87 lines
2.5 KiB
Python
87 lines
2.5 KiB
Python
from fastapi import APIRouter, HTTPException
|
|
from pydantic import BaseModel
|
|
from datetime import datetime
|
|
from ..db import get_connection
|
|
from ..utils.jwt_handler import verify_token
|
|
|
|
router = APIRouter()
|
|
|
|
class CreateAnnouncementRequest(BaseModel):
|
|
token: str
|
|
text: str
|
|
start_time: datetime
|
|
end_time: datetime
|
|
color: str = "#ffffff"
|
|
|
|
class DeleteAnnouncementRequest(BaseModel):
|
|
token: str
|
|
announcement_id: int
|
|
|
|
def _verify_admin_permission(token: str):
|
|
"""公共权限验证方法"""
|
|
try:
|
|
payload = verify_token(token)
|
|
username = payload["sub"]
|
|
except ValueError as e:
|
|
raise HTTPException(status_code=401, detail=str(e))
|
|
|
|
connection = get_connection()
|
|
try:
|
|
cursor = connection.cursor(dictionary=True)
|
|
cursor.execute("SELECT user_type FROM users WHERE username = %s;", (username,))
|
|
admin_user = cursor.fetchone()
|
|
|
|
if not admin_user or admin_user["user_type"] != "admin":
|
|
raise HTTPException(status_code=403, detail="Permission denied")
|
|
return username
|
|
finally:
|
|
cursor.close()
|
|
connection.close()
|
|
|
|
@router.post("/create")
|
|
def create_announcement(request: CreateAnnouncementRequest):
|
|
_verify_admin_permission(request.token)
|
|
conn = get_connection()
|
|
try:
|
|
cursor = conn.cursor()
|
|
cursor.execute("""
|
|
INSERT INTO announcements
|
|
(text, start_time, end_time, color)
|
|
VALUES (%s, %s, %s, %s)
|
|
""", (request.text,
|
|
request.start_time, request.end_time, request.color))
|
|
conn.commit()
|
|
return {"message": "公告创建成功"}
|
|
finally:
|
|
cursor.close()
|
|
conn.close()
|
|
|
|
@router.post("/delete")
|
|
def delete_announcement(request: DeleteAnnouncementRequest):
|
|
_verify_admin_permission(request.token)
|
|
conn = get_connection()
|
|
try:
|
|
cursor = conn.cursor()
|
|
cursor.execute("DELETE FROM announcements WHERE id = %s",
|
|
(request.announcement_id,))
|
|
conn.commit()
|
|
return {"message": "公告删除成功"}
|
|
finally:
|
|
cursor.close()
|
|
conn.close()
|
|
|
|
@router.get("/list")
|
|
def get_all_announcements():
|
|
conn = get_connection()
|
|
try:
|
|
cursor = conn.cursor(dictionary=True)
|
|
cursor.execute("""
|
|
SELECT id, text, start_time, end_time, color, created_at
|
|
FROM announcements
|
|
ORDER BY created_at DESC
|
|
""")
|
|
return cursor.fetchall()
|
|
finally:
|
|
cursor.close()
|
|
conn.close()
|