Cj. ZdZddlZddlmZmZmZddlmZmZddlm Z ddl Z ddl Z ddl Z ddl mZmZmZmZmZddlmZddlmZmZdd lmZmZej6j9d d Zd Zd ZdZ edZ!GddeZ"GddeZ#GddeZ$GddeZ%eddZ&e&jOedgddgdge dZ(e dZ)d e*d!e*fd"Z+d e*d#e*d!e,fd$Z-d%e*d&e*d'e*d(ee*d!e*f d)Z.d*e*d!e/fd+Z0edfd,ee*d!e/fd-Z1ee1fd!e/fd.Z2e&j9d/d0Z3e&j9d1d2Z4e&jkd3d4e"fd5Z6e&jkd6ee1fd7Z7e&j9d8ee1fd9Z8e&jkd:ee1fd4e#fd;Z9e&jkd<ee2fd4e$fd=Z:e&jkd>ee2fd4e%fd?Z;e&j9d@ee2fdAZ>3C D K KG TTr&hashedc|r|dk(ry tj|jd|jdS#t$rYywxYw)NMIGRATED_NO_PASSWORDFrQ)rRcheckpwrTrC)rrXs r'verify_passwordr\asJ V55~~hoog6 g8NOO s3> A  A r5rr0r1c tjtj}||||dt |j t |t tzj d}tj|ttS)Nweb_anon)hours)subrr0r1roleiatexp) algorithm) rnowrutcint timestampr JWT_EXP_HOURSrrT JWT_SECRET JWT_ALGORITHM)r5rr0r1repayloads r' make_tokenrmjsh ,,x|| $C$3==?#C)-88CCEFG ::gz] CCr&tokenc tj|ttgS#t$r}t dd|d}~wwxYw)N) algorithmsuToken inválido:  status_codedetail)rrVrjrkrr )rnes r' decode_tokenrvxsDMzz%HH M6Gs4KLLMs # A<A authorizationc|r|jjds tdd|jdddj }t |}|S)Nzbearer rqz Token ausenterr )lower startswithr splitstriprv)rwrnrls r'get_current_userrsW  3 3 5 @ @ KODD   Q ' * 0 0 2E5!G Nr&cF|jddvr tdd|S)Nr0)rrz!Acesso restrito a administradoresrr)getr currents r' require_adminrs'{{;'??4WXX Nr&/cddddS)Nz demandas-authokr6)servicer r8r%r%r&r'rootrs&$7 KKr&z/healthc t5}|jd|jddddddS#1swYxYw#t$r}t dd|d}~wwxYw)NzSELECT 1r)r dbiz db error: rr)rNexecutefetchonerCr )rMrus r'healthrsmF [ C KK # LLN d++   Fj4DEEFs+ A"; AAA A%A  A%z /auth/loginreqc*t5}|jd|jf|j}ddds t ddt |j |ds t dd|jddur t dd t|d }|jd xsd }|jd rt|d nd}t||d||}|d||d|jd||ddS#1swYxYw)Nz SELECT u.id, u.email, u.password, p.nome, p.permissao, p.workspace_id, p.ativo FROM auth_users u LEFT JOIN profiles p ON p.id = u.id WHERE lower(u.email) = lower(%s) rquEmail ou senha inválidosrrrativoFruUsuário desativadoidr0rr1rbearerr.rrr.r0r1) access_token token_typeuser) rNrrrr r\rrr#rm)rrMrowr5r0r1rns r'loginrs    YYL lln  4OPP 3<<Z 94OPP www5 4IJJ#d)nG $5 I/2ww~/F3s>*+DL wG i FE\GGFO"(    9  s .D  Dz /auth/logoutc ddiS)Nr rr%rs r'logoutrs d r&z/auth/mec \|d}t5}|jd|f|j}ddds tddt |d|d|d|d |d |d |d rt |d nd|d |dr|dj d Sdd S#1swYoxYw)Nr`z SELECT id, nome, email, cargo, permissao, avatar_url, workspace_id, ativo, criado_em FROM profiles WHERE id = %s uProfile não encontradorrrr.rr/r0 avatar_urlr1r criado_em rr.rr/r0rr1rr)rNrrr r# isoformat)rr5rMrs r'mersenG     J  lln  4MNN#d)nF WW%,'474GC/0TW585ES%//1  LP    s $B""B+z/auth/change-passwordct|jdkr tdd|d}t5}|j d|f|j }|s tddt |j|d s td d t|j}|j d ||fdddd diS#1swYd diSxYw)N$Senha deve ter ao menos 6 caracteresrrr`z-SELECT password FROM auth_users WHERE id = %srUsuário não encontradorrqzSenha atual incorreta1UPDATE auth_users SET password = %s WHERE id = %sr r) lenr+r rNrrr\r*rW)rrr5rMrnew_hashs r'change_passwordrs 3  q 4Z[[enG  ^ CgZPllnC8RS Ss33S_EC8OP P !1!12 G(T[I\] ^ d  ^ d s BCCz/auth/admin/create-userc t|jdkr tdd|jdk(r!|j ddk7r tdd|j xs|j d }|j dd k(r!||j d k7r tdd t |j}t5}|jd |jf|jr td d|jd|j|f|jd}|jd||j|j|j|j|fdddt|j|j|j|r t|dSddS#1swYGxYw)Nrrrrrrr0rz)Apenas super_admin pode criar super_adminr1ru4Admin só pode criar usuários no próprio workspacez8SELECT id FROM auth_users WHERE lower(email) = lower(%s)iuEmail já cadastradozEINSERT INTO auth_users (email, password) VALUES (%s, %s) RETURNING idra INSERT INTO profiles (id, nome, email, cargo, permissao, workspace_id, ativo) VALUES (%s, %s, %s, %s, %s, %s, true) ON CONFLICT (id) DO UPDATE SET nome = EXCLUDED.nome, email = EXCLUDED.email, cargo = EXCLUDED.cargo, permissao = EXCLUDED.permissao, workspace_id = EXCLUDED.workspace_id r)rrr r0rr1rWrNrrrr.r/r#)rrr1pwd_hashrMnew_ids r'admin_create_userrs 3<<14Z[[ }} %'++k*Bm*S4_``##Bw{{>'BL{{;7*|w{{>?Z/Z4jkkS\\*H   NQTQZQZP\] <<>C8NO O S YY ! %  SXXsyy#))S]]L Q  :&k]]-9L)   @D  9  s B,F;;Gz/auth/admin/set-passwordcDt|jdkr tddt5}|j ddk(rr|j d|j f|j}|s tdd |d rt|d nd}||j d k7r td d t|j}|j d ||j f|jdk(r tdd  dddddiS#1swYddiSxYw)Nrrrrrr0rz/SELECT workspace_id FROM profiles WHERE id = %srrr1ru4Admin só pode redefinir senha do próprio workspacerrr r) rr+r rNrrr5rr#rWrowcount)rrrMr target_wsrs r'admin_set_passwordr9s 3  q 4Z[[ T ;;{ #w . KKICKK> Z,,.C#rs 22$% CC2(ZZ^^13W X   # C D 9 I 'Y'i OW5%%%   UCUCUc34 D DC DC DxPS} DY\ DMMM5;4LHSMT""23LLFF-'|''T.+, '(: !"8?@P8Q.#& #$;B=;Q313%3l $%=D]=S3&. $]3&&r&