124 lines
3.9 KiB
Python
124 lines
3.9 KiB
Python
"""Signature routes — CRUD for the user's saved visual signatures.
|
|
|
|
Signatures are reusable image stamps (drawn once, applied to many things):
|
|
PDF form fields, email composition, document insertion. Each signature is
|
|
stored as a base64 PNG so it can be embedded inline anywhere without a
|
|
separate fetch.
|
|
"""
|
|
|
|
import base64
|
|
import logging
|
|
import re
|
|
import uuid
|
|
from typing import Any, Dict, Optional
|
|
|
|
from fastapi import APIRouter, HTTPException, Request
|
|
from pydantic import BaseModel
|
|
|
|
from core.database import SessionLocal, Signature
|
|
from src.auth_helpers import get_current_user
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
_DATA_URL_RE = re.compile(
|
|
r'^data:image/(?P<fmt>png|jpeg|jpg);base64,(?P<data>.+)$',
|
|
re.IGNORECASE | re.DOTALL,
|
|
)
|
|
|
|
|
|
class SignatureCreate(BaseModel):
|
|
name: Optional[str] = None
|
|
data: str # base64 PNG, with or without `data:image/png;base64,` prefix
|
|
width: Optional[int] = None
|
|
height: Optional[int] = None
|
|
svg: Optional[str] = None
|
|
|
|
|
|
def _to_dict(s: Signature) -> Dict[str, Any]:
|
|
return {
|
|
"id": s.id,
|
|
"name": s.name,
|
|
"data_url": f"data:image/png;base64,{s.data_png}",
|
|
"width": s.width,
|
|
"height": s.height,
|
|
"created_at": (s.created_at.isoformat() + "Z") if s.created_at else None,
|
|
}
|
|
|
|
|
|
def setup_signature_routes() -> APIRouter:
|
|
router = APIRouter(tags=["signatures"])
|
|
|
|
@router.get("/api/signatures")
|
|
async def list_signatures(request: Request) -> Dict[str, Any]:
|
|
user = get_current_user(request)
|
|
db = SessionLocal()
|
|
try:
|
|
q = db.query(Signature)
|
|
if user is not None:
|
|
# SECURITY: strict ownership — the previous OR predicate
|
|
# returned every null-owner signature to every user.
|
|
q = q.filter(Signature.owner == user)
|
|
sigs = q.order_by(Signature.created_at.desc()).all()
|
|
return {"signatures": [_to_dict(s) for s in sigs]}
|
|
finally:
|
|
db.close()
|
|
|
|
@router.post("/api/signatures")
|
|
async def create_signature(request: Request, req: SignatureCreate) -> Dict[str, Any]:
|
|
user = get_current_user(request)
|
|
raw = (req.data or "").strip()
|
|
m = _DATA_URL_RE.match(raw)
|
|
b64 = m.group("data") if m else raw
|
|
try:
|
|
payload = base64.b64decode(b64, validate=True)
|
|
if not payload:
|
|
raise ValueError("empty payload")
|
|
except Exception:
|
|
raise HTTPException(400, "Signature data must be base64-encoded PNG bytes")
|
|
|
|
sig = Signature(
|
|
id=str(uuid.uuid4()),
|
|
owner=user,
|
|
name=(req.name or "Signature").strip() or "Signature",
|
|
data_png=b64,
|
|
width=req.width,
|
|
height=req.height,
|
|
svg=req.svg,
|
|
)
|
|
db = SessionLocal()
|
|
try:
|
|
db.add(sig)
|
|
db.commit()
|
|
db.refresh(sig)
|
|
return _to_dict(sig)
|
|
except Exception as e:
|
|
db.rollback()
|
|
logger.error(f"Failed to save signature: {e}")
|
|
raise HTTPException(500, f"Failed to save signature: {e}")
|
|
finally:
|
|
db.close()
|
|
|
|
@router.delete("/api/signatures/{sig_id}")
|
|
async def delete_signature(sig_id: str, request: Request) -> Dict[str, Any]:
|
|
user = get_current_user(request)
|
|
db = SessionLocal()
|
|
try:
|
|
sig = db.query(Signature).filter(Signature.id == sig_id).first()
|
|
if not sig:
|
|
raise HTTPException(404, "Signature not found")
|
|
if user and sig.owner != user:
|
|
raise HTTPException(403, "Not your signature")
|
|
db.delete(sig)
|
|
db.commit()
|
|
return {"deleted": sig_id}
|
|
except HTTPException:
|
|
raise
|
|
except Exception as e:
|
|
db.rollback()
|
|
raise HTTPException(500, f"Failed to delete signature: {e}")
|
|
finally:
|
|
db.close()
|
|
|
|
return router
|