wireguard_webadmin/containers/auth-gateway/auth_gateway/main.py

import logging
import time
from contextlib import asynccontextmanager
from pathlib import Path

from auth_gateway.config_loader import RuntimeConfigStore
from auth_gateway.services.oidc_service import OIDCService
from auth_gateway.services.session_service import SessionService
from auth_gateway.settings import settings
from auth_gateway.storage.sqlite import SQLiteStorage
from auth_gateway.web.auth_routes import router as auth_router
from auth_gateway.web.login_routes import router as login_router
from fastapi import FastAPI, Request
from fastapi.staticfiles import StaticFiles
from fastapi.templating import Jinja2Templates

BASE_DIR = Path(__file__).resolve().parent
_access_logger = logging.getLogger("uvicorn.error")


@asynccontextmanager
async def lifespan(app: FastAPI):
    storage = SQLiteStorage(settings.database_path)
    app.state.settings = settings
    app.state.config_store = RuntimeConfigStore(settings.config_dir)
    app.state.session_service = SessionService(storage, settings.session_default_minutes, settings.oidc_state_ttl_minutes)
    app.state.oidc_service = OIDCService()
    app.state.templates = Jinja2Templates(directory=str(BASE_DIR / "templates"))
    yield


app = FastAPI(title="Auth Gateway", lifespan=lifespan)


@app.middleware("http")
async def access_log(request: Request, call_next):
    start = time.monotonic()
    response = await call_next(request)
    if request.url.path == "/auth/check" and response.status_code == 200:
        return response
    ms = (time.monotonic() - start) * 1000
    client = request.client.host if request.client else "-"
    _access_logger.info('%s - "%s %s" %d (%.0fms)', client, request.method, request.url.path, response.status_code, ms)
    return response


app.mount("/static", StaticFiles(directory=str(BASE_DIR / "static")), name="static")
app.include_router(auth_router)
app.include_router(login_router)


@app.get("/health")
async def healthcheck():
    return {"status": "ok"}