curo1305
c45236651b
- Auto-create {service-id}-admin groups at startup (group_bootstrap.py)
- get_service_admin() dep: grants access to superusers OR service group members
- /api/settings/ai and /api/settings/documents/limits now allow service admins
- AI service exposes /plugin/manifest (ai-service-admin access group)
- DocServiceSettingsPage: combined upload limits + watch directory on one page
- ServiceAdminRoute in frontend guards new /apps/documents/settings and /apps/ai/settings
- Single Settings button per app card (visible to admins and service group members)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
68 lines
2.5 KiB
Python
68 lines
2.5 KiB
Python
import asyncio
|
|
from contextlib import asynccontextmanager
|
|
|
|
from fastapi import FastAPI
|
|
from fastapi.middleware.cors import CORSMiddleware
|
|
|
|
from app.core.app_config import seed_builtin_themes
|
|
from app.core.config import settings
|
|
from app.database import AsyncSessionLocal
|
|
from app.routers import admin, auth, categories_proxy, documents_proxy, groups, plugins, profile, services, users
|
|
from app.routers import settings as settings_router
|
|
from app.services.group_bootstrap import ensure_service_admin_groups
|
|
from app.services.service_health import check_all, health_check_loop, register_services
|
|
|
|
|
|
@asynccontextmanager
|
|
async def lifespan(app: FastAPI):
|
|
await asyncio.to_thread(seed_builtin_themes)
|
|
register_services(
|
|
doc_service_url=settings.DOC_SERVICE_URL,
|
|
ai_service_url=settings.AI_SERVICE_URL,
|
|
)
|
|
# Create <service-id>-admin groups for every registered service (idempotent)
|
|
async with AsyncSessionLocal() as db:
|
|
await ensure_service_admin_groups(db)
|
|
# Run an initial check immediately so the first API response is accurate
|
|
await check_all()
|
|
task = asyncio.create_task(health_check_loop())
|
|
yield
|
|
task.cancel()
|
|
try:
|
|
await task
|
|
except asyncio.CancelledError:
|
|
pass
|
|
|
|
|
|
app = FastAPI(title=settings.PROJECT_NAME, version="0.1.0", lifespan=lifespan)
|
|
|
|
app.add_middleware(
|
|
CORSMiddleware,
|
|
allow_origins=settings.CORS_ORIGINS,
|
|
allow_credentials=True,
|
|
allow_methods=["*"],
|
|
allow_headers=["*"],
|
|
)
|
|
|
|
app.include_router(auth.router, prefix="/api/auth", tags=["auth"])
|
|
app.include_router(users.router, prefix="/api/users", tags=["users"])
|
|
app.include_router(profile.router, prefix="/api/profile", tags=["profile"])
|
|
app.include_router(admin.router, prefix="/api/admin", tags=["admin"])
|
|
app.include_router(groups.router, prefix="/api/admin/groups", tags=["admin"])
|
|
app.include_router(settings_router.router, prefix="/api/settings", tags=["settings"])
|
|
app.include_router(services.router, prefix="/api/services", tags=["services"])
|
|
app.include_router(plugins.router, prefix="/api/plugins", tags=["plugins"])
|
|
# categories_proxy MUST be registered before documents_proxy —
|
|
# otherwise /api/documents/{path:path} swallows /api/documents/categories/*
|
|
app.include_router(
|
|
categories_proxy.router,
|
|
prefix="/api/documents/categories",
|
|
tags=["categories"],
|
|
)
|
|
app.include_router(documents_proxy.router, prefix="/api/documents", tags=["documents"])
|
|
|
|
|
|
@app.get("/api/health")
|
|
def health():
|
|
return {"status": "ok"}
|