Mukan Erkin
2498e75594
FastAPI + PostgreSQL 16. KYC, issue sistemi, permission/group yönetimi, session yönetimi, API client auth (kışla kapısı), officials/persons CRUD. Migration 0001–0013 dahil.
25 lines
878 B
Python
25 lines
878 B
Python
from fastapi import Depends, HTTPException, Security
|
||
from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
|
||
from psycopg import AsyncConnection
|
||
from mm_api.db import get_conn
|
||
import mm_api.services.auth as auth_svc
|
||
|
||
bearer = HTTPBearer(auto_error=False)
|
||
|
||
|
||
async def current_user(
|
||
credentials: HTTPAuthorizationCredentials = Security(bearer),
|
||
conn: AsyncConnection = Depends(get_conn),
|
||
) -> dict:
|
||
if not credentials:
|
||
raise HTTPException(401, "Kimlik doğrulama gerekli")
|
||
user = await auth_svc.get_current_user(conn, credentials.credentials)
|
||
if not user:
|
||
raise HTTPException(401, "Geçersiz veya süresi dolmuş token")
|
||
return user
|
||
|
||
|
||
async def verified_user(user: dict = Depends(current_user)) -> dict:
|
||
if user["kyc_status"] != "verified":
|
||
raise HTTPException(403, "Kimlik doğrulaması gerekli")
|
||
return user
|