Update api_server.py

api_server.py

@@ -161,6 +161,11 @@ def get_db():
 # =================================================================
 from pydantic import BaseModel
 
+# 管理員
+class LoginRequest(BaseModel):
+    username: str
+    password: str
+    
 # 病患
 class PatientCreate(BaseModel):
     name: str
@@ -202,6 +207,7 @@ class RecordCreate(BaseModel):
 # =================================================================
 # 6. 病患 API
 # =================================================================
+
 @app.post("/patients")
 def create_patient(data: PatientCreate, db: Session = Depends(get_db)):
     patient = Patient(**data.dict())
@@ -250,13 +256,16 @@ def delete_patient(patient_id: int, db: Session = Depends(get_db)):
 # =================================================================
 @app.post("/nurses")
 def create_nurse(data: NurseCreate, db: Session = Depends(get_db)):
-    nurse = Nurse(**data.dict())
+    nurse_data = data.dict()
+    nurse_data["password"] = data.staff_id  # 預設密碼 = staff_id
+    nurse = Nurse(**nurse_data)
     db.add(nurse)
     db.commit()
     db.refresh(nurse)
     return nurse
 
 
+
 @app.get("/nurses")
 def list_nurses(db: Session = Depends(get_db)):
     return db.query(Nurse).all()
@@ -300,6 +309,48 @@ def delete_record(record_id: int, db: Session = Depends(get_db)):
     db.commit()
     return {"message": "紀錄已刪除"}
 
+@app.post("/login")
+def login(data: LoginRequest, db: Session = Depends(get_db)):
+
+    # 管理員登入
+    if data.username == "admin" and data.password == "1234":
+        return {"role": "admin", "name": "Admin", "id": 0}
+
+    # 護理師登入
+    nurse = db.query(Nurse).filter(Nurse.staff_id == data.username).first()
+
+    if not nurse:
+        raise HTTPException(status_code=401, detail="帳號不存在")
+
+    if nurse.password != data.password:
+        raise HTTPException(status_code=401, detail="密碼錯誤")
+
+    return {
+        "role": "nurse",
+        "name": nurse.name,
+        "id": nurse.id
+    }
+
+@app.get("/current-user")
+def current_user(token: str | None = None, db: Session = Depends(get_db)):
+
+    if token == "admin":
+        return {"role": "admin", "name": "Admin", "id": 0}
+
+    if token is None:
+        raise HTTPException(status_code=401, detail="未登入")
+
+    nurse = db.query(Nurse).filter(Nurse.id == int(token)).first()
+
+    if not nurse:
+        raise HTTPException(status_code=401, detail="登入者不存在")
+
+    return {
+        "role": "nurse",
+        "name": nurse.name,
+        "id": nurse.id
+    }
+    
 from fastapi.responses import FileResponse
 @app.get("/download-db")
 def download_db():