update many files

backend/auth.py

@@ -5,7 +5,10 @@ from datetime import datetime, timedelta
 from fastapi import Header, HTTPException
 from dotenv import load_dotenv
 import os   
+from fastapi import Depends, HTTPException
+from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
 
+security = HTTPBearer()
 load_dotenv()
 
 SECRET_KEY = os.getenv("SECRET_KEY")
@@ -64,32 +67,15 @@ def verify_user(username, password):
     return None
 
 
-def get_current_user(authorization: str = Header(None)):
+def get_current_user(
+    credentials: HTTPAuthorizationCredentials = Depends(security)
+):
+    token = credentials.credentials
 
-    if authorization is None:
-        raise HTTPException(
-            status_code=401,
-            detail="Missing token"
-        )
+    payload = jwt.decode(
+        token,
+        SECRET_KEY,
+        algorithms=[ALGORITHM]
+    )
 
-    try:
-        scheme, token = authorization.split(" ")
-
-        if scheme.lower() != "bearer":
-            raise Exception()
-
-        payload = jwt.decode(
-            token,
-            SECRET_KEY,
-            algorithms=[ALGORITHM]
-        )
-
-        user_id = payload["user_id"]
-
-        return user_id
-
-    except JWTError:
-        raise HTTPException(
-            status_code=401,
-            detail="Invalid token"
-        )
+    return payload["user_id"]

backend/main.py

@@ -1,22 +1,24 @@
-from fastapi import FastAPI
+from fastapi import FastAPI, Depends
 from pydantic import BaseModel
 
-from database import fetch_all
+from database import fetch_all, fetch_one
 from events import create_event
-from auth import create_user, verify_user, create_token
+from auth import create_user, verify_user, create_token, get_current_user
 from rooms import create_room, search_room, accept_room
 
+
 class Login(BaseModel):
     username: str
     password: str
 
+
 class UserCreate(BaseModel):
-    username: str   
+    username: str
     password: str
 
+
 class EventCreate(BaseModel):
     room_id: int
-    creator_id: int
     type: str
     title: str
     description: str
@@ -26,19 +28,20 @@ class EventCreate(BaseModel):
     status: str
     min_people: int
 
+
 class RoomCreate(BaseModel):
     room_name: str
-    creator_id: int
     invite_code: str
 
+
 class RoomSearch(BaseModel):
-    user_id: int
     invite_code: str
 
+
 class RoomJoin(BaseModel):
-    user_id: int
     invite_code: str
 
+
 app = FastAPI(
     title="Calendar API",
     description="Room based agenda system",
@@ -50,8 +53,7 @@ app = FastAPI(
 def home():
     return {
         "status": "online",
-        "service": "Calendar API",
-        "cheese": "tasty"
+        "service": "Calendar API"
     }
 
 
@@ -66,42 +68,15 @@ def database_status():
     }
 
 
-@app.post("/events")
-def api_create_event(event: EventCreate):
+# users
 
-    event_id = create_event(
-        room_id=event.room_id,
-        creator_id=event.creator_id,
-        type=event.type,
-        title=event.title,
-        description=event.description,
-        start_time=event.start_time,
-        end_time=event.end_time,
-        visibility=event.visibility,
-        status=event.status,
-        min_people=event.min_people
-    )
-
-    return {
-        "status": "created",
-        "event_id": event_id
-    }
-
-
-@app.get("/events")
-def get_events():
-    events = fetch_all("SELECT * FROM events;")
-
-    return {
-        "events": [dict(event) for event in events]
-    }
 
 @app.post("/create-user")
 def api_create_user(user: UserCreate):
 
     user_id = create_user(
-        username=user.username,
-        password=user.password,
+        user.username,
+        user.password
     )
 
     return {
@@ -109,6 +84,7 @@ def api_create_user(user: UserCreate):
         "user_id": user_id
     }
 
+
 @app.post("/login")
 def api_login(login: Login):
 
