Mireya Cueto Garrido
af1b8e9956
- Updated Dockerfile to improve security with a non-root user and added health checks. - Modified docker-compose.yml to set containers as read-only, restrict ports to localhost, and implement health checks. - Enhanced .env.example with additional environment variables for security and configuration. - Improved FastAPI application with middleware for security headers, CORS, and body size limits. - Refactored authentication flow in auth.py to include state validation and improved error handling. - Added rate limiting to various endpoints to prevent abuse. - Updated researcher and publication handling to ensure better validation and error management.
74 lines
1.7 KiB
Python
74 lines
1.7 KiB
Python
from sqlalchemy import create_engine, inspect, text
|
|
from sqlalchemy.orm import sessionmaker, declarative_base
|
|
import os
|
|
from dotenv import load_dotenv
|
|
|
|
# Cargar variables del .env para ejecuciones locales (en Docker ya vendrán por entorno).
|
|
load_dotenv()
|
|
|
|
# -----------------------------
|
|
# DATABASE URL
|
|
# -----------------------------
|
|
|
|
DATABASE_URL = os.getenv("DATABASE_URL")
|
|
|
|
engine = create_engine(
|
|
DATABASE_URL,
|
|
future=True,
|
|
echo=False
|
|
)
|
|
|
|
SessionLocal = sessionmaker(
|
|
autocommit=False,
|
|
autoflush=False,
|
|
bind=engine
|
|
)
|
|
|
|
Base = declarative_base()
|
|
|
|
|
|
# -----------------------------
|
|
# DB SESSION DEPENDENCY
|
|
# -----------------------------
|
|
|
|
def get_db():
|
|
db = SessionLocal()
|
|
try:
|
|
yield db
|
|
finally:
|
|
db.close()
|
|
|
|
|
|
# -----------------------------
|
|
# INIT DB (CREA TABLAS)
|
|
# -----------------------------
|
|
|
|
def init_db():
|
|
|
|
# Importa modelos para que SQLAlchemy los registre
|
|
|
|
import app.db.models # noqa
|
|
|
|
# Crea todas las tablas si no existen
|
|
|
|
Base.metadata.create_all(bind=engine)
|
|
|
|
# Pequeñas migraciones "best-effort" para entornos sin Alembic.
|
|
# (create_all no altera tablas existentes)
|
|
|
|
_ensure_columns()
|
|
|
|
# ---------------------------------------------------------
|
|
# Función auxiliar: asegurar columnas existentes
|
|
# ---------------------------------------------------------
|
|
|
|
def _ensure_columns():
|
|
insp = inspect(engine)
|
|
if "publications" in insp.get_table_names():
|
|
cols = {c["name"] for c in insp.get_columns("publications")}
|
|
if "downloaded" not in cols:
|
|
with engine.begin() as conn:
|
|
conn.execute(
|
|
text("ALTER TABLE publications ADD COLUMN downloaded BOOLEAN NOT NULL DEFAULT FALSE")
|
|
)
|