@jB# dZddlZddlmZddlmZmZmZmZddl m Z m Z ddl m Z ddlmZddlmZdd lmZmZmZmZdd lmZmZmZmZmZej<d ZeZ d ed ee!de!fdZ"de!de#e!fdZ$de!de#e!fdZ%de!de!de!fdZ&de!de'fdZ(de!de!dee)fdZ*de!de!dejVfdZ,Gdde Z-de!de#e!de)fdZ.e j_dedfd edee!fd Z0e jcd!edfd"e-d edee!fd#Z2e jcd$edfd"e-d edee!fd%Z3e jcd&edfd"e-d edee!fd'Z4e jcd(edfd"e-d edee!fd)Z5e jcd*edfd"e-d edee!fd+Z6e j_d,edfd edee!fd-Z7y).u shoot_api.py — API of the photographer's phone app (/shoot). Auth is the school's private link (`?t=TOKEN`, sent as the `X-Shoot-Token` header): it is regenerated from the admin when a phone is lost. The phone only ever sends counts; it never sees a photo or a family. GET /api/shoot/info school, classes, photographers, max photos per child, the live counts POST /api/shoot/class {photographer, qr | class_name} start a class (closes the previous one) POST /api/shoot/child {photographer, count} the next child had `count` photos POST /api/shoot/skip {photographer, count} `count` photos to ignore (test shots) POST /api/shoot/undo {photographer} cancel the last child / skip of this class POST /api/shoot/end {photographer} close the class (pause, change of room) GET /api/shoot/status live counts, problems and the last events The design rationale (counts and a fence, never clocks) is in services/shoot_service.py. N)Optional) APIRouterHeader HTTPExceptionRequest) BaseModelField)get_db)enforce) client_ip) audit_servicephotographer_serviceschool_service shoot_service) KIND_CHILD KIND_CLASSKIND_END KIND_SKIP KIND_UNDOzmeeconic.shootrequesttokenreturnctdt|ddtj|xsd}|s t ddt j |}|r|d s t dd |S) Nzshoot:ii,) max_attemptswindow_secondsizInvalid or revoked link.detailactivezSchool disabled.)rate_limit_enforcer rschool_for_tokenrr get_school)rr school_idschools $/var/www/photos/backend/shoot_api.py_schoolr&!so ' 2344X[\..u{;I C(BCC  & &y 1F )C(:;; r#cddlm}t5}|jd|fj }dddt dD|S#1swYxYw)Nr)class_sort_keyz1SELECT name FROM school_classes WHERE school_id=?c3&K|] }|d yw)nameN).0rs r% z_classes..1s+1V9+s)key)adminr)r executefetchallsorted)r#r)connrowss r%_classesr7-sV$ jT||OR[Q]^ggij +d+ @@jjs "AAc~tj|Dcgc]}|d c}xstjgScc}w)Nr+)rlist_photographersIMPLICIT_PHOTOGRAPHER)r#ps r%_photographersr<4s83FFyQ R!AfI R 8 6 6 78 Rs :r+c:|t|vr tdd|S)NzUnknown photographer.r)r<r)r#r+s r% _photographerr?9s" >),,C(?@@ Kr'c tdttj|j dxsdS#t t f$rYywxYw)Nshoot_max_per_child)maxintr get_settingsget TypeError ValueError)r#s r%_max_per_childrJ?sM1c.55i@DDEZ[`_`abb z "s:=AAsidphcBtj||}tj|}|r|djs|dnd}|ytj||d}tj ||}t |j}tj||Dcgc]}||vs||vs |} }tj||tdd| i|j|jt| |j|jt| k(dScc}w)z_Close the open run with its fence: exactly the files in the folder that belong to it right now.N processedfiles) class_namedeclaredreceivedchildrenok)r events_for build_runsclosed get_state claimed_namessetbefore pool_names record_eventrrQrRlenrT) rKrLeventsrunsrunrOclaimedr\nowns r%_close_open_runrfFs  % %c2 .F  # #F +D48??