refactor: introduce app factory + blueprints (auth, core, admin users, invite); add utils and wsgi entrypoint; keep legacy routes for now

app/utils/auth.py

@@ -0,0 +1,67 @@
+from flask import redirect, url_for, flash
+from flask_login import current_user
+from functools import wraps
+from werkzeug.security import generate_password_hash, check_password_hash
+import os
+
+from app.models import User
+
+
+def admin_required(f):
+    @wraps(f)
+    def decorated(*args, **kwargs):
+        if not current_user.is_authenticated:
+            return redirect(url_for('login'))
+        if not getattr(current_user, 'is_admin', False):
+            flash('Недостаточно прав', 'danger')
+            return redirect(url_for('dashboard'))
+        return f(*args, **kwargs)
+    return decorated
+
+
+def ensure_default_admin():
+    username = os.environ.get('ADMIN_USERNAME', 'ruslan')
+    password = os.environ.get('ADMIN_PASSWORD', '1234')
+    email = os.environ.get('ADMIN_EMAIL', 'ruslan@example.com')
+
+    user = User.get_or_none(User.username == username)
+    if user:
+        changed = False
+        if not user.is_admin:
+            user.is_admin = True
+            changed = True
+        try:
+            if not check_password_hash(user.password_hash, password):
+                user.password_hash = generate_password_hash(password)
+                changed = True
+        except Exception:
+            user.password_hash = generate_password_hash(password)
+            changed = True
+        if changed:
+            user.save()
+    else:
+        User.create(
+            username=username,
+            email=email,
+            full_name='Администратор',
+            password_hash=generate_password_hash(password),
+            is_admin=True
+        )
+
+
+def ensure_test_users():
+    tests = [
+        ('test1', 'test1@example.com', 'Пользователь 1'),
+        ('test2', 'test2@example.com', 'Пользователь 2'),
+    ]
+    for username, email, full_name in tests:
+        u = User.get_or_none(User.username == username)
+        if not u:
+            User.create(
+                username=username,
+                email=email,
+                full_name=full_name,
+                password_hash=generate_password_hash(os.environ.get('TEST_USER_PASSWORD', '1234')),
+                is_admin=False,
+            )
+