app.py

from flask import Flask, request, jsonify
from flask_jwt_extended import JWTManager, create_access_token, jwt_required, get_jwt_identity

app = Flask(__name__)
app.config["JWT_SECRET_KEY"] = "super_secret_key"  # Замените на свой секретный ключ!
jwt = JWTManager(app)

# Пример данных (наш "мини-склад задач")
tasks = [
    {"id": 1, "title": "Сделать урок по REST API", "completed": False},
    {"id": 2, "title": "Сходить за кофе", "completed": True},
]
users = {"frodo": "myprecious", "sam": "po-ta-toes"}

def make_response(status, message, data=None):
    return jsonify({
        "status": status,
        "message": message,
        "data": data
    })

@app.errorhandler(500)
def handle_500_error(e):
    return make_response("error", "Что-то пошло не так на сервере"), 500

@app.errorhandler(404)
def handle_404_error(e):
    return make_response("error", "Ресурс не найден"), 404

@app.get("/")
def index():
    return "Добро пожаловать в ToDo API!"

@app.get("/api/tasks")
def get_tasks():
    return jsonify(tasks)

@app.get("/api/tasks/<int:task_id>")
def get_task(task_id):
    task = next((t for t in tasks if t["id"] == task_id), None)
    if not task:
        return make_response("error", "Задача не найдена"), 404

    return make_response("success", "Задача найдена", task)

@app.post("/api/tasks")
def create_task():
    data = request.get_json()
    if not data or "title" not in data:
        return jsonify({"error": "Поле 'title' обязательно"}), 400

    new_task = {
        "id": len(tasks) + 1,
        "title": data["title"],
        "completed": False,
    }
    tasks.append(new_task)
    return jsonify(new_task), 201

@app.put("/api/tasks/<int:task_id>")
def update_task(task_id):
    data = request.get_json()
    task = next((t for t in tasks if t["id"] == task_id), None)
    if not task:
        return jsonify({"error": "Задача не найдена"}), 404
    
    task["title"] = data.get("title", task["title"])
    task["completed"] = data.get("completed", task["completed"])
    return jsonify(task)

@app.route("/api/tasks/<int:task_id>", methods=["DELETE"])
def delete_task(task_id):
    global tasks
    tasks = [t for t in tasks if t["id"] != task_id]
    return jsonify({"message": "Задача удалена"})

@app.post("/login")
def login():
    data = request.get_json()
    username = data.get("username")
    password = data.get("password")

    if username in users and users[username] == password:
        roles = "admin" if username == "frodo" else "user"
        token = create_access_token(identity={"username": username, "roles": roles})
        return jsonify({"access_token": token}), 200

    return jsonify({"error": "Неверные логин или пароль"}), 401

@app.get("/protected")
@jwt_required()
def protected():
    current_user = get_jwt_identity()
    return jsonify({"message": f"Добро пожаловать, {current_user}!"}), 200

@app.get("/admin")
@jwt_required()
def admin_route():
    user = get_jwt_identity()
    if user.get("roles") != "admin":
        return jsonify({"error": "Доступ запрещён"}), 403

    return jsonify({"message": "Добро пожаловать, администратор!"}), 200

if __name__ == "__main__":
    app.run(debug=True)