Browse the data

1from fastapi import FastAPI, HTTPException, Header
2from pydantic import BaseModel
3from typing import Optional
4import secrets
5 
6app = FastAPI()
7 
8# In-memory stores
9users = {}
10tokens = {}
11exhibits = {}
12next_user_id = 1
13next_exhibit_id = 1
14 
15# Simple token auth
16def get_user_from_token(authorization: str = Header(...)):
17    if not authorization.startswith("Bearer "):
18        raise HTTPException(status_code=401, detail="Invalid auth header")
19    token = authorization.split(" ")[1]
20    user_id = tokens.get(token)
21    if user_id is None:
22        raise HTTPException(status_code=401, detail="Invalid token")
23    return user_id
24 
25# Models
26class SignupRequest(BaseModel):
27    username: str
28    password: str
29 
30class LoginRequest(BaseModel):
31    username: str
32    password: str
33 
34class ExhibitCreate(BaseModel):
35    name: str
36    description: str
37    start_date: str
38    end_date: str
39    curator_id: Optional[int] = None
40    is_traveling: bool = False
41 
42class ExhibitUpdate(BaseModel):
43    name: Optional[str] = None
44    description: Optional[str] = None
45    start_date: Optional[str] = None
46    end_date: Optional[str] = None
47    curator_id: Optional[int] = None
48    is_traveling: Optional[bool] = None
49 
50# Auth endpoints
51@app.post("/signup")
52def signup(req: SignupRequest):
53    global next_user_id
54    for u in users.values():
55        if u["username"] == req.username:
56            raise HTTPException(status_code=400, detail="Username taken")
57    user_id = next_user_id
58    next_user_id += 1
59    users[user_id] = {"username": req.username, "password": req.password}
60    return {"user_id": user_id}
61 
62@app.post("/login")
63def login(req: LoginRequest):
64    for uid, u in users.items():
65        if u["username"] == req.username and u["password"] == req.password:
66            token = secrets.token_hex(16)
67            tokens[token] = uid
68            return {"token": token}
69    raise HTTPException(status_code=401, detail="Invalid credentials")
70 
71# Exhibit CRUD
72@app.get("/exhibits/{exhibit_id}")
73def get_exhibit(exhibit_id: int, authorization: str = Header(...)):
74    get_user_from_token(authorization)
75    if exhibit_id not in exhibits:
76        raise HTTPException(status_code=404, detail="Exhibit not found")
77    return exhibits[exhibit_id]
78 
79@app.post("/exhibits")
80def create_exhibit(exhibit: ExhibitCreate, authorization: str = Header(...)):
81    global next_exhibit_id
82    get_user_from_token(authorization)
83    eid = next_exhibit_id
84    next_exhibit_id += 1
85    exhibits[eid] = {
86        "id": eid,
87        "name": exhibit.name,
88        "description": exhibit.description,
89        "start_date": exhibit.start_date,
90        "end_date": exhibit.end_date,
91        "curator_id": exhibit.curator_id,
92        "is_traveling": exhibit.is_traveling
93    }
94    return exhibits[eid]
95 
96@app.patch("/exhibits/{exhibit_id}")
97def update_exhibit(exhibit_id: int, update: ExhibitUpdate, authorization: str = Header(...)):
98    get_user_from_token(authorization)
99    if exhibit_id not in exhibits:
100        raise HTTPException(status_code=404, detail="Exhibit not found")
101    exhibit = exhibits[exhibit_id]
102    if update.name is not None:
103        exhibit["name"] = update.name
104    if update.description is not None:
105        exhibit["description"] = update.description
106    if update.start_date is not None:
107        exhibit["start_date"] = update.start_date
108    if update.end_date is not None:
109        exhibit["end_date"] = update.end_date
110    if update.curator_id is not None:
111        exhibit["curator_id"] = update.curator_id
112    if update.is_traveling is not None:
113        exhibit["is_traveling"] = update.is_traveling
114    return exhibit

1fastapi
2uvicorn