@@ -131,46 +107,65 @@ def api_login(login: Login):
     }
 
 
-@app.post("/create_room")
-def api_create_room(room: RoomCreate):
-    
-    room_id =  create_room(
+@app.get("/me")
+def get_me(
+    user_id: int = Depends(get_current_user)
+):
+    return {
+        "user_id": user_id
+    }
+
+
+# rooms
+
+
+@app.post("/create-room")
+def api_create_room(
+    room: RoomCreate,
+    user_id: int = Depends(get_current_user)
+):
+
+    room_id = create_room(
         room.room_name,
-        room.creator_id,
+        user_id,
         room.invite_code
     )
 
-    if room_id is None:
-        return {
-            "status": "failed"
-        }
-
     return {
-        "status": "success",
+        "status": "created",
         "room_id": room_id
     }
 
+
 @app.post("/search-room")
-def api_search_room(search_for_room: RoomSearch):
+def api_search_room(
+    room: RoomSearch
+):
+
     room_name = search_room(
-        search_for_room.invite_code
+        room.invite_code
     )
 
     if room_name is None:
         return {
-            "status": "failed"
+            "status": "failed",
+            "reason": "room_not_found"
         }
 
     return {
-        "status": "success",
+        "status": "found",
         "room_name": room_name
     }
 
+
 @app.post("/join-room")
-def api_join_room(room: RoomJoin):
+def api_join_room(
+    room: RoomJoin,
+    user_id: int = Depends(get_current_user)
+):
 
     result = accept_room(
-        room.user_id,
+        user_id,
         room.invite_code
     )
 
@@ -183,4 +178,70 @@ def api_join_room(room: RoomJoin):
     return {
         "status": "joined",
         **result
+    }
+
+# events
+
+@app.post("/events")
+def api_create_event(
+    event: EventCreate,
+    user_id: int = Depends(get_current_user)
+):
+
+    # check of gebruiker lid is
+    member = fetch_one(
+        """
+        SELECT *
+        FROM room_members
+        WHERE room_id = ?
+        AND user_id = ?
+        """,
+        (
+            event.room_id,
+            user_id
+        )
+    )
+
+    if member is None:
+        return {
+            "status": "failed",
+            "reason": "not_room_member"
+        }
+
+
+    event_id = create_event(
+        room_id=event.room_id,
+        creator_id=user_id,
+        type=event.type,
+        title=event.title,
+        description=event.description,
+        start_time=event.start_time,
+        end_time=event.end_time,
+        visibility=event.visibility,
+        status=event.status,
+        min_people=event.min_people
+    )
+
+    return {
+        "status": "created",
+        "event_id": event_id
+    }
+
+
+@app.get("/events")
+def get_events(
+    user_id: int = Depends(get_current_user)
+):
+
+    events = fetch_all(
+        """
+        SELECT *
+        FROM events
+        WHERE creator_id = ?
+        """,
+        (user_id,)
+    )
+
+    return {
+        "events": [dict(event) for event in events]
     }

backend/rooms.py

@@ -81,39 +81,54 @@ def search_room(
     return room["name"]
 
 
-def accept_room(
-    user_id,
-    invite_code
-):
+def accept_room(user_id, invite_code):
+
     query = """
     SELECT id
     FROM rooms
     WHERE invite_code = ?
     """
+
     room = fetch_one(
         query,
-        (
-            invite_code,
-        )
+        (invite_code,)
     )
 
     if room is None:
         return None
 
     room_id = room["id"]
-    role = DEFAULT_ROLE
-    query2 = """
-    INSERT INTO "main"."room_members"
-    ("room_id", "user_id", "role")
-    VALUES (?, ?, ?);
+
+    # check dubbele join
+    existing = fetch_one(
+        """
+        SELECT id
+        FROM room_members
+        WHERE room_id = ?
+        AND user_id = ?
+        """,
+        (
+            room_id,
+            user_id
+        )
+    )
+
+    if existing:
+        return None
+
+
+    query = """
+    INSERT INTO room_members
+    (room_id, user_id, role)
+    VALUES (?, ?, ?)
     """
 
     member_id = execute(
-        query2,
+        query,
         (
             room_id,
             user_id,
-            role
+            "member"
         )
     )