from secrets import token_hex from typing import List from uuid import uuid4 from asyncpg.exceptions import UniqueViolationError from auth import AuthBearer, get_current_user from fastapi import APIRouter, Depends from logger import get_logger from models.settings import get_supabase_db from models.users import User from pydantic import BaseModel logger = get_logger(__name__) class ApiKeyInfo(BaseModel): key_id: str creation_time: str class ApiKey(BaseModel): api_key: str key_id: str api_key_router = APIRouter() @api_key_router.post( "/api-key", response_model=ApiKey, dependencies=[Depends(AuthBearer())], tags=["API Key"], ) async def create_api_key(current_user: User = Depends(get_current_user)): """ Create new API key for the current user. - `current_user`: The current authenticated user. - Returns the newly created API key. This endpoint generates a new API key for the current user. The API key is stored in the database and associated with the user. It returns the newly created API key. """ new_key_id = uuid4() new_api_key = token_hex(16) api_key_inserted = False supabase_db = get_supabase_db() while not api_key_inserted: try: # Attempt to insert new API key into database supabase_db.create_api_key(new_key_id, new_api_key, current_user.id) api_key_inserted = True except UniqueViolationError: # Generate a new API key if the current one is already in use new_api_key = token_hex(16) except Exception as e: logger.error(f"Error creating new API key: {e}") return {"api_key": "Error creating new API key."} logger.info(f"Created new API key for user {current_user.email}.") return {"api_key": new_api_key, "key_id": str(new_key_id)} @api_key_router.delete( "/api-key/{key_id}", dependencies=[Depends(AuthBearer())], tags=["API Key"] ) async def delete_api_key(key_id: str, current_user: User = Depends(get_current_user)): """ Delete (deactivate) an API key for the current user. - `key_id`: The ID of the API key to delete. This endpoint deactivates and deletes the specified API key associated with the current user. The API key is marked as inactive in the database. """ supabase_db = get_supabase_db() supabase_db.delete_api_key(key_id, current_user.id) return {"message": "API key deleted."} @api_key_router.get( "/api-keys", response_model=List[ApiKeyInfo], dependencies=[Depends(AuthBearer())], tags=["API Key"], ) async def get_api_keys(current_user: User = Depends(get_current_user)): """ Get all active API keys for the current user. - `current_user`: The current authenticated user. - Returns a list of active API keys with their IDs and creation times. This endpoint retrieves all the active API keys associated with the current user. It returns a list of API key objects containing the key ID and creation time for each API key. """ supabase_db = get_supabase_db() response = supabase_db.get_user_api_keys(current_user.id) return response.data