JiuContinent
e3a4a6d426
feat: 添加审批系统和遗留查询功能支持 - 添加审批系统，包括审批请求模型、服务和路由，支持创建、批准和拒绝操作 - 实现审批API密钥验证机制，区分普通API和审批API访问权限 - 添加Alembic数据库迁移支持，更新初始schema版本并添加降级保护 - 配置遗留MySQL查询白名单机制，支持命名查询和参数化查询 - 更新业务服务以集成审批流程，高风险操作需要审批票证 - 调整安全认证使用常量定义的HTTP头，增强安全性比较 - 优化.gitignore配置，添加日志目录排除和文档文件包含规则 - 更新Dockerfile添加alembic依赖包，修复OpenClaw适配器错误处理 ```
53 lines
1.7 KiB
Python
53 lines
1.7 KiB
Python
from fastapi import APIRouter, Depends
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.core.database import get_db
|
|
from app.core.security import ApiPrincipal, require_api_key, require_approval_api_key
|
|
from app.modules.approvals.schemas import ApprovalCreate, ApprovalDecision, ApprovalRead
|
|
from app.modules.approvals.service import ApprovalService
|
|
|
|
router = APIRouter(dependencies=[Depends(require_api_key)])
|
|
|
|
|
|
@router.post("", response_model=ApprovalRead)
|
|
def create_approval(
|
|
payload: ApprovalCreate,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_api_key),
|
|
):
|
|
return ApprovalService(db).create(payload, applicant=principal.actor)
|
|
|
|
|
|
@router.get("", response_model=list[ApprovalRead])
|
|
def list_approvals(
|
|
status: str | None = None,
|
|
limit: int = 100,
|
|
db: Session = Depends(get_db),
|
|
):
|
|
return ApprovalService(db).list(status_filter=status, limit=limit)
|
|
|
|
|
|
@router.get("/{ticket_id}", response_model=ApprovalRead)
|
|
def get_approval(ticket_id: str, db: Session = Depends(get_db)):
|
|
return ApprovalService(db).get_by_ticket(ticket_id)
|
|
|
|
|
|
@router.post("/{ticket_id}/approve", response_model=ApprovalRead)
|
|
def approve(
|
|
ticket_id: str,
|
|
payload: ApprovalDecision,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_approval_api_key),
|
|
):
|
|
return ApprovalService(db).decide(ticket_id, principal.actor, True, payload.comment)
|
|
|
|
|
|
@router.post("/{ticket_id}/reject", response_model=ApprovalRead)
|
|
def reject(
|
|
ticket_id: str,
|
|
payload: ApprovalDecision,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_approval_api_key),
|
|
):
|
|
return ApprovalService(db).decide(ticket_id, principal.actor, False, payload.comment)
|