Private
Public Access
ksmithandClaude Sonnet 5
c79e96dd48
Adds room_invites table + migration, owner/admin/member role enforcement (require_room_role), and endpoints for private room creation, room management (update/delete/leave/transfer-ownership/change-role/remove-member), and the invite lifecycle (create/list/accept/decline/revoke). Registration stays invite-only via the CLI from Phase 1 — this is a separate, room-level invite system for adding existing users to private rooms. Frontend is untouched: the UI redesign is happening separately, so this phase is backend + tests only (35 passing). Verified no regressions in the Phase 1 open-room/WebSocket flow via manual smoke test. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
49 lines
1.5 KiB
Python
49 lines
1.5 KiB
Python
import uuid
|
|
|
|
from fastapi import Depends, HTTPException, Request
|
|
from sqlalchemy import select
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
|
|
from app.database import get_db
|
|
from app.models import RoomMembership, RoomRole, User
|
|
|
|
_ROLE_RANK = {RoomRole.member: 0, RoomRole.admin: 1, RoomRole.owner: 2}
|
|
|
|
|
|
async def get_current_user(
|
|
request: Request, db: AsyncSession = Depends(get_db)
|
|
) -> User:
|
|
user_id = request.session.get("user_id")
|
|
if not user_id:
|
|
raise HTTPException(status_code=401, detail="Not authenticated")
|
|
|
|
user = await db.get(User, uuid.UUID(user_id))
|
|
if user is None:
|
|
request.session.clear()
|
|
raise HTTPException(status_code=401, detail="Not authenticated")
|
|
|
|
return user
|
|
|
|
|
|
async def require_room_member(
|
|
room_id: uuid.UUID, user: User, db: AsyncSession
|
|
) -> RoomMembership:
|
|
result = await db.execute(
|
|
select(RoomMembership).where(
|
|
RoomMembership.room_id == room_id, RoomMembership.user_id == user.id
|
|
)
|
|
)
|
|
membership = result.scalar_one_or_none()
|
|
if membership is None:
|
|
raise HTTPException(status_code=403, detail="Not a member of this room")
|
|
return membership
|
|
|
|
|
|
async def require_room_role(
|
|
room_id: uuid.UUID, user: User, db: AsyncSession, minimum: RoomRole
|
|
) -> RoomMembership:
|
|
membership = await require_room_member(room_id, user, db)
|
|
if _ROLE_RANK[membership.role] < _ROLE_RANK[minimum]:
|
|
raise HTTPException(status_code=403, detail="Insufficient room role")
|
|
return membership
|