+ `j^RIt^RIHtHtHt^RIHtHtHt^RIH t ^RI H t ^RI H t HtHt^RIHt^RIHtHtHtHtHt^R IHt^R IHt^R IHt^R IHt^R I H!t!^RI"H#t#^RI$H%t%^RI&H't']!4t(!RR]'4t)](PUR4]!]43RRll4t+](PUR4]!4]!]43RRll4t,](P[R4]!]4]!]43RRll4t.](P[R]/]%,R7]!]4]!]43RRll4t0](P[R 4]!]4]!]!R!R"443R#R$ll4t1](PUR%4]!]4]!]!R!R"443R&R'll4t2](P[R(4]!]4]!]!R!R"443R)R*ll4t3](PUR+4]!]4]!]!R!R"443R,R-ll4t4R#).N)datetime timedeltatimezone) APIRouter HTTPExceptionDepends)OAuth2PasswordRequestForm AsyncSession)selector_func)get_db)create_access_tokenverify_passwordrequire_permissionget_current_userget_effective_permissions) LoginUsers) RoleMaster) VendorMaster)VendorPortalLog)CustomerMaster)DealerPortalLog)MyPermissionOut) BaseModelc,a]tRt^toV3RltRtVtR#) LoginRequestc2<V^8dQh/S[;R&S[;R&#)usernamepassword)str)format __classdict__s"9/var/www/html/audi_dev/backend/app/modules/auth/routes.py __annotate__LoginRequest.__annotate__sMMN)__name__ __module__ __qualname____firstlineno____annotate_func____static_attributes____classdictcell__)r%s@r&rrsr)rz/loginc0V^8dQhR\R\/#)r datadb)rr )r$s"r&r'r'swwlw wr)c ""VP;'gRP4P4pVP\ \ 4P \\P!\ P4V8H\P!\ P4V8H444GRjxL pVP4pV'd'\VPVP4'g\RRR7hVP 'g\RRR7h\#RVPR\%VP&4RVP(R VP*/R 7pR VR R RR VP*RVP(//#L5iNizIncorrect username or password status_codedetailzUser account is inactivesubuser_idrolename)r3 access_token token_typebeareruserr!striplowerexecuter rwherer r employee_codeemailscalar_one_or_nonerr" password_hashr is_activerr#r< role_coder>)r3r4queryresultrBr?s&& r&loginrPsV ]] b ' ' ) / / 1E::z   :334= :++,5  F  $ $ &D t}}d6H6HII4TUU >>>4NOO&UD4F4F SVW[WcWcSdflnrn|n|EGKGPGP-QRL L,&6SWS\S\^dfjftftJu vv B7F9F :FAFA3Fz/tokenc0V^8dQhR\R\/#)r form_datar4)r r )r$s"r&r'r'-sww!:wLwr)c ""VP;'gRP4P4pVP\ \ 4P \\P!\ P4V8H\P!\ P4V8H444GRjxL pVP4pV'd'\VPVP4'g\RRR7hVP 'g\RRR7h\#RVPR\%VP&4RVP(R VP*/R 7pR VR R RR VP*RVP(//#L5ir6rC)rSr4rNrOrBr?s&& r& login_oauthrU,sZ    % %2 , , . 4 4 6E::z   :334= :++,5  F  $ $ &D y'9'94;M;MNN4TUU >>>4NOO&UD4F4F SVW[WcWcSdflnrn|n|EGKGPGP-QRL L,&6SWS\S\^dfjftftJu vvrQz/mec0V^8dQhR\R\/#r rBr4rr )r$s"r&r'r'@sz<r)c"VP\\4P\PVP8H44GRjxL P 4pR\ VP4RVPRVPRVPRVPRVPRV'dVP/#VP/#L5i) u The logged-in user's own profile — who they are (name, employee code, email) and which role they're on (by role_id/role_code, resolved to its display name). Nothing here is derived from a username; it's the same login_users row every other endpoint reads. Nr<rHr>rImobilerM role_name) rFr