bonamin
cd8a6c53cf
Adds four new routers, three schema files, and one new model.
All new endpoints use new URL prefixes — no existing routes touched.
routers/menu.py
GET /api/menu/{site_slug} — public menu snapshot (no auth)
POST /api/menu/sync — upsert snapshot (site API key)
routers/orders.py
POST /api/orders/{site_slug} — customer places order (public)
GET /api/orders/status/{public_ref} — customer tracks order (public)
GET /api/orders/pending/{site_id} — local backend polls (site key)
POST /api/orders/{id}/synced — mark synced (site key)
PATCH /api/orders/{id}/status — update status with transition
validation (site key)
routers/manager_auth.py
POST /api/manager/register — create manager account (admin JWT)
POST /api/manager/login — returns manager JWT
POST /api/manager/refresh — refreshes manager JWT
Shared _get_current_manager dependency used by remote_dashboard
routers/remote_dashboard.py
GET /api/remote/sites — manager JWT
GET /api/remote/sites/{id}/snapshot — manager JWT
GET /api/remote/sites/{id}/orders — manager JWT
GET /api/remote/sites/{id}/orders/pending — manager JWT
PATCH /api/remote/sites/{id}/orders/{oid}/status — manager JWT
POST /api/remote/snapshot — site API key
(stats push)
models/stats_snapshot.py (NEW)
stats_snapshots table — one row per site, holds serialized
operational stats; created by create_all on startup
config.py / .env.example
MANAGER_JWT_SECRET and MANAGER_JWT_EXPIRE_HOURS (default 72h)
added as separate settings from the admin SECRET_KEY
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
81 lines
2.7 KiB
Python
81 lines
2.7 KiB
Python
from contextlib import asynccontextmanager
|
|
from fastapi import FastAPI
|
|
from fastapi.middleware.cors import CORSMiddleware
|
|
|
|
from config import settings
|
|
from database import engine, Base
|
|
from auth_utils import hash_password
|
|
import models.admin # noqa: F401
|
|
import models.site # noqa: F401
|
|
import models.menu_snapshot # noqa: F401
|
|
import models.online_order # noqa: F401
|
|
import models.manager_account # noqa: F401
|
|
import models.stats_snapshot # noqa: F401
|
|
|
|
from routers import auth, sites, heartbeat
|
|
from routers import menu as menu_router
|
|
from routers import orders as orders_router
|
|
from routers import manager_auth as manager_auth_router
|
|
from routers import remote_dashboard as remote_dashboard_router
|
|
|
|
|
|
def _seed_default_admin():
|
|
from sqlalchemy.orm import Session
|
|
from models.admin import Admin
|
|
|
|
with Session(engine) as db:
|
|
if not db.query(Admin).filter(Admin.username == settings.ADMIN_USERNAME).first():
|
|
db.add(Admin(
|
|
username=settings.ADMIN_USERNAME,
|
|
password_hash=hash_password(settings.ADMIN_PASSWORD),
|
|
role="sysadmin",
|
|
))
|
|
db.commit()
|
|
|
|
|
|
def _run_migrations():
|
|
"""Apply additive schema changes that create_all won't handle."""
|
|
from sqlalchemy import text
|
|
migrations = [
|
|
# Per-site order counter for public_ref generation (e.g. "ORD-0042")
|
|
"ALTER TABLE sites ADD COLUMN order_counter INTEGER NOT NULL DEFAULT 0",
|
|
]
|
|
for sql in migrations:
|
|
try:
|
|
with engine.connect() as conn:
|
|
conn.execute(text(sql))
|
|
conn.commit()
|
|
except Exception:
|
|
pass
|
|
|
|
|
|
@asynccontextmanager
|
|
async def lifespan(app: FastAPI):
|
|
Base.metadata.create_all(bind=engine)
|
|
_run_migrations()
|
|
_seed_default_admin()
|
|
yield
|
|
|
|
|
|
app = FastAPI(title="POS Cloud Backend", lifespan=lifespan)
|
|
|
|
app.add_middleware(
|
|
CORSMiddleware,
|
|
allow_origins=["*"],
|
|
allow_methods=["*"],
|
|
allow_headers=["*"],
|
|
)
|
|
|
|
app.include_router(auth.router, prefix="/api/auth", tags=["auth"])
|
|
app.include_router(sites.router, prefix="/api/sites", tags=["sites"])
|
|
app.include_router(heartbeat.router, prefix="/api/heartbeat", tags=["heartbeat"])
|
|
app.include_router(menu_router.router, prefix="/api/menu", tags=["menu"])
|
|
app.include_router(orders_router.router, prefix="/api/orders", tags=["orders"])
|
|
app.include_router(manager_auth_router.router, prefix="/api/manager", tags=["manager"])
|
|
app.include_router(remote_dashboard_router.router,prefix="/api/remote", tags=["remote"])
|
|
|
|
|
|
@app.get("/health")
|
|
def health():
|
|
return {"status": "ok"}
|