Function restore_backup

apps/backups/api_views.py:313–341

Restore from a backup file (async via Celery). WARNING: This will flush the database!

(request, filename)

@api_view(["POST"])
@permission_classes([IsAdmin])
def restore_backup(request, filename):
    """Restore from a backup file (async via Celery). WARNING: This will flush the database!"""
    try:
        # Security: prevent path traversal
        if ".." in filename or "/" in filename or "\\" in filename:
            raise Http404("Invalid filename")

        backup_dir = services.get_backup_dir()
        backup_file = backup_dir / filename

        if not backup_file.exists():
            raise Http404("Backup file not found")

        task = restore_backup_task.delay(filename)
        return Response(
            {
                "detail": "Restore started",
                "task_id": task.id,
                "task_token": _generate_task_token(task.id),
            },
            status=status.HTTP_202_ACCEPTED,
        )
    except Http404:
        raise
    except Exception as e:
        return Response(
            {"detail": f"Failed to start restore: {str(e)}"},
            status=status.HTTP_500_INTERNAL_SERVER_ERROR,
        )


@api_view(["GET"])