klg-asutk-app/backend/app/api/routes/tasks.py
Yuriy a7da43be0e apply recommendations: security, get_db, exceptions, eslint, api-client
- session: set_tenant use bound param (SQL injection fix)
- health: text('SELECT 1'), REDIS_URL from config
- deps: re-export get_db from session, use settings.ENABLE_DEV_AUTH (default False)
- routes: all get_db from app.api.deps; conftest overrides deps.get_db
- main: register exception handlers from app.api.exceptions
- next.config: enable ESLint and TypeScript checks
- .eslintrc: drop @typescript-eslint/recommended; fix no-console (logger, ws-client, regulations)
- backend/.env.example added
- frontend: export apiFetch; dashboard, profile, settings, risks use api-client
- docs/ANALYSIS_AND_RECOMMENDATIONS.md

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-14 21:48:58 +03:00

31 lines
1.3 KiB
Python

from app.schemas.tasks import TaskOut
"""Tasks API — unified task view across entities."""
from datetime import datetime, timezone
from typing import List
from fastapi import APIRouter, Depends, Query
from sqlalchemy.orm import Session
from app.api.deps import get_db
from app.api.deps import get_current_user
from app.api.helpers import is_authority
from app.models.cert_application import CertApplication
router = APIRouter(tags=["tasks"])
@router.get("/tasks", response_model=List[TaskOut])
def list_tasks(state: str = Query(default="open"), db: Session = Depends(get_db), user=Depends(get_current_user)):
q = db.query(CertApplication)
if not is_authority(user) and user.organization_id:
q = q.filter(CertApplication.applicant_org_id == user.organization_id)
if state == "open":
q = q.filter(CertApplication.status.in_(["submitted", "under_review", "remarks"]))
now = datetime.now(timezone.utc)
return [
TaskOut(entity_type="cert_application", entity_id=a.id, title=f"Заявка №{a.number}",
status=a.status, due_at=a.remarks_deadline_at,
priority="high" if a.remarks_deadline_at and a.remarks_deadline_at <= now else "normal",
updated_at=a.updated_at)
for a in q.order_by(CertApplication.updated_at.desc()).limit(100).all()
]