nexgen_mirrors
a6474f55c1
- Add comprehensive debug logging across OIDC endpoints and services for development troubleshooting - Implement backward-compatible password hash checking with automatic migration from raw bcrypt to Flask-Bcrypt format - Refactor logging configuration to ensure proper propagation across all app modules - Configure root logger and disable Werkzeug duplication for cleaner log output - Initialize OIDC JWKS service on application startup - Update seed script to use Flask-Bcrypt for client secret hashing - Fix audit service to use correct event_metadata parameter BREAKING CHANGE: Client secrets created with old raw bcrypt format will be automatically migrated to Flask-Bcrypt format on first successful authentication
126 lines
3.2 KiB
Python
126 lines
3.2 KiB
Python
"""User service."""
|
|
import logging
|
|
from flask import current_app
|
|
from app.extensions import db
|
|
from app.models.user import User
|
|
from app.exceptions.validation_exceptions import UserNotFoundError
|
|
from app.utils.constants import AuditAction
|
|
from app.services.audit_service import AuditService
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
class UserService:
|
|
"""Service for user operations."""
|
|
|
|
@staticmethod
|
|
def get_user_by_id(user_id):
|
|
"""
|
|
Get user by ID.
|
|
|
|
Args:
|
|
user_id: User ID
|
|
|
|
Returns:
|
|
User instance
|
|
|
|
Raises:
|
|
UserNotFoundError: If user not found
|
|
"""
|
|
user = User.query.filter_by(id=user_id, deleted_at=None).first()
|
|
|
|
# Development-only debug logging for user validation
|
|
if current_app.config.get('ENV') == 'development':
|
|
logger.debug(f"[User] Get user by ID: user_id={user_id}, exists={user is not None}")
|
|
|
|
if not user:
|
|
raise UserNotFoundError()
|
|
return user
|
|
|
|
@staticmethod
|
|
def get_user_by_email(email):
|
|
"""
|
|
Get user by email.
|
|
|
|
Args:
|
|
email: User email
|
|
|
|
Returns:
|
|
User instance or None
|
|
"""
|
|
user = User.query.filter_by(email=email.lower(), deleted_at=None).first()
|
|
|
|
# Development-only debug logging for user validation
|
|
if current_app.config.get('ENV') == 'development':
|
|
logger.debug(f"[User] Get user by email: email={email}, exists={user is not None}")
|
|
|
|
return user
|
|
|
|
@staticmethod
|
|
def update_user(user, **kwargs):
|
|
"""
|
|
Update user profile.
|
|
|
|
Args:
|
|
user: User instance
|
|
**kwargs: Fields to update
|
|
|
|
Returns:
|
|
Updated User instance
|
|
"""
|
|
allowed_fields = ["full_name", "avatar_url"]
|
|
update_data = {k: v for k, v in kwargs.items() if k in allowed_fields}
|
|
|
|
if update_data:
|
|
user.update(**update_data)
|
|
|
|
# Log user update
|
|
AuditService.log_action(
|
|
action=AuditAction.USER_UPDATE,
|
|
user_id=user.id,
|
|
resource_type="user",
|
|
resource_id=user.id,
|
|
metadata=update_data,
|
|
description="User profile updated",
|
|
)
|
|
|
|
return user
|
|
|
|
@staticmethod
|
|
def delete_user(user, soft=True):
|
|
"""
|
|
Delete user account.
|
|
|
|
Args:
|
|
user: User instance
|
|
soft: If True, performs soft delete
|
|
|
|
Returns:
|
|
Deleted User instance
|
|
"""
|
|
user.delete(soft=soft)
|
|
|
|
# Log user deletion
|
|
AuditService.log_action(
|
|
action=AuditAction.USER_DELETE,
|
|
user_id=user.id,
|
|
resource_type="user",
|
|
resource_id=user.id,
|
|
description=f"User account {'soft' if soft else 'hard'} deleted",
|
|
)
|
|
|
|
return user
|
|
|
|
@staticmethod
|
|
def get_user_organizations(user):
|
|
"""
|
|
Get all organizations the user is a member of.
|
|
|
|
Args:
|
|
user: User instance
|
|
|
|
Returns:
|
|
List of organizations
|
|
"""
|
|
return user.get_organizations()
|