Browse the data

1from fastapi import FastAPI, HTTPException, Header
2from pydantic import BaseModel
3from typing import Optional
4import secrets
5 
6app = FastAPI()
7 
8users = {}
9employees = {}
10timesheets = {}
11tokens = {}
12user_id_counter = 1
13employee_id_counter = 1
14timesheet_id_counter = 1
15 
16class SignupRequest(BaseModel):
17    username: str
18    password: str
19    role: str = "employee"
20 
21class LoginRequest(BaseModel):
22    username: str
23    password: str
24 
25class EmployeeCreate(BaseModel):
26    name: str
27 
28class TimesheetCreate(BaseModel):
29    employee_id: int
30    hours: float
31    description: str
32 
33class TimesheetReview(BaseModel):
34    status: str
35 
36def get_current_user(token: str):
37    if token not in tokens:
38        raise HTTPException(status_code=401, detail="Invalid token")
39    return tokens[token]
40 
41@app.post("/signup")
42def signup(req: SignupRequest):
43    global user_id_counter
44    for u in users.values():
45        if u["username"] == req.username:
46            raise HTTPException(status_code=400, detail="Username already exists")
47    user_id = user_id_counter
48    user_id_counter += 1
49    users[user_id] = {"id": user_id, "username": req.username, "password": req.password, "role": req.role}
50    return {"id": user_id, "username": req.username, "role": req.role}
51 
52@app.post("/login")
53def login(req: LoginRequest):
54    for u in users.values():
55        if u["username"] == req.username and u["password"] == req.password:
56            token = secrets.token_hex(16)
57            tokens[token] = u
58            return {"token": token}
59    raise HTTPException(status_code=401, detail="Invalid credentials")
60 
61@app.post("/employees")
62def create_employee(req: EmployeeCreate, authorization: Optional[str] = Header(None)):
63    if not authorization:
64        raise HTTPException(status_code=401, detail="Missing auth header")
65    token = authorization.replace("Bearer ", "")
66    user = get_current_user(token)
67    global employee_id_counter
68    emp_id = employee_id_counter
69    employee_id_counter += 1
70    employees[emp_id] = {"id": emp_id, "name": req.name}
71    return employees[emp_id]
72 
73@app.get("/employees/{employee_id}")
74def get_employee(employee_id: int, authorization: Optional[str] = Header(None)):
75    if not authorization:
76        raise HTTPException(status_code=401, detail="Missing auth header")
77    token = authorization.replace("Bearer ", "")
78    get_current_user(token)
79    if employee_id not in employees:
80        raise HTTPException(status_code=404, detail="Employee not found")
81    return employees[employee_id]
82 
83@app.post("/timesheets")
84def create_timesheet(req: TimesheetCreate, authorization: Optional[str] = Header(None)):
85    if not authorization:
86        raise HTTPException(status_code=401, detail="Missing auth header")
87    token = authorization.replace("Bearer ", "")
88    user = get_current_user(token)
89    if req.employee_id not in employees:
90        raise HTTPException(status_code=404, detail="Employee not found")
91    global timesheet_id_counter
92    ts_id = timesheet_id_counter
93    timesheet_id_counter += 1
94    timesheets[ts_id] = {
95        "id": ts_id,
96        "employee_id": req.employee_id,
97        "hours": req.hours,
98        "description": req.description,
99        "status": "pending"
100    }
101    return timesheets[ts_id]
102 
103@app.get("/timesheets/{timesheet_id}")
104def get_timesheet(timesheet_id: int, authorization: Optional[str] = Header(None)):
105    if not authorization:
106        raise HTTPException(status_code=401, detail="Missing auth header")
107    token = authorization.replace("Bearer ", "")
108    get_current_user(token)
109    if timesheet_id not in timesheets:
110        raise HTTPException(status_code=404, detail="Timesheet not found")
111    return timesheets[timesheet_id]
112 
113@app.post("/timesheets/{timesheet_id}/review")
114def review_timesheet(timesheet_id: int, req: TimesheetReview, authorization: Optional[str] = Header(None)):
115    if not authorization:
116        raise HTTPException(status_code=401, detail="Missing auth header")
117    token = authorization.replace("Bearer ", "")
118    user = get_current_user(token)
119    if user["role"] != "manager":
120        raise HTTPException(status_code=403, detail="Only managers can review")
121    if timesheet_id not in timesheets:
122        raise HTTPException(status_code=404, detail="Timesheet not found")
123    timesheets[timesheet_id]["status"] = req.status
124    return timesheets[timesheet_id]

1fastapi
2uvicorn