Browse the data

1from fastapi import FastAPI, HTTPException, Header
2from pydantic import BaseModel
3from typing import Optional
4import hashlib
5import secrets
6 
7app = FastAPI()
8 
9users = {}
10tokens = {}
11plans = {}
12next_user_id = 1
13next_plan_id = 1
14 
15class SignupRequest(BaseModel):
16    username: str
17    password: str
18 
19class LoginRequest(BaseModel):
20    username: str
21    password: str
22 
23class PlanCreate(BaseModel):
24    name: str
25    difficulty: str
26    duration: int
27 
28class PlanUpdate(BaseModel):
29    name: Optional[str] = None
30    difficulty: Optional[str] = None
31    duration: Optional[int] = None
32    user_access: Optional[list[str]] = None
33 
34def hash_password(password: str) -> str:
35    return hashlib.sha256(password.encode()).hexdigest()
36 
37def generate_token() -> str:
38    return secrets.token_hex(32)
39 
40def get_current_user(authorization: str = Header(None)):
41    if not authorization:
42        raise HTTPException(status_code=401, detail="Missing authorization header")
43    token = authorization.replace("Bearer ", "")
44    if token not in tokens:
45        raise HTTPException(status_code=401, detail="Invalid token")
46    return tokens[token]
47 
48@app.post("/signup")
49def signup(req: SignupRequest):
50    global next_user_id
51    if req.username in [u["username"] for u in users.values()]:
52        raise HTTPException(status_code=400, detail="Username already exists")
53    user_id = next_user_id
54    next_user_id += 1
55    users[user_id] = {
56        "id": user_id,
57        "username": req.username,
58        "password_hash": hash_password(req.password)
59    }
60    return {"id": user_id, "username": req.username}
61 
62@app.post("/login")
63def login(req: LoginRequest):
64    for user_id, user in users.items():
65        if user["username"] == req.username and user["password_hash"] == hash_password(req.password):
66            token = generate_token()
67            tokens[token] = user_id
68            return {"token": token}
69    raise HTTPException(status_code=401, detail="Invalid credentials")
70 
71@app.get("/plans/{plan_id}")
72def get_plan(plan_id: int):
73    if plan_id not in plans:
74        raise HTTPException(status_code=404, detail="Plan not found")
75    return plans[plan_id]
76 
77@app.post("/plans")
78def create_plan(plan: PlanCreate, authorization: str = Header(None)):
79    user_id = get_current_user(authorization)
80    global next_plan_id
81    plan_id = next_plan_id
82    next_plan_id += 1
83    plans[plan_id] = {
84        "id": plan_id,
85        "name": plan.name,
86        "difficulty": plan.difficulty,
87        "duration": plan.duration,
88        "user_access": [user_id],
89        "created_by": user_id
90    }
91    return plans[plan_id]
92 
93@app.put("/plans/{plan_id}")
94def update_plan(plan_id: int, plan: PlanUpdate, authorization: str = Header(None)):
95    user_id = get_current_user(authorization)
96    if plan_id not in plans:
97        raise HTTPException(status_code=404, detail="Plan not found")
98    if user_id not in plans[plan_id]["user_access"]:
99        raise HTTPException(status_code=403, detail="Access denied")
100    if plan.name is not None:
101        plans[plan_id]["name"] = plan.name
102    if plan.difficulty is not None:
103        plans[plan_id]["difficulty"] = plan.difficulty
104    if plan.duration is not None:
105        plans[plan_id]["duration"] = plan.duration
106    if plan.user_access is not None:
107        plans[plan_id]["user_access"] = plan.user_access
108    return plans[plan_id]

1fastapi
2uvicorn