ProfessorNovaandClaude Opus 5
784b76baf7
Self-hosted knowledge management for SMEs: a split-screen Markdown editor whose sections an LLM refines while you write, and RAG question answering over the documents that result. FastAPI + Postgres/pgvector on the back, SvelteKit on the front, everything OpenAI-compatible and self-hostable. Squashed into a single commit; the development history stays local. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CA43ZJda8Rbp2hKXNy8f6b
41 lines
1.2 KiB
Python
41 lines
1.2 KiB
Python
import uuid
|
|
from typing import Annotated
|
|
|
|
from fastapi import Depends, Request
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
|
|
from app.auth.sessions import COOKIE_NAME, get_valid_session
|
|
from app.db import get_db
|
|
from app.errors import ApiError
|
|
from app.models import AuthSession, User, UserRole
|
|
|
|
|
|
async def get_current_auth_session(
|
|
request: Request, db: Annotated[AsyncSession, Depends(get_db)]
|
|
) -> AuthSession:
|
|
raw = request.cookies.get(COOKIE_NAME)
|
|
if raw is None:
|
|
raise ApiError(401, "Not authenticated.", "not_authenticated")
|
|
try:
|
|
session_id = uuid.UUID(raw)
|
|
except ValueError:
|
|
raise ApiError(401, "Not authenticated.", "not_authenticated") from None
|
|
session = await get_valid_session(db, session_id)
|
|
if session is None:
|
|
raise ApiError(401, "Not authenticated.", "not_authenticated")
|
|
return session
|
|
|
|
|
|
async def get_current_user(
|
|
session: Annotated[AuthSession, Depends(get_current_auth_session)],
|
|
) -> User:
|
|
return session.user
|
|
|
|
|
|
async def require_admin(
|
|
user: Annotated[User, Depends(get_current_user)],
|
|
) -> User:
|
|
if user.role != UserRole.admin:
|
|
raise ApiError(403, "Admin privileges required.", "forbidden")
|
|
return user
|