feat: 添加飞书集成和审计API密钥认证 - 在数据库配置中添加飞书模型导入 - 添加审计API密钥配置项和认证中间件 - 实现飞书事件重复处理防止机制 - 为审批路由添加API密钥认证 - 优化AI适配器错误处理并添加JSON解析异常捕获 - 更新测试用例以包含新的认证和事件处理逻辑 ```
60 lines
1.9 KiB
Python
60 lines
1.9 KiB
Python
from fastapi import APIRouter, Depends, Query
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.core.database import get_db
|
|
from app.core.security import ApiPrincipal, require_api_key, require_approval_api_key
|
|
from app.modules.approvals.schemas import ApprovalCreate, ApprovalDecision, ApprovalRead
|
|
from app.modules.approvals.service import ApprovalService
|
|
|
|
router = APIRouter(dependencies=[Depends(require_api_key)])
|
|
|
|
|
|
@router.post("", response_model=ApprovalRead)
|
|
def create_approval(
|
|
payload: ApprovalCreate,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_api_key),
|
|
):
|
|
return ApprovalService(db).create(payload, applicant=principal.actor)
|
|
|
|
|
|
@router.get("", response_model=list[ApprovalRead])
|
|
def list_approvals(
|
|
status: str | None = None,
|
|
limit: int = Query(default=100, ge=1, le=500),
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_approval_api_key),
|
|
):
|
|
_ = principal
|
|
return ApprovalService(db).list(status_filter=status, limit=limit)
|
|
|
|
|
|
@router.get("/{ticket_id}", response_model=ApprovalRead)
|
|
def get_approval(
|
|
ticket_id: str,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_approval_api_key),
|
|
):
|
|
_ = principal
|
|
return ApprovalService(db).get_by_ticket(ticket_id)
|
|
|
|
|
|
@router.post("/{ticket_id}/approve", response_model=ApprovalRead)
|
|
def approve(
|
|
ticket_id: str,
|
|
payload: ApprovalDecision,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_approval_api_key),
|
|
):
|
|
return ApprovalService(db).decide(ticket_id, principal.actor, True, payload.comment)
|
|
|
|
|
|
@router.post("/{ticket_id}/reject", response_model=ApprovalRead)
|
|
def reject(
|
|
ticket_id: str,
|
|
payload: ApprovalDecision,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_approval_api_key),
|
|
):
|
|
return ApprovalService(db).decide(ticket_id, principal.actor, False, payload.comment)
|