rrGrMrJr#r<rHr>rIrZr[)rBr4r=s&& r&get_mer\?s**z  !5!5!GH   3t||$++ $++T^^tT^^ 26  sA CCBCz/me/permissions)response_modelc0V^8dQhR\R\/#rWrX)r$s"r&r'r'Us55:5|5r)c4"\W4GRjxL #L5i)u What the logged-in user is actually permitted to do, module by module — the single source of truth the frontend uses to decide what to show, instead of hardcoding role-to-page maps that can drift out of sync with the real permission matrix. N)r)rBr4s&&r&get_my_permissionsr`Ts+24 44 4s z/portal-vendorsUSER_MANAGEMENTviewc$V^8dQhR\/#r r4r )r$s"r&r'r'_s Y Y Yr)c"VP\\P\P4P \P R8H\PR8H4P\P44GRjxL pVP4Uu.uF&pR\VP4RVP/NK( up#LEuupi5i)z Vendors an ADMIN can 'view as' in the Vendor Portal, for oversight/testing. Only vendors with the portal actually enabled show up here. TN vendor_idr>) rFr rrfr>rGportal_enabledrLorder_byallr#r4_rOrows&& r&list_portal_vendorsrm^s::|%%|'8'89 |**d2L4J4Jd4R S ,## $F LR::< X)rfr4ror} log_entryr?s&&& r&view_as_vendorros"66, 2 2F ...4\]]""$**,**+(E//01<< - r0BB IFF9 ))+ **Y & s6##$Hc)**+(L L+s6;K;K7Lm]c]h]h ii)3s?E-E& E-E-B1E-,E)-E-E+A!E-)E-+E-z/portal-dealersc$V^8dQhR\/#rdr )r$s"r&r'r's V V Vr)c"VP\\P\P4P \P R8H\PR8H4P\P44GRjxL pVP4Uu.uFpRVPRVP/NK up#L) rFr r customer_idr>rGrgrLrhrirjs&& r&list_portal_dealersrs::~))>+>+>? ~,,4n6N6NRV6V W .%% &F IO U [#//6388 < UU  Vs$B C C  C##C C Cz/view-as-dealer/{dealer_id}c<V^8dQhR\R\R\/#)r rr4ro)r#r r)r$s"r&r'r's+gggg gr)c "VP\V4GRjxL pV'dVP'g\RRR7h\ VP \ \P!4P4RRVP 2\P!\P4\^R7,R7pVP!V4VP#4GRjxL VP%V4GRjxL \'R VP R R R \ VP(4/4pR VRVP RVP*/#EL8LjLS5i)z Mints a real dealer-portal session/token for the chosen dealer, so an ADMIN can view the Dealer Portal exactly as that dealer would see it, without their password. Nrsz&Dealer not found or portal not enabledr8rtrurv)rrxryrzr{r;r|dealerr~r?r dealer_name)rrrgrrrr#rprrrHrrrrrrrrrrr>)rr4rorrr?s&&& r&view_as_dealerrs66.)4 4F ...4\]]$$$**,**+(E//01<< - r0BB IFF9 ))+ **Y & v!!Hc)**+(L L+v7I7I=Z`ZeZe ff)5s?EE EEB1E,E-EEAEEE)5rprrrfastapirrrfastapi.securityr sqlalchemy.ext.asyncior sqlalchemyr r rapp.core.databaserapp.core.securityrrrrrapp.models.core_modelsrapp.models.access_modelsrapp.models.rm_modelsrapp.models.vendor_portalrapp.models.sales_modelsrapp.models.dealer_modelsr"app.modules.access_control.schemasrpydanticrrouterrpostrPrUrr\listr`rmrrrr*r)r&rs 22556/(($DD-/-424> 9X7>vww$X=DY[bci[jww$E$+,<$=RYZ`Ra( d?.CD078H0I^efl^m5E5 v  !2F;< Y Y  *+v 23Df MNj,j@ v  !2F;< V V  *+v 23Df MNg,gr)