Spaces:
Runtime error
Runtime error
File size: 2,245 Bytes
71a3948 3358b33 71a3948 3358b33 71a3948 1a8e744 |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 |
from fastapi import APIRouter, Depends, HTTPException, status
from sqlmodel import Session
from typing import List
from src.database import get_session
from src.auth import get_current_active_user
from src.models import Role, Device, DeviceCreate, DeviceRead
from src.crud import devices as device_crud
# Define the router with admin-only access
router = APIRouter(
prefix="/devices",
tags=["Devices"],
dependencies=[Depends(get_current_active_user(required_roles=[Role.ADMIN]))],
)
@router.post("/", response_model=DeviceRead, status_code=status.HTTP_201_CREATED)
def create_device(
device: DeviceCreate,
db: Session = Depends(get_session)
):
"""
Admin endpoint to register a new RFID hardware device.
This generates a unique API key that the device must use to authenticate.
A device's location must be unique.
"""
# Check if a device with the same location already exists
db_device = device_crud.get_device_by_location(db, location=device.location)
if db_device:
raise HTTPException(
status_code=status.HTTP_400_BAD_REQUEST,
detail=f"A device at location '{device.location}' already exists."
)
db_device = device_crud.create_device(db=db, device=device)
if not db_device:
raise HTTPException(status_code=400, detail="Device already exists (duplicate name or location).")
return db_device
@router.get("/", response_model=List[DeviceRead])
def read_all_devices(
skip: int = 0,
limit: int = 100,
db: Session = Depends(get_session)
):
"""
Admin endpoint to retrieve a list of all registered hardware devices.
"""
return device_crud.get_all_devices(db, skip=skip, limit=limit)
@router.delete("/{device_id}", response_model=DeviceRead)
def delete_device(
device_id: int,
db: Session = Depends(get_session)
):
"""
Admin endpoint to delete/de-authorize a hardware device.
This will render the device's API key invalid.
"""
db_device = device_crud.delete_device(db, device_id=device_id)
if not db_device:
raise HTTPException(
status_code=status.HTTP_404_NOT_FOUND,
detail="Device not found."
)
return db_device
|