Coverage for opt/mealie/lib/python3.12/site-packages/mealie/routes/users/api_tokens.py: 91%

1from datetime import timedelta 1 ctx1a

2 

3from fastapi import HTTPException, status 1 ctx1a

4 

5from mealie.core.security import create_access_token 1 ctx1a

6from mealie.routes._base import BaseUserController, controller 1 ctx1a

7from mealie.routes._base.routers import UserAPIRouter 1 ctx1a

8from mealie.schema.user import ( 1 ctx1a

9 CreateToken, 

10 DeleteTokenResponse, 

11 LongLiveTokenCreateResponse, 

12 LongLiveTokenIn, 

13 LongLiveTokenInDB, 

14) 

15 

16router = UserAPIRouter(prefix="/users", tags=["Users: Tokens"]) 1 ctx1a

17 

18 

19@controller(router) 1 ctx1a

20class UserApiTokensController(BaseUserController): 1 ctx1a

21 @router.post("/api-tokens", status_code=status.HTTP_201_CREATED, response_model=LongLiveTokenCreateResponse) 1 ctx1a

22 def create_api_token( 1 ctx1a

23 self, 

24 token_params: LongLiveTokenIn, 

25 ): 

26 """Create api_token in the Database""" 

27 

28 token_data = { 24 ctx1defghicjklmnopqrstuvwxyb

29 "long_token": True, 

30 "id": str(self.user.id), 

31 "name": token_params.name, 

32 "integration_id": token_params.integration_id, 

33 } 

34 

35 five_years = timedelta(1825) 24 ctx1defghicjklmnopqrstuvwxyb

36 token = create_access_token(token_data, five_years) 24 ctx1defghicjklmnopqrstuvwxyb

37 

38 token_model = CreateToken( 24 ctx1defghicjklmnopqrstuvwxyb

39 name=token_params.name, 

40 token=token, 

41 user_id=self.user.id, 

42 ) 

43 

44 new_token_in_db = self.repos.api_tokens.create(token_model) 24 ctx1defghicjklmnopqrstuvwxyb

45 

46 if new_token_in_db: 46 ↛ exitline 46 didn't return from function 'create_api_token' because the condition on line 46 was always true24 ctx1defghicjklmnopqrstuvwxyb

47 return new_token_in_db 24 ctx1defghicjklmnopqrstuvwxyb

48 

49 @router.delete("/api-tokens/{token_id}", response_model=DeleteTokenResponse) 1 ctx1a

50 def delete_api_token(self, token_id: int): 1 ctx1a

51 """Delete api_token from the Database""" 

52 token: LongLiveTokenInDB = self.repos.api_tokens.get_one(token_id) 3 ctx1zcb

53 

54 if not token: 3 ctx1zcb

55 raise HTTPException(status.HTTP_404_NOT_FOUND, f"Could not locate token with id '{token_id}' in database") 2 ctx1zb

56 

57 if token.user.email == self.user.email: 57 ↛ 61line 57 didn't jump to line 61 because the condition on line 57 was always true3 ctx1zcb

58 deleted_token = self.repos.api_tokens.delete(token_id) 3 ctx1zcb

59 return DeleteTokenResponse(token_delete=deleted_token.name) 3 ctx1zcb

60 else: 

61 raise HTTPException(status.HTTP_403_FORBIDDEN)