v6ole
a1886074dd
后端: FastAPI + SQLAlchemy 2.0 (async) + Alembic + MinIO + Casdoor + 企微 前端: Vue 3 + Vite + TypeScript + Element Plus + Pinia 功能清单: - 8 张数据表自动建表 / Casdoor OIDC 登录 / 企微静默登录 - 双布局: 移动端(填报) + PC端(汇总管理) - 拜访记录 CRUD + MinIO 照片直传 + 缩略图预览 + 同访人草稿 - 今日纪要 (6 分类) / 工作计划 / 小微商机 / 要客拜访 CRUD - 客户档案: 备注/收支费用/联系人/归属分配/批量转移 - 客户导入导出 + 模板下载 + 搜索/分页/筛选 - 仪表盘: 四卡统计 + 填报进度 (拜访+纪要双维度) - 周报详情: 五 Tab + 按人/客户筛选 + 时间轴 - 用户管理 / 客户经理 PC 端工作台 - 企微: 催办/公告/定时提醒 / 时区修正 - Docker 部署配置 Co-Authored-By: Claude <noreply@anthropic.com>
32 lines
1.2 KiB
Python
32 lines
1.2 KiB
Python
from fastapi import Depends, HTTPException, status
|
|
from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
|
|
from app.utils.security import decode_token
|
|
|
|
bearer_scheme = HTTPBearer()
|
|
|
|
|
|
async def get_current_user(credentials: HTTPAuthorizationCredentials = Depends(bearer_scheme)) -> dict:
|
|
payload = decode_token(credentials.credentials)
|
|
if payload is None:
|
|
raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="Invalid or expired token")
|
|
return payload
|
|
|
|
|
|
class RoleChecker:
|
|
def __init__(self, allowed_roles: list[str]):
|
|
self.allowed_roles = allowed_roles
|
|
|
|
async def __call__(self, current_user: dict = Depends(get_current_user)) -> dict:
|
|
role = current_user.get("role", "")
|
|
if role not in self.allowed_roles:
|
|
raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Insufficient permissions")
|
|
return current_user
|
|
|
|
|
|
# Pre-built checkers
|
|
require_manager = RoleChecker(["manager"])
|
|
require_director = RoleChecker(["director"])
|
|
require_leader = RoleChecker(["leader"])
|
|
require_director_or_leader = RoleChecker(["director", "leader"])
|
|
require_any_role = RoleChecker(["manager", "director", "leader"])
|