOut
|
|
from app.store import User
|
|
|
|
router = APIRouter()
|
|
|
|
|
|
@router.get("/me")
|
|
async def get_me(user: User = Depends(require_user)):
|
|
return {
|
|
"user_id": user.id,
|
|
"display_name": user.display_name,
|
|
"external_id": user.external_id,
|
|
"is_admin": user.is_admin or is_admin_user(user),
|
|
"prefs": user.prefs,
|
|
"sso_logout_url": settings.sso_logout_url,
|
|
}
|
|
|
|
|
|
@router.put("/me/prefs")
|
|
async def set_my_prefs(payload: UserPrefs, user: User = Depends(require_user)):
|
|
"""Setzt die dauerhaften Routing-Praeferenzen des Nutzers (nur gesetzte Felder)."""
|
|
prefs = {k: v for k, v in payload.model_dump().items() if v is not None}
|
|
updated = get_store().set_user_prefs(user.id, prefs)
|
|
return {"user_id": updated.id, "prefs": updated.prefs}
|
|
|
|
|
|
@router.get("/me/memories", response_model=list[MemoryOut])
|
|
async def list_memories(user: User = Depends(require_user)):
|
|
return get_store().get_memories(user.id)
|
|
|
|
|
|
@router.post("/me/memories", response_model=MemoryOut)
|
|
async def add_memory(payload: MemoryCreate, user: User = Depends(require_user)):
|
|
"""Speichert einen dauerhaften Fakt/eine Vorliebe ueber den Nutzer."""
|
|
return get_store().add_memory(user.id, payload.content.strip())
|
|
|
|
|
|
@router.delete("/me/memories/{memory_id}")
|
|
async def delete_memory(memory_id: int, user: User = Depends(require_user)):
|
|
if not get_store().delete_memory(user.id, memory_id):
|
|
raise HTTPException(status_code=404, detail="Memory not found")
|
|
return {"ok": True, "deleted": memory_id}
|