116 lines
4.4 KiB
Python
116 lines
4.4 KiB
Python
from fastapi import APIRouter, Depends, HTTPException, Query, Header, status
|
|
from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
|
|
from sqlalchemy.orm import Session
|
|
from typing import Optional, List
|
|
#
|
|
from database import get_db
|
|
from app.core.auth import get_current_user
|
|
from app.modules.users.models import Users # Modelo base de usuario
|
|
from app.modules.credits.models import Credits
|
|
from app.modules.credits.schema import CreditsCreate, CreditsResponse, CreditsUpdate, MessageResponse
|
|
from app.modules.credits.service import CreditsService
|
|
|
|
router = APIRouter(prefix="/credits", tags=["credits"])
|
|
security = HTTPBearer()
|
|
|
|
#================ Create ====================
|
|
@router.post("/create", response_model=CreditsResponse, status_code=status.HTTP_201_CREATED)
|
|
async def create_credits(
|
|
data: CreditsCreate,
|
|
db: Session = Depends(get_db),
|
|
current_user: Users = Depends(get_current_user)
|
|
):
|
|
"""Create a credits - Requires authentication"""
|
|
|
|
if not current_user:
|
|
raise HTTPException(status_code=401, detail="User not found - invalid token")
|
|
|
|
if current_user.tipo_usuario not in ["root", "admin"]:
|
|
raise HTTPException(status_code=403, detail="You don't have permission to create credits")
|
|
|
|
try:
|
|
result = CreditsService.create_credits(db=db, data=data)
|
|
return result
|
|
except ValueError as e:
|
|
raise HTTPException(status_code=400, detail=str(e))
|
|
|
|
#================ Get ====================
|
|
@router.get("/", response_model=List[CreditsResponse])
|
|
def get_creditss(
|
|
db: Session = Depends(get_db),
|
|
current_user: Users = Depends(get_current_user),
|
|
skip: int = Query(0, ge=0, description="Number of records to skip"),
|
|
limit: int = Query(100, ge=1, le=1000, description="Max number of records to return")
|
|
):
|
|
"""Get list with pagination - requires authentication"""
|
|
|
|
if not current_user:
|
|
raise HTTPException(status_code=401, detail="Authentication required")
|
|
|
|
return CreditsService.get_creditss(db=db, skip=skip, limit=limit)
|
|
|
|
#================ Get by ID ====================
|
|
@router.get("/{{{entity_name}}_id}", response_model=CreditsResponse)
|
|
def get_credits_by_id(
|
|
credits_id: int,
|
|
db: Session = Depends(get_db),
|
|
current_user: Users = Depends(get_current_user)
|
|
):
|
|
"""Get credits by ID - requires authentication"""
|
|
|
|
if not current_user:
|
|
raise HTTPException(status_code=401, detail="Authentication required")
|
|
|
|
try:
|
|
result = CreditsService.get_credits(db=db, credits_id=credits_id, current_user=current_user)
|
|
return result
|
|
except ValueError as e:
|
|
raise HTTPException(status_code=404, detail=str(e))
|
|
|
|
#================ Update ====================
|
|
@router.patch("/update/{{{entity_name}}_id}", response_model=CreditsResponse)
|
|
async def update_credits(
|
|
credits_id: int,
|
|
data: CreditsUpdate,
|
|
db: Session = Depends(get_db),
|
|
current_user: Users = Depends(get_current_user)
|
|
):
|
|
"""Update existing credits - requires authentication"""
|
|
|
|
if not current_user:
|
|
raise HTTPException(status_code=401, detail="Authentication required")
|
|
|
|
if current_user.tipo_usuario not in ["root", "admin"]:
|
|
raise HTTPException(status_code=403, detail="You don't have permission to update credits")
|
|
|
|
try:
|
|
result = CreditsService.update_credits(
|
|
db=db,
|
|
credits_id=credits_id,
|
|
data=data,
|
|
current_user=current_user
|
|
)
|
|
return result
|
|
except ValueError as e:
|
|
raise HTTPException(status_code=404, detail=str(e))
|
|
|
|
#================ Delete ====================
|
|
@router.delete("/delete/{{{entity_name}}_id}", response_model=MessageResponse ,status_code=status.HTTP_200_OK)
|
|
async def delete_credits(
|
|
credits_id: int,
|
|
db: Session = Depends(get_db),
|
|
current_user: Users = Depends(get_current_user)
|
|
):
|
|
"""Delete credits by ID - requires authentication"""
|
|
|
|
if not current_user:
|
|
raise HTTPException(status_code=401, detail="Authentication required")
|
|
|
|
if current_user.tipo_usuario not in ["root", "admin"]:
|
|
raise HTTPException(status_code=403, detail="You don't have permission to delete credits")
|
|
|
|
try:
|
|
result = CreditsService.delete_credits(db=db, credits_id=credits_id, current_user=current_user)
|
|
return {"message": "credits deleted successfully"}
|
|
except ValueError as e:
|
|
raise HTTPException(status_code=404, detail=str(e)) |