v 3.0.3

app/api/actions.py

@@ -0,0 +1,86 @@
+from fastapi import APIRouter, HTTPException
+from pydantic import BaseModel
+from loguru import logger
+
+from app.database import get_db
+from app.models import ActionRequest
+from app.core.task_manager import task_manager
+
+router = APIRouter(prefix="/api/actions", tags=["actions"])
+
+VALID_ACTIONS = {
+    "change_password",
+    "random_password",
+    "change_email",
+    "change_phone",
+    "remove_guard",
+    "generate_2fa",
+    "validate",
+    "add_friend",
+    "accept_logins",
+    "change_language",
+}
+
+
+@router.post("")
+async def execute_action(request: ActionRequest):
+    if request.action not in VALID_ACTIONS:
+        raise HTTPException(
+            status_code=400,
+            detail=f"Invalid action. Valid: {', '.join(sorted(VALID_ACTIONS))}",
+        )
+
+    db = await get_db()
+    placeholders = ",".join("?" for _ in request.account_ids)
+    cursor = await db.execute(
+        f"SELECT * FROM accounts WHERE id IN ({placeholders})",
+        request.account_ids,
+    )
+    accounts = [dict(r) for r in await cursor.fetchall()]
+
+    if not accounts:
+        raise HTTPException(status_code=404, detail="No accounts found")
+
+    task_id = await task_manager.submit(
+        task_type=request.action,
+        accounts=accounts,
+        params=request.params or {},
+    )
+
+    logger.info(
+        f"Action '{request.action}' submitted for {len(accounts)} accounts → task {task_id}"
+    )
+    return {"task_id": task_id, "accounts_count": len(accounts)}
+
+
+class Generate2FARequest(BaseModel):
+    shared_secret: str
+
+
+class Generate2FAByAccountRequest(BaseModel):
+    account_id: int
+
+
+@router.post("/generate-2fa")
+async def generate_2fa_code(request: Generate2FARequest):
+    """Server-side 2FA code generation from shared_secret."""
+    from app.services.steam_guard import generate_2fa_code as gen_code
+
+    code = gen_code(request.shared_secret)
+    return {"code": code}
+
+
+@router.post("/generate-2fa-by-account")
+async def generate_2fa_by_account(request: Generate2FAByAccountRequest):
+    """Generate 2FA code for an account using its stored shared_secret."""
+    from app.services.steam_guard import generate_2fa_code as gen_code
+
+    db = await get_db()
+    cursor = await db.execute(
+        "SELECT shared_secret FROM accounts WHERE id = ?",
+        (request.account_id,),
+    )
+    row = await cursor.fetchone()
+    if not row or not row["shared_secret"]:
+        raise HTTPException(status_code=404, detail="Account not found or has no shared_secret")
+    return {"code": gen_code(row["shared_secret"])}