Phase 3 — Investments: - Multi-currency support: holdings track purchase currency, FX rates convert to base for totals - Capital gains report using UK Section 104 pool method, grouped by tax year - Capital Gains tab added to Reports page Phase 5 — Polish & Hardening: - Mobile-responsive layout: bottom nav, sidebar hidden on mobile, logo in TopBar, compact header buttons, hover-only actions now always visible on touch - Backup system: encrypted GPG backups via backup.sh, nightly scheduler job, admin API (list/trigger/download/restore), Settings UI with drag-to-restore confirmation - Docker entrypoint with gosu privilege drop to fix bind-mount ownership on fresh deployments - OWASP fixes: refresh token now bound to its session (new refresh_token_hash column + migration), CSRF secure flag tied to environment, IP-level rate limiting on login, TOTPEnableRequest Pydantic schema replaces raw dict - AES-256-GCM key rotation script (rotate_keys.py) with dry-run mode and atomic DB transaction - CLAUDE.md added for AI-assisted development context - README updated: correct reverse proxy port, accurate backup/restore commands, key rotation instructions Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
101 lines
3.3 KiB
Python
101 lines
3.3 KiB
Python
from datetime import date, timedelta
|
|
|
|
from fastapi import APIRouter, Depends, Query
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
|
|
from app.dependencies import get_current_user, get_db
|
|
from app.db.models.user import User
|
|
from app.schemas.report import (
|
|
BalanceSheetReport,
|
|
BudgetVsActualReport,
|
|
CashFlowReport,
|
|
CategoryBreakdownReport,
|
|
IncomeExpenseReport,
|
|
NetWorthReport,
|
|
SavingsRateReport,
|
|
SpendingTrendsReport,
|
|
)
|
|
from app.services import report_service
|
|
|
|
router = APIRouter(prefix="/reports", tags=["reports"])
|
|
|
|
|
|
@router.get("/net-worth", response_model=NetWorthReport)
|
|
async def net_worth_report(
|
|
months: int = Query(default=12, ge=1, le=60),
|
|
db: AsyncSession = Depends(get_db),
|
|
current_user: User = Depends(get_current_user),
|
|
):
|
|
return await report_service.get_net_worth_report(
|
|
db, current_user.id, current_user.base_currency, months
|
|
)
|
|
|
|
|
|
@router.get("/income-vs-expense", response_model=IncomeExpenseReport)
|
|
async def income_expense_report(
|
|
months: int = Query(default=12, ge=1, le=60),
|
|
db: AsyncSession = Depends(get_db),
|
|
current_user: User = Depends(get_current_user),
|
|
):
|
|
return await report_service.get_income_expense_report(db, current_user.id, months)
|
|
|
|
|
|
@router.get("/cash-flow", response_model=CashFlowReport)
|
|
async def cash_flow_report(
|
|
date_from: date = Query(default=None),
|
|
date_to: date = Query(default=None),
|
|
db: AsyncSession = Depends(get_db),
|
|
current_user: User = Depends(get_current_user),
|
|
):
|
|
today = date.today()
|
|
df = date_from or (today - timedelta(days=30))
|
|
dt = date_to or today
|
|
return await report_service.get_cash_flow_report(db, current_user.id, df, dt)
|
|
|
|
|
|
@router.get("/category-breakdown", response_model=CategoryBreakdownReport)
|
|
async def category_breakdown(
|
|
date_from: date = Query(default=None),
|
|
date_to: date = Query(default=None),
|
|
type: str = Query(default="expense"),
|
|
db: AsyncSession = Depends(get_db),
|
|
current_user: User = Depends(get_current_user),
|
|
):
|
|
today = date.today()
|
|
df = date_from or date(today.year, today.month, 1)
|
|
dt = date_to or today
|
|
return await report_service.get_category_breakdown(db, current_user.id, df, dt, type)
|
|
|
|
|
|
@router.get("/budget-vs-actual", response_model=BudgetVsActualReport)
|
|
async def budget_vs_actual(
|
|
db: AsyncSession = Depends(get_db),
|
|
current_user: User = Depends(get_current_user),
|
|
):
|
|
return await report_service.get_budget_vs_actual(db, current_user.id)
|
|
|
|
|
|
@router.get("/spending-trends", response_model=SpendingTrendsReport)
|
|
async def spending_trends(
|
|
months: int = Query(default=6, ge=1, le=24),
|
|
db: AsyncSession = Depends(get_db),
|
|
current_user: User = Depends(get_current_user),
|
|
):
|
|
return await report_service.get_spending_trends(db, current_user.id, months)
|
|
|
|
|
|
@router.get("/savings-rate", response_model=SavingsRateReport)
|
|
async def savings_rate(
|
|
months: int = Query(default=12, ge=1, le=60),
|
|
db: AsyncSession = Depends(get_db),
|
|
current_user: User = Depends(get_current_user),
|
|
):
|
|
return await report_service.get_savings_rate_report(db, current_user.id, months)
|
|
|
|
|
|
@router.get("/balance-sheet", response_model=BalanceSheetReport)
|
|
async def balance_sheet(
|
|
db: AsyncSession = Depends(get_db),
|
|
current_user: User = Depends(get_current_user),
|
|
):
|
|
return await report_service.get_balance_sheet(db, current_user.id, current_user.base_currency)
|