from __future__ import annotations import secrets from datetime import datetime, timezone from fastapi import APIRouter, Depends, Form, HTTPException, Request from fastapi.responses import HTMLResponse, RedirectResponse from fastapi.templating import Jinja2Templates from auth import check_admin_credentials, get_current_admin, require_admin_page from config import get_settings from database import get_db from urlutil import public_base_url router = APIRouter(prefix="/admin", tags=["admin"]) templates = Jinja2Templates(directory="templates") def _now_iso() -> str: return datetime.now(timezone.utc).replace(microsecond=0).isoformat() @router.get("/login", response_class=HTMLResponse) async def login_page(request: Request): if require_admin_page(request): return RedirectResponse("/admin", status_code=303) settings = get_settings() return templates.TemplateResponse( "admin/login.html", {"request": request, "brand": settings.brand_name, "error": None}, ) @router.post("/login") async def login_submit( request: Request, username: str = Form(...), password: str = Form(...), ): settings = get_settings() if not check_admin_credentials(username, password): return templates.TemplateResponse( "admin/login.html", { "request": request, "brand": settings.brand_name, "error": "Неверный логин или пароль", }, status_code=401, ) request.session["admin"] = username return RedirectResponse("/admin", status_code=303) @router.post("/logout") async def logout(request: Request): request.session.clear() return RedirectResponse("/admin/login", status_code=303) @router.get("", response_class=HTMLResponse) async def admin_dashboard(request: Request): if not require_admin_page(request): return RedirectResponse("/admin/login", status_code=303) settings = get_settings() db = await get_db() try: cursor = await db.execute( """ SELECT l.*, (SELECT COUNT(*) FROM guest_claims c WHERE c.link_id = l.id) AS claims FROM guest_links l ORDER BY l.id DESC """ ) links = [dict(row) for row in await cursor.fetchall()] finally: await db.close() site_base = public_base_url(request) return templates.TemplateResponse( "admin/dashboard.html", { "request": request, "brand": settings.brand_name, "links": links, "site_base": site_base, "flash": request.query_params.get("flash"), }, ) @router.post("/links") async def create_link( request: Request, link_type: str = Form(...), title: str = Form(""), value: int = Form(...), max_uses: int = Form(1), duration_days: int = Form(0), plan_traffic_gb: int = Form(0), expires_at: str = Form(""), note: str = Form(""), _admin: str = Depends(get_current_admin), ): if link_type not in ("extend", "traffic"): raise HTTPException(400, "Неверный тип ссылки") if value < 1: raise HTTPException(400, "Значение должно быть >= 1") if max_uses < 1: raise HTTPException(400, "max_uses должен быть >= 1") if link_type == "traffic": if duration_days < 1: raise HTTPException( 400, "Для трафика укажите срок действия (дней) — трафик временный" ) plan_traffic_gb = 0 else: duration_days = 0 if plan_traffic_gb < 1: raise HTTPException( 400, "Для продления укажите трафик тарифа (ГБ) — лимит зафиксируется при активации", ) token = secrets.token_urlsafe(12) expires = expires_at.strip() or None if not title.strip(): if link_type == "extend": title = f"Продление +{value} дн. / {plan_traffic_gb} ГБ" else: title = f"Трафик +{value} ГБ на {duration_days} дн." db = await get_db() try: await db.execute( """ INSERT INTO guest_links (token, link_type, title, value, max_uses, expires_at, note, created_at, duration_days, plan_traffic_gb) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?) """, ( token, link_type, title.strip(), value, max_uses, expires, note.strip(), _now_iso(), duration_days, plan_traffic_gb, ), ) await db.commit() finally: await db.close() return RedirectResponse("/admin?flash=created", status_code=303) @router.post("/links/{link_id}/toggle") async def toggle_link(link_id: int, _admin: str = Depends(get_current_admin)): db = await get_db() try: await db.execute( "UPDATE guest_links SET is_active = CASE WHEN is_active = 1 THEN 0 ELSE 1 END WHERE id = ?", (link_id,), ) await db.commit() finally: await db.close() return RedirectResponse("/admin?flash=toggled", status_code=303) @router.post("/links/{link_id}/delete") async def delete_link(link_id: int, _admin: str = Depends(get_current_admin)): db = await get_db() try: await db.execute("DELETE FROM guest_links WHERE id = ?", (link_id,)) await db.commit() finally: await db.close() return RedirectResponse("/admin?flash=deleted", status_code=303) @router.get("/links/{link_id}", response_class=HTMLResponse) async def link_detail(request: Request, link_id: int): if not require_admin_page(request): return RedirectResponse("/admin/login", status_code=303) settings = get_settings() db = await get_db() try: cursor = await db.execute("SELECT * FROM guest_links WHERE id = ?", (link_id,)) link = await cursor.fetchone() if not link: raise HTTPException(404, "Ссылка не найдена") cursor = await db.execute( "SELECT * FROM guest_claims WHERE link_id = ? ORDER BY id DESC", (link_id,), ) claims = [dict(row) for row in await cursor.fetchall()] cursor = await db.execute( """ SELECT * FROM traffic_grants WHERE link_id = ? ORDER BY id DESC """, (link_id,), ) grants = [dict(row) for row in await cursor.fetchall()] finally: await db.close() return templates.TemplateResponse( "admin/link_detail.html", { "request": request, "brand": settings.brand_name, "link": dict(link), "claims": claims, "grants": grants, "site_base": public_base_url(request), }, )