i dZddlmZddlmZmZddlmZddlmZm Z ddl m Z m Z ddl mZddlmZmZmZdd lmZdd lmZdd lmZdd lmZeeZed gZej?dee ef ddZ ejCdee efddZ"Gdde Z#d dZ$ej?dd!dZ%ejCded"dZ&ejCded#d$dZ'y)%u routes/fraud.py — Fraud Detection POST /api/fraud/event — log a fraud event (JWT-authed candidate) POST /api/fraud/event-by-key — log a fraud event keyed by access_key (new external-login flow) GET /api/fraud/report — fraud report for the authenticated candidate GET /api/fraud/report-by-key/{k} — fraud report by access_key GET /api/admin/fraud/all — admin: all fraud events ) annotations)datetimetimezone)Any) APIRouterDepends) BaseModelField)settings)FraudEventRequestFraudEventResponseSuccessResponse) fraud_service)get_current_candidate)json_db) get_loggerfraud)tagsz/api/fraud/event)response_modelc 8K|jdxs|jdxsd}tj|d|j|j|j |j i|jxsid|id{}tdi|S7w)z6Log a fraud event for the JWT-authenticated candidate. access_keyid candidate_id event_typemessage timestamp round_nummetadataN) getr log_eventrrrroundr r )body candidaterresults g/Users/priyanka/Documents/AI_Agent_Assessment/pepole_hub_candidate/people_hub_candidate/routes/fraud.pylog_fraud_eventr)s |,I d0CIrJ **t_?? ..**DT]](bD<D F  ' ''sBBB Bz/api/fraud/reportcFttj|dS)Nrdata)rr get_report)r&s r( fraud_reportr.1s  8 84 I JJcdeZdZUeddZded<dZded<dZd ed <d Zd ed <dZ ded<y)FraudEventByKeyRequest.u)TAB_SWITCH | PASTE | MULTIPLE_FACES | …) descriptionstrrrrN str | Nonerintr$zdict[str, Any] | Noner ) __name__ __module__ __qualname__r r__annotations__rrr$r r!r/r(r1r18s="'9d"eJe"$GS$"&Iz&"#E3#&*H#*r/r1cdtjtjj S)N)rnowrutc isoformatr!r/r(_now_isor?@s << % / / 11r/z$/api/fraud/event-by-key/{access_key}c vK|xsdj}|sdddS|jxs t}tj||j |j ||ji|jxsid|id{} tjtj}|rT|d}|jd |k(r;|jds*tjtj|d d|id d i|S7#t$r }t j#d |Yd}~,d}~wwxYww)u Log a fraud event keyed by access_key — for candidates authenticated via the external People Hub Login API (no local JWT). Per spec, every event written to fraud_log.json must carry: • access_key • event type • timestamp The fraud_service in-memory counters still drive `action` (none/warn/ disqualify), keyed off the access_key as the candidate identifier. rFzaccess_key required)okerrorrrNrrz0post-write access_key tag failed (non-fatal): %srAT)striprr?rr#rrr$r dbfind_allr FRAUD_LOG_FILEr"update Exceptionlogdebug)rr%keytsr'eventslastexcs r(log_fraud_event_by_keyrQDs   " " $C &;<<  %8:B **?? **=T]](b=<= FKX445 ":Dxx'3.txx 7M (114: c?RS $ !& !!+$ K DcJJKs=BD9D D9 A9D D9 D6D1,D91D66D9z%/api/fraud/report-by-key/{access_key}c|xsdj}|s tiSttj|S)Nrr+)rDrrr-)rrLs r(fraud_report_by_keyrSos9   " " $C B''  8 8 = >>r/z/api/admin/fraud/allNc|r&tjtj|}nK|r&tjtj|}n#tjtj}t |S)z Admin: get all fraud events, optionally filtered by candidate_id or access_key. Protect with admin JWT in production. )r)rr+)rE find_manyr rGrFr)rrrNs r(all_fraud_eventsrVysU h55*M h55LQX445  ''r/)r%r r&dict)r&rW)returnr3)rr3r%r1)rr3)NN)rr4rr4)(__doc__ __future__rrrtypingrfastapirrpydanticr r configr models.schemasr r rservices.fraud_servicermiddleware.auth_middlewarerutilsrrE utils.loggerrr7rJrouterpostr)r"r.r1r?rQrSrVr!r/r(rfs)#'&%QQ0<#  "  0BC34( ((D(" @#*+@#AKAK +Y+2 34'"5'"T 3OT?U? "?C (D (r/