From 9decb7591e402b6fb93dbcb73b6bfd3666f03eb8 Mon Sep 17 00:00:00 2001 From: IluaAir Date: Tue, 30 Sep 2025 22:09:26 +0300 Subject: [PATCH] change admin dep --- src/api/dependacies/user_dep.py | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/src/api/dependacies/user_dep.py b/src/api/dependacies/user_dep.py index 429deae..f3a89d5 100644 --- a/src/api/dependacies/user_dep.py +++ b/src/api/dependacies/user_dep.py @@ -52,14 +52,14 @@ async def get_current_user_for_refresh(token: AccessTokenDep): return await get_current_user(token, verify_exp=False, check_active=True) +async def get_current_user_for_admin(token: AccessTokenDep): + admin = await get_current_user(token, verify_exp=True, check_active=True) + if not admin.is_superuser: + raise HTTPException(status_code=403, detail="Admin access required") + return admin + + CurrentUser = Annotated[TokenData, Depends(get_current_user_basic)] ActiveUser = Annotated[TokenData, Depends(get_current_active_user)] RefreshUser = Annotated[TokenData, Depends(get_current_user_for_refresh)] - - -async def get_admin_user(db: sessionDep, current_user: ActiveUser): - await UserService(db).validate_admin_user(current_user.sub) - return current_user - - -AdminUser = Annotated[TokenData, Depends(get_admin_user)] +AdminUser = Annotated[TokenData, Depends(get_current_user_for_admin)]