$r(C {''R0=I))$ :G _F#..sB7 `1G;KPQY_P_1 `C `sB$#G..cllPSTWPX CLLCH,D FF as# D-D2Dcvtjtj||}| tdd|S)Nz,No class is active: scan the class QR first.r)ropen_runrVr)rKrLrbs r% _require_openrjVs7  !9!9#r!B CC {C(VWW Jr'ceZdZUeddZeed<eddZeeed<edd Z eeed <edde j Z ee ed <y) ShootBodyrA@) min_length max_length photographerN)defaultroqr(rQ)rrgelecount)__name__ __module__ __qualname__r rpstr__annotations__rsrrQrMAX_SKIPrwrEr,r'r%rlrl]sZr:L#:ds;B ; %dr BJ B ! 8N8NOE8C=Or'rlnamescV|Dcic]}|tj||c}Scc}w)N)r live_counts)rKr~rds r%_liverds(:? @QA}((a0 0 @@ @s&z/api/shoot/info x_shoot_tokenc Kt||}tj|}t|}||j dxs||j ddk(t ||t |t||dSw)N school_name shoot_modetrue)r#renabledclasses photographers max_per_childlive)r&rrFr<rGr7rJr)rrrKsettingsr~s r% shoot_inforhsw '= )C**3/H 3 E||M29c<< -7C=',c5! sA8A:z/api/shoot/classbodyc Kt||}t||j}|jrEt j |j}|s t dd|\}}||k7rPt dd|jr*dj|jj}n t dd|t|vrt dd|t||}t j||} t j| } t j| t j||d} t j ||D cgc] } | | vs|  } } t j"||t$|d | i}t'j(d |t+||||t-| d  |||t-| d Scc} ww)Nr>zThis QR is not a class QR.rz%This class belongs to another school. z'A class QR or a class name is required.zUnknown class: rOr\z shoot.class)rQrpstrays)user_id ip_addressr#details)eventrQpreviousr)r&r?rprsrparse_class_qrrrQjoinsplitr7rfrVrWrZrYr]r^rr log_eventr r_)rrrrKrLparsed qr_schoolrQrr`rarcrdrevs r% shoot_classrxs '= )C sD-- .B ww--dgg6,HI I & :  ,ST T XXdoo3356 C(QRR#&C/*(FGGsB'H  % %c2 .F  # #F +D))$ 0G0GR0PQ\0]^G&11#r: OAaw>Na OF O  # #CZhPVEW XBM2)GBT`c3=r]`ag]h$ikzxSVW]S^ __ PsEG GG A&Gz/api/shoot/childcbKt||}t||j}t||t |}|j |j |kDrt dd|dtj||tt|j dtj||iSw)Nr>zA child has at most z photos: tap once per child.rr) r&r?rprjrJrwrrr^rr{r)rrrrKrLlimits r% shoot_childrs '= )C sD-- .B#r 3 E zzTZZ%/C*>ugEa(bccsB C OD M--c26 77sB-B/z/api/shoot/skipc Kt||}t||j}t||t j ||t t|jxsddt j||iSw)NrAr) r&r?rprjrr^rr{rwr)rrrrKrLs r% shoot_skiprsg '= )C sD-- .B#rsB 3tzzQ3GH M--c26 77sA:A<z/api/shoot/undocKt||}t||j}t||}|js t ddt j||tdt j||iSw)NrhzNothing to undo in this class.rr) r&r?rprjitemsrrr^rr)rrrrKrLrbs r% shoot_undorso '= )C sD-- .B R C 99C(HIIsB 2 M--c26 77sA;A=z/api/shoot/endcnKt||}t||j}t||}d|iSw)NrX)r&r?rprf)rrrrKrLrXs r% shoot_endrs; '= )C sD-- .B S" %F f s35z/api/shoot/statusc TKt||}ddlm}||}t|}t j |t |||jdd|jdd|Dcic],}|t j||jdgdd.c}dScc}ww)Nr)get_organizer_status pending_countunassigned_countblocked)r`rpending unassignedr) r&services.organizer_servicerr<r recent_eventsrrGrY)rrrKrorgr~rds r% shoot_statusrs '= )C? s #C 3 E--c2c5!77?A.gg0!4X]^STA}..sA6::9bI"#NN^   _sA+B(-1B#  B()8__doc__loggingtypingrfastapirrrrpydanticrr core.dbr core.rate_limitr r core.securityr servicesr rrrservices.shoot_servicerrrrr getLoggerlogrouterr{r&listr7r<r?rErJdictrfRunrjrlrrGrpostrrrrrrr,r'r%rs ==%9#WWYYg()  W Xc] s AAS A8c8d3i8 S cc F F# F(4. F s (9(9P PAsA49AA FLTl g hsm    X^_cXd`I``QT `!`8  X^_cXd 8I 8 8QT 8! 8 W]^bWc898w8xPS}8 8 W]^bWc898w8xPS}8 8 V\]aVb)ghsm  HNt   ! r'