Lizandro GuarnizoandClaude Sonnet 4.6
c20e1a7476
- Tabla activity_log en SQLite (migración automática) - Registra: login, login_fallido, rda_enviado, rda_masivo, rda_directo, automation_run, contrato_creado, contrato_editado, contrato_toggle - Endpoint GET /logs/actividad con filtros por usuario, acción y fecha - UI /logs/actividad con badges de color por tipo de acción - Enlace "Actividad" en navegación lateral Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
100 lines
3.4 KiB
Python
100 lines
3.4 KiB
Python
from fastapi import APIRouter, Request, Form, Depends, HTTPException
|
|
from fastapi.responses import RedirectResponse, JSONResponse
|
|
from app.database import get_connection
|
|
from app.auth import hash_password, verify_password, create_token, get_current_user
|
|
from app.utils.activity import log_activity, get_ip
|
|
|
|
router = APIRouter(prefix="/auth", tags=["auth"])
|
|
|
|
|
|
@router.get("/login")
|
|
async def login_page(request: Request):
|
|
return request.app.state.templates.TemplateResponse("login.html", {"request": request})
|
|
|
|
|
|
@router.get("/register")
|
|
async def register_page(request: Request):
|
|
return request.app.state.templates.TemplateResponse("register.html", {"request": request})
|
|
|
|
|
|
@router.post("/register")
|
|
async def register(
|
|
request: Request,
|
|
username: str = Form(...),
|
|
email: str = Form(...),
|
|
password: str = Form(...),
|
|
confirm_password: str = Form(...),
|
|
):
|
|
if password != confirm_password:
|
|
return request.app.state.templates.TemplateResponse("register.html", {
|
|
"request": request, "error": "Las contraseñas no coinciden"
|
|
})
|
|
|
|
conn = get_connection()
|
|
try:
|
|
existing = conn.execute(
|
|
"SELECT id FROM users WHERE username = ? OR email = ?",
|
|
(username, email)
|
|
).fetchone()
|
|
if existing:
|
|
return request.app.state.templates.TemplateResponse("register.html", {
|
|
"request": request, "error": "Usuario o email ya registrado"
|
|
})
|
|
|
|
conn.execute(
|
|
"INSERT INTO users (username, email, password_hash) VALUES (?, ?, ?)",
|
|
(username, email, hash_password(password))
|
|
)
|
|
conn.commit()
|
|
return RedirectResponse("/auth/login", status_code=302)
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@router.post("/login")
|
|
async def login(
|
|
request: Request,
|
|
username: str = Form(...),
|
|
password: str = Form(...),
|
|
):
|
|
conn = get_connection()
|
|
try:
|
|
user = conn.execute(
|
|
"SELECT * FROM users WHERE username = ?", (username,)
|
|
).fetchone()
|
|
if not user or not verify_password(password, user["password_hash"]):
|
|
log_activity(0, username, "login_fallido", f"Intento fallido desde {get_ip(request)}", get_ip(request))
|
|
return request.app.state.templates.TemplateResponse("login.html", {
|
|
"request": request, "error": "Usuario o contraseña incorrectos"
|
|
})
|
|
|
|
log_activity(user["id"], user["username"], "login", f"Inicio de sesión", get_ip(request))
|
|
token = create_token(user["id"], user["username"])
|
|
resp = RedirectResponse("/dashboard", status_code=302)
|
|
resp.set_cookie(key="token", value=token, httponly=True)
|
|
return resp
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@router.get("/logout")
|
|
async def logout():
|
|
resp = RedirectResponse("/auth/login", status_code=302)
|
|
resp.delete_cookie("token")
|
|
return resp
|
|
|
|
|
|
@router.post("/api/login")
|
|
async def api_login(username: str = Form(...), password: str = Form(...)):
|
|
conn = get_connection()
|
|
try:
|
|
user = conn.execute(
|
|
"SELECT * FROM users WHERE username = ?", (username,)
|
|
).fetchone()
|
|
if not user or not verify_password(password, user["password_hash"]):
|
|
raise HTTPException(status_code=401, detail="Invalid credentials")
|
|
token = create_token(user["id"], user["username"])
|
|
return {"access_token": token, "token_type": "bearer"}
|
|
finally:
|
|
conn.close()
|