Moved dev_auth route to own file

Author: jontyms

app/main.py

@@ -26,6 +26,12 @@
 
 # Import routes
 from app.routes import admin, api, infra, stripe, wallet
+
+# This check is a little hacky and needs to be documented in the dev environment set up
+# If it's run under docker, the -e flag should set the env variable, but if its local you have to set it yourself
+# Use 'export ENV=development' to set the env variable
+if os.getenv("ENV") == "development":
+    from app.routes import dev_auth
 from app.util.approve import Approve
 
 # Import middleware
@@ -95,6 +101,14 @@ def global_context(request: Request):
 app.include_router(wallet.router)
 app.include_router(infra.router)
 
+# This check is a little hacky and needs to be documented in the dev environment set up
+# If it's run under docker, the -e flag should set the env variable, but if its local you have to set it yourself
+# Use 'export ENV=development' to set the env variable
+if os.getenv("ENV") == "development":
+    logger.warning("loading dev endpoints")
+    app.include_router(dev_auth.router)
+
+
 # TODO figure out wtf this is used for
 # Create the OpenStack SDK config.
 # with open("clouds.yaml", "w", encoding="utf-8") as f:
@@ -398,53 +412,3 @@ async def logout(request: Request):
 @app.get("/favicon.ico", include_in_schema=False)
 async def favicon():
     return FileResponse("./app/static/favicon.ico")
-
-
-# This check is a little hacky and needs to be documented in the dev environment set up
-# If it's run under docker, the -e flag should set the env variable, but if its local you have to set it yourself
-# Use 'export ENV=development' to set the env variable
-if os.getenv("ENV") == "development":
-
-    @app.get("/dev/user")
-    async def create_dev_user(request: Request, session: Session = Depends(get_session)):
-        if request.client.host not in ["127.0.0.1", "localhost"]:
-            return Errors.generate(
-                request,
-                403,
-                "Forbidden",
-                essay="This endpoint is only available on localhost.",
-            )
-
-        # Generate random user data
-        user_id = uuid.uuid4()
-        discord_id = str(uuid.uuid4())
-
-        user = UserModel(
-            id=user_id,
-            discord_id=discord_id,
-        )
-
-        discord_user = DiscordModel(username=f"devuser-{user_id}", email=f"devuser@mail.com", user_id=user_id, user=user)
-
-        session.add(user)
-        session.commit()
-        session.refresh(user)
-
-        session.add(discord_user)
-        session.commit()
-        session.refresh(discord_user)
-
-        # Create JWT token for the user
-        bearer = Authentication.create_jwt(user)
-        rr = RedirectResponse("/profile", status_code=status.HTTP_302_FOUND)
-        max_age = Settings().jwt.lifetime_sudo
-        rr.set_cookie(
-            key="token",
-            value=bearer,
-            httponly=True,
-            samesite="lax",
-            secure=False,
-            max_age=max_age,
-        )
-
-        return rr

app/routes/dev_auth.py

@@ -0,0 +1,63 @@
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2024 Collegiate Cyber Defense Club
+import logging
+import uuid
+
+from fastapi import APIRouter, Depends, Request, status
+from fastapi.responses import RedirectResponse
+from sqlmodel import Session
+
+from app.models.user import (
+    DiscordModel,
+    UserModel,
+)
+from app.util.authentication import Authentication
+from app.util.database import get_session
+from app.util.errors import Errors
+from app.util.settings import Settings
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter(prefix="/dev", tags=["API"], responses=Errors.basic_http())
+
+
+@router.get("/user/")
+async def create_dev_user(request: Request, session: Session = Depends(get_session), sudo: bool = False):
+    if request.client.host not in ["127.0.0.1", "localhost"]:
+        return Errors.generate(
+            request,
+            403,
+            "Forbidden",
+            essay="This endpoint is only available on localhost.",
+        )
+
+    # Generate random user data
+    user_id = uuid.uuid4()
+    discord_id = str(uuid.uuid4())
+
+    user = UserModel(id=user_id, discord_id=discord_id, sudo=sudo)
+
+    discord_user = DiscordModel(username=f"devuser-{user_id}", email=f"devuser@mail.com", user_id=user_id, user=user)
+
+    session.add(user)
+    session.commit()
+    session.refresh(user)
+
+    session.add(discord_user)
+    session.commit()
+    session.refresh(discord_user)
+
+    # Create JWT token for the user
+    bearer = Authentication.create_jwt(user)
+    rr = RedirectResponse("/profile", status_code=status.HTTP_302_FOUND)
+    max_age = Settings().jwt.lifetime_sudo
+    rr.set_cookie(
+        key="token",
+        value=bearer,
+        httponly=True,
+        samesite="lax",
+        secure=False,
+        max_age=max_age,
+    )
+
+    return rr