Solved issue #192

192/app/api/upload.py

@@ -0,0 +1,10 @@
+from fastapi import APIRouter, UploadFile, Depends
+from app.core.security import require_roles
+
+router = APIRouter()
+
+
+@router.post("/up")
+def upload_file(file: UploadFile, role: str = Depends(require_roles("admin", "writer"))):
+    return {"message": "File uploaded successfully", "role": role}
+

192/app/core/security.py

@@ -0,0 +1,18 @@
+from fastapi import Header, HTTPException, status, Depends
+
+
+def get_current_role(x_role: str = Header(...)):
+    return x_role
+
+
+def require_roles(*allowed_roles):
+    def role_checker(role: str = Depends(get_current_role)):
+        if role not in allowed_roles:
+            raise HTTPException(
+                status_code=status.HTTP_403_FORBIDDEN,
+                detail="Access denied: role mismatch"
+            )
+        return role
+    return role_checker
+
+

192/app/main.py

@@ -0,0 +1,6 @@
+from fastapi import FastAPI
+from app.api.upload import router  # مسیر به فایل های api
+
+app = FastAPI(title="SmartProposal Task 192")
+
+app.include_router(router)

192/requirments.txt

@@ -0,0 +1,6 @@
+fastapi
+uvicorn
+pip-audit
+python-multipart
+requests
+setuptools