Function first_user

app/authorisation/auth.py:119–161

(username: str,
                     password: str,
                     application_password: str,
                     full_name: Optional[str] = None)

# Endpoint for creating first user, at launch with appliaction password rather than user credentials
@router.post('/launch_user')
async def first_user(username: str,
                     password: str,
                     application_password: str,
                     full_name: Optional[str] = None):

    # Check application password is correct
    if application_password != Config.APP_PASSWORD:
        denial = HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Incorrect application password, please try again.",
            headers={"WWW-Authenticate": "Bearer"},
        )
        time.sleep(1)
        return denial

    # Create dictionary of new user attributes
    attributes = {
        'username': username,
        'full_name': full_name,
        'hashed_password': create_password_hash(password),
        'joined': str(datetime.now(timezone.utc)),
        'disabled': False,
    }

    # Write Cypher query and run against the database
    cypher_search = 'MATCH (user:User) WHERE user.username = $username RETURN user'
    cypher_create = 'CREATE (user:User $params) RETURN user'

    with neo4j_driver.session() as session:
        # First, run a search of users to determine if username is already in use
        check_users = session.run(query=cypher_search, parameters={'username': username})

        # Return error message if username is already in the database
        if check_users.data():
            raise HTTPException(
                status_code=status.HTTP_422_UNPROCESSABLE_ENTITY,
                detail=f"Operation not permitted, user with username {username} already exists.",
                headers={"WWW-Authenticate": "Bearer"}
            )

        response = session.run(query=cypher_create, parameters={'params': attributes})
        user_data = response.data()[0]['user']
    return User(**user_data)