fec26089ed
- Added JWT authentication support with configurable secret and expiration. - Introduced optional API key validation for endpoints. - Implemented tracking of publication downloads by researchers, storing records in a new PublicationDownload model. - Updated export endpoints to conditionally register downloads based on user authentication. - Enhanced researcher search response to indicate if publications were downloaded by the current user. - Updated environment configuration to include new JWT settings.
168 lines
6.0 KiB
Python
168 lines
6.0 KiB
Python
from fastapi import APIRouter, Depends, HTTPException
|
|
from fastapi.responses import Response
|
|
from sqlalchemy.orm import Session
|
|
from uuid import UUID
|
|
|
|
from app.db.session import get_db
|
|
from app.db.models import Publication, Researcher, PublicationDownload
|
|
from app.security.api_key import get_api_key_optional
|
|
from app.security.jwt import get_optional_current_researcher
|
|
from app.services.sword_generator import SWORDGenerator
|
|
from app.services.zip_generator import ZIPGenerator
|
|
|
|
router = APIRouter(prefix="/export")
|
|
|
|
|
|
def validate_uuid_list(pub_ids: list[str]) -> list[UUID]:
|
|
valid_ids = []
|
|
for pid in pub_ids:
|
|
try:
|
|
valid_ids.append(UUID(pid))
|
|
except Exception:
|
|
raise HTTPException(
|
|
status_code=400,
|
|
detail=f"Invalid publication ID (not UUID): {pid}"
|
|
)
|
|
return valid_ids
|
|
|
|
|
|
@router.post("/sword/publications")
|
|
async def export_multiple_sword(
|
|
pub_ids: list[str],
|
|
db: Session = Depends(get_db),
|
|
api_key: str | None = Depends(get_api_key_optional),
|
|
current: Researcher | None = Depends(get_optional_current_researcher),
|
|
):
|
|
if not api_key and not current:
|
|
raise HTTPException(status_code=401, detail="Missing credentials")
|
|
validate_uuid_list(pub_ids)
|
|
|
|
pubs = db.query(Publication).filter(Publication.id.in_(pub_ids)).all()
|
|
|
|
if not pubs:
|
|
raise HTTPException(status_code=404, detail="No publications found")
|
|
|
|
researcher = db.query(Researcher).filter_by(id=pubs[0].researcher_id).first()
|
|
|
|
xml_bytes = SWORDGenerator.generate_feed_xml(researcher, pubs)
|
|
# Registrar descarga solo si hay usuario logueado
|
|
if current:
|
|
for p in pubs:
|
|
exists = (
|
|
db.query(PublicationDownload)
|
|
.filter(
|
|
PublicationDownload.researcher_id == current.id,
|
|
PublicationDownload.publication_id == p.id,
|
|
)
|
|
.first()
|
|
)
|
|
if not exists:
|
|
db.add(PublicationDownload(researcher_id=current.id, publication_id=p.id))
|
|
db.commit()
|
|
return Response(content=xml_bytes, media_type="application/xml")
|
|
|
|
|
|
@router.get("/sword/researcher/{orcid_id}")
|
|
async def export_researcher_sword(
|
|
orcid_id: str,
|
|
db: Session = Depends(get_db),
|
|
api_key: str | None = Depends(get_api_key_optional),
|
|
current: Researcher | None = Depends(get_optional_current_researcher),
|
|
):
|
|
if not api_key and not current:
|
|
raise HTTPException(status_code=401, detail="Missing credentials")
|
|
researcher = db.query(Researcher).filter_by(orcid_id=orcid_id).first()
|
|
if not researcher:
|
|
raise HTTPException(status_code=404, detail="Researcher not found")
|
|
|
|
pubs = db.query(Publication).filter_by(researcher_id=researcher.id).all()
|
|
|
|
if not pubs:
|
|
raise HTTPException(status_code=404, detail="No publications found for this researcher")
|
|
|
|
xml_bytes = SWORDGenerator.generate_feed_xml(researcher, pubs)
|
|
if current:
|
|
for p in pubs:
|
|
exists = (
|
|
db.query(PublicationDownload)
|
|
.filter(
|
|
PublicationDownload.researcher_id == current.id,
|
|
PublicationDownload.publication_id == p.id,
|
|
)
|
|
.first()
|
|
)
|
|
if not exists:
|
|
db.add(PublicationDownload(researcher_id=current.id, publication_id=p.id))
|
|
db.commit()
|
|
return Response(content=xml_bytes, media_type="application/xml")
|
|
|
|
|
|
@router.post("/zip/publications")
|
|
async def export_multiple_zip(
|
|
pub_ids: list[str],
|
|
db: Session = Depends(get_db),
|
|
api_key: str | None = Depends(get_api_key_optional),
|
|
current: Researcher | None = Depends(get_optional_current_researcher),
|
|
):
|
|
if not api_key and not current:
|
|
raise HTTPException(status_code=401, detail="Missing credentials")
|
|
validate_uuid_list(pub_ids)
|
|
|
|
pubs = db.query(Publication).filter(Publication.id.in_(pub_ids)).all()
|
|
|
|
if not pubs:
|
|
raise HTTPException(status_code=404, detail="No publications found")
|
|
|
|
researcher = db.query(Researcher).filter_by(id=pubs[0].researcher_id).first()
|
|
|
|
zip_bytes = ZIPGenerator.generate_zip(researcher, pubs)
|
|
if current:
|
|
for p in pubs:
|
|
exists = (
|
|
db.query(PublicationDownload)
|
|
.filter(
|
|
PublicationDownload.researcher_id == current.id,
|
|
PublicationDownload.publication_id == p.id,
|
|
)
|
|
.first()
|
|
)
|
|
if not exists:
|
|
db.add(PublicationDownload(researcher_id=current.id, publication_id=p.id))
|
|
db.commit()
|
|
return Response(content=zip_bytes, media_type="application/zip")
|
|
|
|
|
|
@router.get("/zip/researcher/{orcid_id}")
|
|
async def export_researcher_zip(
|
|
orcid_id: str,
|
|
db: Session = Depends(get_db),
|
|
api_key: str | None = Depends(get_api_key_optional),
|
|
current: Researcher | None = Depends(get_optional_current_researcher),
|
|
):
|
|
if not api_key and not current:
|
|
raise HTTPException(status_code=401, detail="Missing credentials")
|
|
researcher = db.query(Researcher).filter_by(orcid_id=orcid_id).first()
|
|
if not researcher:
|
|
raise HTTPException(status_code=404, detail="Researcher not found")
|
|
|
|
pubs = db.query(Publication).filter_by(researcher_id=researcher.id).all()
|
|
|
|
if not pubs:
|
|
raise HTTPException(status_code=404, detail="No publications found for this researcher")
|
|
|
|
zip_bytes = ZIPGenerator.generate_zip(researcher, pubs)
|
|
if current:
|
|
for p in pubs:
|
|
exists = (
|
|
db.query(PublicationDownload)
|
|
.filter(
|
|
PublicationDownload.researcher_id == current.id,
|
|
PublicationDownload.publication_id == p.id,
|
|
)
|
|
.first()
|
|
)
|
|
if not exists:
|
|
db.add(PublicationDownload(researcher_id=current.id, publication_id=p.id))
|
|
db.commit()
|
|
return Response(content=zip_bytes, media_type="application/zip")
|