import logging from contextlib import asynccontextmanager from fastapi import FastAPI, Request, status from fastapi.middleware.cors import CORSMiddleware from fastapi.responses import JSONResponse from fastapi.exceptions import RequestValidationError from sqlalchemy.exc import SQLAlchemyError from app.routers import auth as auth_router from app.routers import techniques as techniques_router from app.routers import tests as tests_router from app.routers import evidence as evidence_router from app.routers import test_templates as test_templates_router from app.routers import system as system_router from app.routers import metrics as metrics_router from app.routers import users as users_router from app.routers import audit as audit_router from app.routers import notifications as notifications_router from app.routers import reports as reports_router from app.routers import data_sources as data_sources_router from app.routers import threat_actors as threat_actors_router from app.routers import d3fend as d3fend_router from app.routers import detection_rules as detection_rules_router from app.routers import campaigns as campaigns_router from app.routers import heatmap as heatmap_router from app.storage import ensure_bucket_exists from app.jobs.mitre_sync_job import start_scheduler, scheduler # ── Logging ─────────────────────────────────────────────────────────────── logging.basicConfig( level=logging.INFO, format="%(asctime)s %(levelname)-8s %(name)s — %(message)s", ) @asynccontextmanager async def lifespan(app: FastAPI): """Startup / shutdown logic.""" ensure_bucket_exists() start_scheduler() yield # Graceful shutdown of the background scheduler scheduler.shutdown(wait=False) app = FastAPI(title="Attack Coverage Platform", lifespan=lifespan) # ── CORS ────────────────────────────────────────────────────────────────── app.add_middleware( CORSMiddleware, allow_origins=["http://localhost:3000", "http://localhost:5173"], allow_credentials=True, allow_methods=["*"], allow_headers=["*"], ) # ── Routers ────────────────────────────────────────────────────────────── app.include_router(auth_router.router, prefix="/api/v1") app.include_router(techniques_router.router, prefix="/api/v1") app.include_router(tests_router.router, prefix="/api/v1") app.include_router(evidence_router.router, prefix="/api/v1") app.include_router(test_templates_router.router, prefix="/api/v1") app.include_router(system_router.router, prefix="/api/v1") app.include_router(metrics_router.router, prefix="/api/v1") app.include_router(users_router.router, prefix="/api/v1") app.include_router(audit_router.router, prefix="/api/v1") app.include_router(notifications_router.router, prefix="/api/v1") app.include_router(reports_router.router, prefix="/api/v1") app.include_router(data_sources_router.router, prefix="/api/v1") app.include_router(threat_actors_router.router, prefix="/api/v1") app.include_router(d3fend_router.router, prefix="/api/v1") app.include_router(detection_rules_router.router, prefix="/api/v1") app.include_router(campaigns_router.router, prefix="/api/v1") app.include_router(heatmap_router.router, prefix="/api/v1") @app.get("/health") def health(): return {"status": "ok"} # ── Exception Handlers ──────────────────────────────────────────────────── @app.exception_handler(RequestValidationError) async def validation_exception_handler(request: Request, exc: RequestValidationError): """Handle validation errors with consistent format.""" return JSONResponse( status_code=status.HTTP_400_BAD_REQUEST, content={ "detail": "Validation error", "code": "VALIDATION_ERROR", "errors": exc.errors(), }, ) @app.exception_handler(SQLAlchemyError) async def sqlalchemy_exception_handler(request: Request, exc: SQLAlchemyError): """Handle database errors.""" logging.error(f"Database error: {exc}") return JSONResponse( status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, content={ "detail": "Database error occurred", "code": "DATABASE_ERROR", }, ) @app.exception_handler(Exception) async def general_exception_handler(request: Request, exc: Exception): """Handle all unhandled exceptions.""" logging.error(f"Unhandled exception: {exc}") return JSONResponse( status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, content={ "detail": "An internal server error occurred", "code": "INTERNAL_ERROR", }, )