feat: add admin invite creation endpoint

This commit is contained in:
Johan Lundberg 2026-02-19 13:36:11 +01:00
parent 1a795914f9
commit 6a9e32f74d
No known key found for this signature in database
GPG key ID: A6C152738D03C7D1

View file

@ -1,4 +1,4 @@
from fastapi import APIRouter, Request, Response from fastapi import APIRouter, Form, Request, Response
from fastapi.responses import HTMLResponse, RedirectResponse from fastapi.responses import HTMLResponse, RedirectResponse
from porchlight.dependencies import get_session_user from porchlight.dependencies import get_session_user
@ -58,3 +58,30 @@ async def users_list(request: Request) -> Response:
templates = request.app.state.templates templates = request.app.state.templates
return templates.TemplateResponse(request, "admin/users.html", context) return templates.TemplateResponse(request, "admin/users.html", context)
@router.post("/invite", response_class=HTMLResponse)
async def create_invite(
request: Request,
username: str = Form(),
) -> Response:
session_user = get_session_user(request)
if session_user is None:
return RedirectResponse("/login", status_code=303)
admin = await _get_admin_user(request)
if admin is None:
return HTMLResponse("Forbidden", status_code=403)
username = username.strip()
if not username:
return HTMLResponse('<div role="alert">Username is required</div>')
magic_link_service = request.app.state.magic_link_service
settings = request.app.state.settings
link = await magic_link_service.create(username=username, created_by=admin.username, note="admin invite")
url = f"{settings.issuer}/register/{link.token}"
return HTMLResponse(
f'<div role="status">Invite created for <strong>{username}</strong>:</div><div class="invite-url">{url}</div>'
)