7fe4ae5365
✨ Major Features Added: - Complete magical theming and rebranding from LifeRPG to The Wizard's Grimoire - Production-grade React frontend with Tailwind CSS v4 and magical aesthetics - Comprehensive analytics dashboard with Recharts integration (ScryingPortal) - Push notifications system with PWA service worker support - Drag & drop functionality using @dnd-kit for habit reordering - Social features with friends system and leaderboards - Performance optimization tools and monitoring - Mobile app enhancement with PWA installation support 🏗️ Technical Infrastructure: - Advanced service worker with offline support and background sync - Zustand state management for scalable application state - Production-ready UI component system with enhanced Button, Card, Input - Progressive Web App (PWA) with manifest and app installation - FastAPI backend with comprehensive API endpoints - Docker containerization and CI/CD pipeline setup 📱 Progressive Web App Features: - Offline functionality with intelligent caching - Push notification support for habit reminders - App installation on mobile and desktop platforms - Background sync for offline data management - Performance monitoring and optimization tools 🎨 User Experience: - Magical wizard/grimoire theming throughout application - Responsive design optimized for all device sizes - Drag & drop habit management with smooth animations - Interactive analytics with multiple chart types - Social connectivity with friends and competitive features - Comprehensive notification and performance settings 🔧 Developer Experience: - Modern development stack with Vite and React - Comprehensive testing setup and CI/CD pipelines - Code quality tools with pre-commit hooks - Docker development environment - Detailed documentation and implementation guides This represents a complete transformation from prototype to production-ready application with enterprise-grade features and magical user experience.
44 lines
1.6 KiB
Python
44 lines
1.6 KiB
Python
from fastapi import HTTPException, Depends, Request
|
|
from auth import get_current_user
|
|
from db import get_db
|
|
from sqlalchemy.orm import Session
|
|
|
|
|
|
# Role hierarchy for comparisons
|
|
HIERARCHY = {'user': 1, 'moderator': 2, 'admin': 3}
|
|
|
|
|
|
def require_role(min_role: str):
|
|
"""FastAPI dependency that enforces a minimum role on the calling user.
|
|
|
|
This dependency requires the `get_current_user` dependency which in turn
|
|
requires an injected DB session via `get_db` to enforce strict session usage.
|
|
"""
|
|
def _dep(request: Request, db: Session = Depends(get_db)):
|
|
user = get_current_user(request, db=db)
|
|
if HIERARCHY.get(user.role or 'user', 0) < HIERARCHY.get(min_role, 0):
|
|
raise HTTPException(status_code=403, detail='insufficient role')
|
|
return user
|
|
return _dep
|
|
|
|
|
|
def require_admin(request: Request, db: Session = Depends(get_db)):
|
|
user = get_current_user(request, db=db)
|
|
if HIERARCHY.get(user.role or 'user', 0) < HIERARCHY.get('admin', 0):
|
|
raise HTTPException(status_code=403, detail='admin required')
|
|
return user
|
|
|
|
|
|
def require_owner_or_admin(resource_user_id: int):
|
|
"""Return a callable that can be used inline to check ownership/admin status.
|
|
|
|
The returned callable expects a `Request` and an injected `db` (via Depends)
|
|
so that `get_current_user` is always called with a proper session.
|
|
"""
|
|
def _inner(request: Request = None, db: Session = Depends(get_db)):
|
|
user = get_current_user(request, db=db)
|
|
if user.id == resource_user_id or user.role == 'admin':
|
|
return user
|
|
raise HTTPException(status_code=403, detail='must be owner or admin')
|
|
return _inner
|