pyr0ball
19c0664637
- update_prep_task: move whitelist guard above filter so invalid column check runs on raw kwargs (was dead code — set(filtered) - allowed is always empty); fixes latent SQL injection path for future callers - main.py: move register_kiwi_programs() into lifespan context manager so it runs once at startup, not at module import time - MealPlanView.vue: remove debug console.log stubs from onSlotClick and onAddMealType (follow-up issue handlers, not ready for production)
57 lines
1.4 KiB
Python
57 lines
1.4 KiB
Python
#!/usr/bin/env python
|
|
# app/main.py
|
|
|
|
import logging
|
|
from contextlib import asynccontextmanager
|
|
|
|
from fastapi import FastAPI
|
|
from fastapi.middleware.cors import CORSMiddleware
|
|
|
|
from app.api.routes import api_router
|
|
from app.core.config import settings
|
|
from app.services.meal_plan.affiliates import register_kiwi_programs
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
@asynccontextmanager
|
|
async def lifespan(app: FastAPI):
|
|
logger.info("Starting Kiwi API...")
|
|
settings.ensure_dirs()
|
|
register_kiwi_programs()
|
|
|
|
# Start LLM background task scheduler
|
|
from app.tasks.scheduler import get_scheduler
|
|
get_scheduler(settings.DB_PATH)
|
|
logger.info("Task scheduler started.")
|
|
|
|
yield
|
|
|
|
# Graceful scheduler shutdown
|
|
from app.tasks.scheduler import get_scheduler, reset_scheduler
|
|
get_scheduler(settings.DB_PATH).shutdown(timeout=10.0)
|
|
reset_scheduler()
|
|
logger.info("Kiwi API shutting down.")
|
|
|
|
|
|
app = FastAPI(
|
|
title=settings.PROJECT_NAME,
|
|
description="Pantry tracking + leftover recipe suggestions",
|
|
version="0.2.0",
|
|
lifespan=lifespan,
|
|
)
|
|
|
|
app.add_middleware(
|
|
CORSMiddleware,
|
|
allow_origins=settings.CORS_ORIGINS,
|
|
allow_credentials=True,
|
|
allow_methods=["*"],
|
|
allow_headers=["*"],
|
|
)
|
|
|
|
app.include_router(api_router, prefix=settings.API_PREFIX)
|
|
|
|
|
|
@app.get("/")
|
|
async def root():
|
|
return {"service": "kiwi-api", "docs": "/docs"}
|