mirror of
https://github.com/complexcaresolutions/dak.c2s.git
synced 2026-03-17 17:13:42 +00:00
Browser-initiated downloads (window.open) cannot set Authorization headers. Accept ?token= query parameter as fallback on the report download and coding-template endpoints. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
208 lines
6.6 KiB
Python
208 lines
6.6 KiB
Python
"""Reports API — dashboard KPIs, weekly data, report generation, and download."""
|
|
|
|
import logging
|
|
import os
|
|
from datetime import date
|
|
from io import BytesIO
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException, Query, Request, status
|
|
from fastapi.responses import StreamingResponse
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.core.dependencies import get_current_user, require_admin
|
|
from app.database import get_db
|
|
from app.models.report import WeeklyReport
|
|
from app.models.user import User
|
|
from app.schemas.report import (
|
|
DashboardResponse,
|
|
ReportListResponse,
|
|
ReportMeta,
|
|
)
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
router = APIRouter()
|
|
|
|
|
|
@router.get("/dashboard", response_model=DashboardResponse)
|
|
def dashboard(
|
|
jahr: int | None = Query(None),
|
|
db: Session = Depends(get_db),
|
|
user: User = Depends(get_current_user),
|
|
):
|
|
"""Return dashboard KPIs and weekly time-series for the given year.
|
|
|
|
Defaults to the current ISO year if *jahr* is not provided.
|
|
Accessible to both admin and dak_mitarbeiter users.
|
|
"""
|
|
if not jahr:
|
|
from app.utils.kw_utils import date_to_jahr
|
|
|
|
jahr = date_to_jahr(date.today())
|
|
|
|
try:
|
|
from app.services.report_service import (
|
|
calculate_dashboard_kpis,
|
|
calculate_sheet1_data,
|
|
)
|
|
|
|
kpis = calculate_dashboard_kpis(db, jahr)
|
|
sheet1 = calculate_sheet1_data(db, jahr)
|
|
return DashboardResponse(kpis=kpis, weekly=sheet1.get("weekly", []))
|
|
except ImportError:
|
|
# report_service not yet implemented (parallel task)
|
|
raise HTTPException(501, "Report service not yet available")
|
|
|
|
|
|
@router.get("/weekly/{jahr}/{kw}")
|
|
def weekly_report(
|
|
jahr: int,
|
|
kw: int,
|
|
db: Session = Depends(get_db),
|
|
user: User = Depends(get_current_user),
|
|
):
|
|
"""Return aggregated data for a single calendar week.
|
|
|
|
Accessible to both admin and dak_mitarbeiter users.
|
|
"""
|
|
try:
|
|
from app.services.report_service import calculate_sheet1_data
|
|
|
|
data = calculate_sheet1_data(db, jahr)
|
|
weekly = [w for w in data.get("weekly", []) if w.get("kw") == kw]
|
|
return weekly[0] if weekly else {"kw": kw, "erstberatungen": 0}
|
|
except ImportError:
|
|
raise HTTPException(501, "Report service not yet available")
|
|
|
|
|
|
@router.post("/generate", response_model=ReportMeta)
|
|
def generate_report(
|
|
jahr: int | None = Query(None),
|
|
kw: int | None = Query(None),
|
|
db: Session = Depends(get_db),
|
|
user: User = Depends(require_admin),
|
|
):
|
|
"""Generate a full Berichtswesen Excel report and persist it to disk + DB.
|
|
|
|
Admin only. Defaults to the current ISO year/week if not specified.
|
|
Depends on report_service, excel_export, and vorjahr_service (parallel tasks).
