v1.4.0: fix #43, #31, #29, #49, #33 + shared templating

py_service/app/dependencies.py

@@ -0,0 +1,16 @@
+from fastapi import Request, Depends
+from fastapi.responses import HTMLResponse, RedirectResponse
+
+
+def get_current_user(request: Request) -> dict | None:
+    return request.session.get("user")
+
+
+def require_role(*roles: str):
+    def dependency(request: Request, user: dict = Depends(get_current_user)):
+        if not user:
+            return RedirectResponse(url="/service/login", status_code=302)
+        if roles and user["role"] not in roles:
+            return HTMLResponse(content="Доступ запрещён", status_code=403)
+        return user
+    return dependency