Browse the data

1from fastapi import FastAPI, HTTPException, Header
2from pydantic import BaseModel
3from typing import Optional
4import secrets
5import time
6 
7app = FastAPI()
8 
9users = {}
10tokens = {}
11artists = {}
12artist_id_seq = 0
13 
14class SignupRequest(BaseModel):
15    username: str
16    password: str
17    role: str = "viewer"
18 
19class LoginRequest(BaseModel):
20    username: str
21    password: str
22 
23class ArtistCreate(BaseModel):
24    name: str
25    genre: str = ""
26    bio: str = ""
27    subscription_tier: str = "free"
28 
29class ArtistUpdate(BaseModel):
30    name: Optional[str] = None
31    genre: Optional[str] = None
32    bio: Optional[str] = None
33    subscription_tier: Optional[str] = None
34 
35def get_current_user(authorization: str = Header(...)):
36    if not authorization.startswith("Bearer "):
37        raise HTTPException(status_code=401, detail="Invalid auth header")
38    token = authorization.split(" ")[1]
39    if token not in tokens:
40        raise HTTPException(status_code=401, detail="Invalid token")
41    return tokens[token]
42 
43@app.post("/signup")
44def signup(req: SignupRequest):
45    if req.username in users:
46        raise HTTPException(status_code=400, detail="User exists")
47    users[req.username] = {"password": req.password, "role": req.role}
48    return {"ok": True}
49 
50@app.post("/login")
51def login(req: LoginRequest):
52    user = users.get(req.username)
53    if not user or user["password"] != req.password:
54        raise HTTPException(status_code=401, detail="Bad credentials")
55    token = secrets.token_hex(32)
56    tokens[token] = {"username": req.username, "role": user["role"]}
57    return {"token": token}
58 
59@app.get("/artists/{artist_id}")
60def get_artist(artist_id: int, authorization: str = Header(...)):
61    get_current_user(authorization)
62    if artist_id not in artists:
63        raise HTTPException(status_code=404, detail="Artist not found")
64    return artists[artist_id]
65 
66@app.post("/artists")
67def create_artist(artist: ArtistCreate, authorization: str = Header(...)):
68    user = get_current_user(authorization)
69    if user["role"] not in ("admin", "curator"):
70        raise HTTPException(status_code=403, detail="Forbidden")
71    global artist_id_seq
72    artist_id_seq += 1
73    artists[artist_id_seq] = {
74        "id": artist_id_seq,
75        "name": artist.name,
76        "genre": artist.genre,
77        "bio": artist.bio,
78        "subscription_tier": artist.subscription_tier,
79        "created_by": user["username"],
80        "updated_at": time.time()
81    }
82    return artists[artist_id_seq]
83 
84@app.patch("/artists/{artist_id}")
85def update_artist(artist_id: int, update: ArtistUpdate, authorization: str = Header(...)):
86    user = get_current_user(authorization)
87    if user["role"] not in ("admin", "curator"):
88        raise HTTPException(status_code=403, detail="Forbidden")
89    if artist_id not in artists:
90        raise HTTPException(status_code=404, detail="Artist not found")
91    artist = artists[artist_id]
92    if update.name is not None:
93        artist["name"] = update.name
94    if update.genre is not None:
95        artist["genre"] = update.genre
96    if update.bio is not None:
97        artist["bio"] = update.bio
98    if update.subscription_tier is not None:
99        artist["subscription_tier"] = update.subscription_tier
100    artist["updated_at"] = time.time()
101    return artist

1fastapi
2uvicorn