update many files

backend/main.py

@@ -1,22 +1,24 @@
-from fastapi import FastAPI
+from fastapi import FastAPI, Depends
 from pydantic import BaseModel
 
-from database import fetch_all
+from database import fetch_all, fetch_one
 from events import create_event
-from auth import create_user, verify_user, create_token
+from auth import create_user, verify_user, create_token, get_current_user
 from rooms import create_room, search_room, accept_room
 
+
 class Login(BaseModel):
     username: str
     password: str
 
+
 class UserCreate(BaseModel):
-    username: str   
+    username: str
     password: str
 
+
 class EventCreate(BaseModel):
     room_id: int
-    creator_id: int
     type: str
     title: str
     description: str
@@ -26,19 +28,20 @@ class EventCreate(BaseModel):
     status: str
     min_people: int
 
+
 class RoomCreate(BaseModel):
     room_name: str
-    creator_id: int
     invite_code: str
 
+
 class RoomSearch(BaseModel):
-    user_id: int
     invite_code: str
 
+
 class RoomJoin(BaseModel):
-    user_id: int
     invite_code: str
 
+
 app = FastAPI(
     title="Calendar API",
     description="Room based agenda system",
@@ -50,8 +53,7 @@ app = FastAPI(
 def home():
     return {
         "status": "online",
-        "service": "Calendar API",
-        "cheese": "tasty"
+        "service": "Calendar API"
     }
 
 
@@ -66,42 +68,15 @@ def database_status():
     }
 
 
-@app.post("/events")
-def api_create_event(event: EventCreate):
+# users
 
-    event_id = create_event(
-        room_id=event.room_id,
-        creator_id=event.creator_id,
-        type=event.type,
-        title=event.title,
-        description=event.description,
-        start_time=event.start_time,
-        end_time=event.end_time,
-        visibility=event.visibility,
-        status=event.status,
-        min_people=event.min_people
-    )
-
-    return {
-        "status": "created",
-        "event_id": event_id
-    }
-
-
-@app.get("/events")
-def get_events():
-    events = fetch_all("SELECT * FROM events;")
-
-    return {
-        "events": [dict(event) for event in events]
-    }
 
 @app.post("/create-user")
 def api_create_user(user: UserCreate):
 
     user_id = create_user(
-        username=user.username,
-        password=user.password,
+        user.username,
+        user.password
     )
 
     return {
@@ -109,6 +84,7 @@ def api_create_user(user: UserCreate):
         "user_id": user_id
     }
 
+
 @app.post("/login")
 def api_login(login: Login):
 
@@ -131,46 +107,65 @@ def api_login(login: Login):
     }
 
 
-@app.post("/create_room")
-def api_create_room(room: RoomCreate):
-    
-    room_id =  create_room(
+@app.get("/me")
+def get_me(
+    user_id: int = Depends(get_current_user)
+):
+    return {
+        "user_id": user_id
+    }
+
+
+# rooms
+
+
+@app.post("/create-room")
+def api_create_room(
+    room: RoomCreate,
+    user_id: int = Depends(get_current_user)
+):
+
+    room_id = create_room(
         room.room_name,
-        room.creator_id,
+        user_id,
         room.invite_code
     )
 
-    if room_id is None:
-        return {
-            "status": "failed"
-        }
-
     return {
-        "status": "success",
+        "status": "created",
         "room_id": room_id
     }
 
+
 @app.post("/search-room")
-def api_search_room(search_for_room: RoomSearch):
+def api_search_room(
+    room: RoomSearch
+):
+
     room_name = search_room(
-        search_for_room.invite_code
+        room.invite_code
     )
 
     if room_name is None:
         return {
-            "status": "failed"
+            "status": "failed",
+            "reason": "room_not_found"
         }
 
     return {
-        "status": "success",
+        "status": "found",
         "room_name": room_name
     }
 
+
 @app.post("/join-room")
-def api_join_room(room: RoomJoin):
+def api_join_room(
+    room: RoomJoin,
+    user_id: int = Depends(get_current_user)
+):
 
     result = accept_room(
-        room.user_id,
+        user_id,
         room.invite_code
     )
 
@@ -183,4 +178,70 @@ def api_join_room(room: RoomJoin):
     return {
         "status": "joined",
         **result
+    }
+
+# events
+
+@app.post("/events")
+def api_create_event(
+    event: EventCreate,
+    user_id: int = Depends(get_current_user)
+):
+
+    # check of gebruiker lid is
+    member = fetch_one(
+        """
+        SELECT *
+        FROM room_members
+        WHERE room_id = ?
+        AND user_id = ?
+        """,
+        (
+            event.room_id,
+            user_id
+        )
+    )
+
+    if member is None:
+        return {
+            "status": "failed",
+            "reason": "not_room_member"
+        }
+
+
+    event_id = create_event(
+        room_id=event.room_id,
+        creator_id=user_id,
+        type=event.type,
+        title=event.title,
+        description=event.description,
+        start_time=event.start_time,
+        end_time=event.end_time,
+        visibility=event.visibility,
+        status=event.status,
+        min_people=event.min_people
+    )
+
+    return {
+        "status": "created",
+        "event_id": event_id
+    }
+
+
+@app.get("/events")
+def get_events(
+    user_id: int = Depends(get_current_user)
+):
+
+    events = fetch_all(
+        """
+        SELECT *
+        FROM events
+        WHERE creator_id = ?
+        """,
+        (user_id,)
+    )
+
+    return {
+        "events": [dict(event) for event in events]
     }