dvirlabs bce4c91002
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Fix: Update admin credentials on startup instead of only creating once
- Modified create_admin_user() to update existing admin with new credentials
- Removes old admin users when ADMIN_EMAIL changes
- Ensures credential changes from environment variables take effect immediately
- Fixes issue where ADMIN_EMAIL changes were being ignored
2026-05-10 09:58:16 +03:00

117 lines
3.6 KiB
Python
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

import sys
from pathlib import Path
# Add backend directory to Python path
backend_dir = Path(__file__).resolve().parent.parent
if str(backend_dir) not in sys.path:
sys.path.insert(0, str(backend_dir))
from fastapi import FastAPI
from fastapi.middleware.cors import CORSMiddleware
from fastapi.staticfiles import StaticFiles
import uvicorn
from app.database.database import engine, Base
from app.config import settings
from app.routers import auth, users, products, categories, cart, orders, wishlist, contact, models, brands
# Create uploads directory if it doesn't exist
uploads_dir = Path("uploads")
uploads_dir.mkdir(exist_ok=True)
# Create tables
Base.metadata.create_all(bind=engine)
# Create or update admin user
def create_admin_user():
from app.database.database import SessionLocal
from app.models.user import User
from app.services.auth import get_password_hash
db = SessionLocal()
try:
# Check if admin with current email exists
admin = db.query(User).filter(User.email == settings.admin_email).first()
if admin:
# Admin exists, update password if needed
admin.hashed_password = get_password_hash(settings.admin_password)
admin.full_name = settings.admin_full_name
db.commit()
print(f" Admin user updated: {settings.admin_email}")
else:
# Delete any other admin users (old ones with different emails)
old_admins = db.query(User).filter(User.is_admin == True).all()
for old_admin in old_admins:
db.delete(old_admin)
db.commit()
# Create new admin user
admin = User(
email=settings.admin_email,
full_name=settings.admin_full_name,
hashed_password=get_password_hash(settings.admin_password),
is_admin=True,
is_active=True,
must_change_password=True # Force password change on first login
)
db.add(admin)
db.commit()
print(f"✅ Admin user created: {settings.admin_email}")
print(f"⚠️ Default password: {settings.admin_password} (CHANGE THIS!)")
except Exception as e:
print(f"❌ Error creating admin user: {e}")
db.rollback()
finally:
db.close()
create_admin_user()
app = FastAPI(
title="E-commerce API",
description="Full-featured e-commerce API for clothing and shoes",
version="1.0.0",
)
# CORS middleware
app.add_middleware(
CORSMiddleware,
allow_origins=[settings.frontend_url, "http://localhost:3000", "http://localhost:5173"],
allow_credentials=True,
allow_methods=["*"],
allow_headers=["*"],
)
# Include routers
app.include_router(auth.router)
app.include_router(users.router)
app.include_router(products.router)
app.include_router(categories.router)
app.include_router(models.router)
app.include_router(brands.router)
app.include_router(cart.router)
app.include_router(orders.router)
app.include_router(wishlist.router)
app.include_router(contact.router)
app.include_router(contact.admin_router) # Admin contact messages endpoints
app.include_router(contact.user_router) # User messages endpoints
# Mount static files for uploads
app.mount("/uploads", StaticFiles(directory="uploads"), name="uploads")
@app.get("/")
def read_root():
return {
"message": "E-commerce API",
"version": "1.0.0",
"docs": "/docs",
}
@app.get("/health")
def health_check():
return {"status": "healthy"}
if __name__ == "__main__":
uvicorn.run("app.main:app", host="0.0.0.0", port=8000, reload=True)