JiuContinent
9b87c6a7a3
feat: 添加飞书集成和改进安全配置 - 集成 lark-oapi 库以支持飞书功能 - 改进 CORS 配置验证器以支持 JSON 格式输入 - 添加安全凭证检查逻辑以防止跨域安全问题 - 在 DirectLLMAdapter 中增加响应解析异常处理 fix: 增强查询参数验证和分页限制 - 为多个路由添加 Query 参数验证器 - 实现 bounded_limit 和 bounded_offset 辅助函数 - 设置查询限制范围为 1-500 之间 - 使用 secrets.compare_digest 提升令牌验证安全性 refactor: 调整文档忽略规则和测试配置 - 更新 .gitignore 文件中的文档路径配置 - 在 smoke 测试中添加必要的环境变量配置 - 重构配置验证器以提高类型兼容性 ```
53 lines
1.7 KiB
Python
53 lines
1.7 KiB
Python
from fastapi import APIRouter, Depends, Query
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.core.database import get_db
|
|
from app.core.security import ApiPrincipal, require_api_key, require_approval_api_key
|
|
from app.modules.approvals.schemas import ApprovalCreate, ApprovalDecision, ApprovalRead
|
|
from app.modules.approvals.service import ApprovalService
|
|
|
|
router = APIRouter(dependencies=[Depends(require_api_key)])
|
|
|
|
|
|
@router.post("", response_model=ApprovalRead)
|
|
def create_approval(
|
|
payload: ApprovalCreate,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_api_key),
|
|
):
|
|
return ApprovalService(db).create(payload, applicant=principal.actor)
|
|
|
|
|
|
@router.get("", response_model=list[ApprovalRead])
|
|
def list_approvals(
|
|
status: str | None = None,
|
|
limit: int = Query(default=100, ge=1, le=500),
|
|
db: Session = Depends(get_db),
|
|
):
|
|
return ApprovalService(db).list(status_filter=status, limit=limit)
|
|
|
|
|
|
@router.get("/{ticket_id}", response_model=ApprovalRead)
|
|
def get_approval(ticket_id: str, db: Session = Depends(get_db)):
|
|
return ApprovalService(db).get_by_ticket(ticket_id)
|
|
|
|
|
|
@router.post("/{ticket_id}/approve", response_model=ApprovalRead)
|
|
def approve(
|
|
ticket_id: str,
|
|
payload: ApprovalDecision,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_approval_api_key),
|
|
):
|
|
return ApprovalService(db).decide(ticket_id, principal.actor, True, payload.comment)
|
|
|
|
|
|
@router.post("/{ticket_id}/reject", response_model=ApprovalRead)
|
|
def reject(
|
|
ticket_id: str,
|
|
payload: ApprovalDecision,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_approval_api_key),
|
|
):
|
|
return ApprovalService(db).decide(ticket_id, principal.actor, False, payload.comment)
|