|
|
"""
|
|
if not jahr:
|
|
from app.utils.kw_utils import date_to_jahr, date_to_kw
|
|
|
|
today = date.today()
|
|
jahr = date_to_jahr(today)
|
|
kw = kw or date_to_kw(today)
|
|
|
|
if not kw:
|
|
from app.utils.kw_utils import date_to_kw
|
|
|
|
kw = date_to_kw(date.today())
|
|
|
|
try:
|
|
from app.services.excel_export import generate_berichtswesen_xlsx
|
|
from app.services.report_service import generate_full_report
|
|
from app.services.vorjahr_service import get_vorjahr_summary
|
|
|
|
report_data = generate_full_report(db, jahr, kw)
|
|
vorjahr = get_vorjahr_summary(db, jahr)
|
|
xlsx_bytes = generate_berichtswesen_xlsx(report_data, jahr, vorjahr)
|
|
|
|
# Persist Excel file to disk
|
|
reports_dir = os.path.join(
|
|
os.path.dirname(os.path.dirname(os.path.dirname(__file__))),
|
|
"reports",
|
|
)
|
|
os.makedirs(reports_dir, exist_ok=True)
|
|
filename = f"Berichtswesen_{jahr}_KW{kw:02d}.xlsx"
|
|
filepath = os.path.join(reports_dir, filename)
|
|
with open(filepath, "wb") as f:
|
|
f.write(xlsx_bytes)
|
|
|
|
# Save report metadata to DB
|
|
report = WeeklyReport(
|
|
jahr=jahr,
|
|
kw=kw,
|
|
report_date=date.today(),
|
|
report_data=report_data,
|
|
generated_by=user.id,
|
|
)
|
|
report.report_file_path = filepath
|
|
|
|
db.add(report)
|
|
db.commit()
|
|
db.refresh(report)
|
|
|
|
return ReportMeta.model_validate(report)
|
|
except ImportError as exc:
|
|
raise HTTPException(501, f"Required service not yet available: {exc}")
|
|
|
|
|
|
@router.get("/download/{report_id}")
|
|
def download_report(
|
|
report_id: int,
|
|
request: Request,
|
|
token: str | None = Query(None),
|
|
db: Session = Depends(get_db),
|
|
):
|
|
"""Download a previously generated Berichtswesen Excel file.
|
|
|
|
Supports both ``Authorization: Bearer`` header and ``?token=`` query
|
|
parameter so the browser can open the URL directly in a new tab.
|
|
"""
|
|
from app.core.security import decode_access_token
|
|
from jose import JWTError
|
|
|
|
# Resolve token from header or query param
|
|
raw_token = token
|
|
if not raw_token:
|
|
auth = request.headers.get("authorization", "")
|
|
if auth.lower().startswith("bearer "):
|
|
raw_token = auth[7:]
|
|
|
|
if not raw_token:
|
|
raise HTTPException(status.HTTP_401_UNAUTHORIZED, "Not authenticated")
|
|
|
|
try:
|
|
payload = decode_access_token(raw_token)
|
|
user_id = int(payload["sub"])
|
|
except (JWTError, KeyError, ValueError):
|
|
raise HTTPException(status.HTTP_401_UNAUTHORIZED, "Invalid token")
|
|
|
|
user = db.query(User).filter(User.id == user_id, User.is_active == True).first() # noqa: E712
|
|
if not user:
|
|
raise HTTPException(status.HTTP_401_UNAUTHORIZED, "User not found")
|
|
report = db.query(WeeklyReport).filter(WeeklyReport.id == report_id).first()
|
|
if not report or not report.report_file_path:
|
|
raise HTTPException(404, "Report not found")
|
|
|
|
if not os.path.exists(report.report_file_path):
|
|
raise HTTPException(404, "Report file not found on disk")
|
|
|
|
with open(report.report_file_path, "rb") as f:
|
|
content = f.read()
|
|
|
|
filename = os.path.basename(report.report_file_path)
|
|
return StreamingResponse(
|
|
BytesIO(content),
|
|
media_type="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
|
|
headers={"Content-Disposition": f'attachment; filename="{filename}"'},
|
|
)
|
|
|
|
|
|
@router.get("/list", response_model=ReportListResponse)
|
|
def list_reports(
|
|
db: Session = Depends(get_db),
|
|
user: User = Depends(get_current_user),
|
|
):
|
|
"""List all generated reports, newest first.
|
|
|
|
Accessible to both admin and dak_mitarbeiter users.
|
|
"""
|
|
reports = (
|
|
db.query(WeeklyReport).order_by(WeeklyReport.generated_at.desc()).all()
|
|
)
|
|
return ReportListResponse(
|
|
items=[ReportMeta.model_validate(r) for r in reports],
|
|
total=len(reports),
|
|
)
|