o2o-negosium-original/backend/router/v1/auth/account.py

from fastapi import APIRouter, Depends, Request
from fastapi.security import HTTPAuthorizationCredentials

from common.models.gmodel import UserInfo
from router.v1.validator.dependencies import (
    IsValidAccessToken,
    IsValidRefreshToken,
    RemoveNoneResponse,
    security,
)
from services.auth_service import AuthService
from .protocol import (
    Req_CreateAccount,
    Req_HidePopup,
    Req_Login,
    Res_CreateAccount,
    Res_HidePopup,
    Res_Login,
    Res_Logout,
    Res_Me,
    Res_PopupStatus,
    Res_RefreshToken,
)

# 라우터(MVC 의 컨트롤러). 요청 검증 -> service 호출 -> RemoveNoneResponse 반환만 담당.
router = APIRouter(prefix="/v1/auth", tags=["Auth"], responses={404: {"description": "Not found"}})


@router.post(path="/login", response_model=Res_Login, summary="로그인", description="id/pw 로 로그인하고 JWT 토큰을 발급한다.")
async def login(request: Request, req: Req_Login, service: AuthService = Depends()):
    return RemoveNoneResponse(await service.attempt_login(req.id, req.pw, request.client.host))


# TODO: 계정 생성은 관리자/매니저 권한으로 제한할 가능성이 있음(현재는 비보호).
@router.post(path="/create", response_model=Res_CreateAccount, summary="계정 생성", description="supplier_id 소속의 유저를 생성한다(공급사 존재를 앱에서 검증).")
async def create_account(request: Request, req: Req_CreateAccount, service: AuthService = Depends()):
    return RemoveNoneResponse(
        await service.create_account(
            req.supplier_id, req.id, req.pw, req.name, req.email, req.contact_number, req.role, request.client.host
        )
    )


@router.post(
    path="/refresh_token",
    response_model=Res_RefreshToken,
    summary="액세스 토큰 갱신",
    description="refresh 토큰으로 access 토큰을 재발급한다. su_id DB 존재/활성 + 저장 토큰 대조를 service 에서 확인한다.",
)
async def refresh_token(
    user_info: UserInfo = Depends(IsValidRefreshToken),
    credentials: HTTPAuthorizationCredentials = Depends(security),
    service: AuthService = Depends(),
):
    return RemoveNoneResponse(await service.refresh_token(user_info, credentials.credentials))


@router.post(
    path="/logout",
    response_model=Res_Logout,
    summary="로그아웃",
    description="저장된 access/refresh 토큰을 폐기한다. 이후 보호 요청·재발급이 차단된다(단일 세션).",
)
async def logout(user_info: UserInfo = Depends(IsValidAccessToken), service: AuthService = Depends()):
    return RemoveNoneResponse(await service.logout(user_info))


@router.get(
    path="/popup/status",
    response_model=Res_PopupStatus,
    summary="팝업 숨김 상태 조회",
    description="유저별 팝업 '안내 보지 않기' 저장 상태를 반환한다. 현재는 service_info(협상 유의사항 안내) 하나.",
)
async def popup_status(
    user_info: UserInfo = Depends(IsValidAccessToken),
    credentials: HTTPAuthorizationCredentials = Depends(security),
    service: AuthService = Depends(),
):
    return RemoveNoneResponse(await service.popup_status(user_info, credentials.credentials))


@router.post(
    path="/popup/hide",
    response_model=Res_HidePopup,
    summary="팝업 안내 보지 않기",
    description="해당 팝업을 다시 표시하지 않도록 유저에 영구 저장한다. popup_type: service_info",
)
async def hide_popup(
    req: Req_HidePopup,
    user_info: UserInfo = Depends(IsValidAccessToken),
    credentials: HTTPAuthorizationCredentials = Depends(security),
    service: AuthService = Depends(),
):
    return RemoveNoneResponse(await service.hide_popup(user_info, credentials.credentials, req.popup_type))


@router.get(
    path="/me",
    response_model=Res_Me,
    summary="내 정보 (보호된 엔드포인트)",
    description="access 토큰 검증(validator) 후 su_id DB 존재/활성 + 저장 토큰 대조를 service 에서 확인해 반환한다.",
)
async def me(
    user_info: UserInfo = Depends(IsValidAccessToken),
    credentials: HTTPAuthorizationCredentials = Depends(security),
    service: AuthService = Depends(),
):
    return RemoveNoneResponse(await service.get_me(user_info, credentials.credentials))