Get all routes or api

[downdawn]

How to obtain the global app object?

Temporary workaround:

# 路由
register_router(app)

# 系统路由
register_system_router(app)

def register_system_router(app: FastAPI):
    """
    系统路由

    :param app: FastAPI
    :return:
    """
    router = APIRouter()

    @router.get('/api', summary='获取全部路由名称')
    async def get_all_route_names():
        route_name_list = [route.name for route in app.routes if isinstance(route, APIRoute)]
        return response_base.success(data={"route_name_list": route_name_list})

    app.include_router(router, prefix='/console/v1', tags=['系统'])

[wu-clan]

The api table will be added later

[wu-clan]

In the project, the best solution is not back-end acquisition, which can be used only for debugging purposes, and if docked, it is recommended to write the interface documentation manually (non-swagger)

[downdawn]

Yes, I have found a solution.

from fastapi import Request


async def get_all_route_names(request: Request):
    route_name_list = [route.name for route in request.app.routes if isinstance(route, APIRoute)]
    return response_base.success(data={"route_name_list": route_name_list})

[wu-clan]

It looks good. Will it be affected by the storage location or something else?

[downdawn]

No, directly under v1

@router.get('/router', summary='获取所有路由')
async def get_all_route(request: Request):
    data = []
    for route in request.app.routes:
        if isinstance(route, APIRoute):
            data.append({"name": route.name, "description": route.summary, "methods": route.methods})
    return response_base.success(data={"route_list": data})

[downdawn]

The backend determines permissions by comparing the permissions associated with a given role to the requested resource and method in the current request.

[wu-clan]

Feel a little like casbin?

If you don't use it as an interface, but a method, and then bind it via interface dependencies, it seems to achieve almost similar functionality, only converted to a custom role permission table

'path': route.path

[downdawn]

Yes, the permissions are completely independent and not associated with menus or any other elements.

The frontend may not look great, but permissions can be grouped and redundant data without a parent ID can be added.

Still a work in progress...

class RBAC:

    @staticmethod
    async def verify(request: Request, user: CurrentUser):
        # TODO: 缓存用户权限
        permissions = []
        # 获取用户拥有的角色
        roles = user.roles
        # 查询角色拥有的权限
        for role in roles:
            perms = role.permissions
            permissions.extend(perms)
        # 判断是否有权限, 如果没有权限则抛出异常
        method = request.method.lower()
        route_name = request.scope.get('route').name
        if not any([p.method == method and p.resource == route_name for p in permissions]):
            raise AuthorizationError()


rbac = RBAC()
# RBAC 依赖注入
DependsRBAC = Depends(rbac.verify)