463dff883b
- FastAPI backend: auth, findings, dashboard, attack paths, footprint, AI translator, risk calculator, PDF report generator - Next.js frontend: Vault dashboard, login, findings table, finding detail with AI coach, digital footprint, reports - PostgreSQL data model: tenants, users, assets, findings, risk scores, audit reports, attack paths - Docker Compose + Dockerfiles for all services - Demo seed data: Acme Corp with 6 findings and 90-day risk score history - AI Risk Translator (OpenAI/Anthropic) with plain-English business impact - Role-based access: executive / it_admin / trustos_admin - Scope-lock engine: authorization required before any assessment Stage 1-8 complete: Phase 1 Vault Audit product ready
48 lines
1.7 KiB
Python
48 lines
1.7 KiB
Python
from fastapi import FastAPI
|
|
from fastapi.middleware.cors import CORSMiddleware
|
|
from contextlib import asynccontextmanager
|
|
|
|
from app.core.config import settings
|
|
from app.db.session import engine
|
|
from app.models.models import Base
|
|
|
|
|
|
@asynccontextmanager
|
|
async def lifespan(app: FastAPI):
|
|
# Create tables on startup (dev only — use Alembic in production)
|
|
async with engine.begin() as conn:
|
|
await conn.run_sync(Base.metadata.create_all)
|
|
yield
|
|
await engine.dispose()
|
|
|
|
|
|
app = FastAPI(
|
|
title=settings.PROJECT_NAME,
|
|
version=settings.VERSION,
|
|
lifespan=lifespan,
|
|
)
|
|
|
|
app.add_middleware(
|
|
CORSMiddleware,
|
|
allow_origins=["http://localhost:3000", "http://frontend:3000"],
|
|
allow_credentials=True,
|
|
allow_methods=["*"],
|
|
allow_headers=["*"],
|
|
)
|
|
|
|
# ─── Routes ───────────────────────────────────────────────────────────────────
|
|
from app.api.routes import auth, dashboard, findings, reports, attack_paths, footprint, ai as ai_routes
|
|
|
|
app.include_router(auth.router, prefix=settings.API_V1_STR)
|
|
app.include_router(dashboard.router, prefix=settings.API_V1_STR)
|
|
app.include_router(findings.router, prefix=settings.API_V1_STR)
|
|
app.include_router(reports.router, prefix=settings.API_V1_STR)
|
|
app.include_router(attack_paths.router, prefix=settings.API_V1_STR)
|
|
app.include_router(footprint.router, prefix=settings.API_V1_STR)
|
|
app.include_router(ai_routes.router, prefix=settings.API_V1_STR)
|
|
|
|
|
|
@app.get("/health")
|
|
async def health():
|
|
return {"status": "ok", "service": settings.PROJECT_NAME, "version": settings.VERSION}
|