raisfast 0.2.19

The last backend you'll ever need. Rust-powered headless CMS with built-in blog, ecommerce, wallet, payment and 4 plugin engines.
//! Category handlers

use axum::Json;
use axum::extract::{Path, Query, State};

use crate::dto::{
    BatchRequest, BatchResponse, CategoryResponse, CreateCategoryRequest, UpdateCategoryRequest,
};
use crate::errors::app_error::AppResult;
use crate::errors::response::{ApiResponse, PaginatedData};
use crate::errors::validation;
use crate::middleware::auth::AuthUser;
use crate::utils::pagination::PaginationParams;

pub fn routes(
    registry: &mut crate::server::RouteRegistry,
    config: &crate::config::app::AppConfig,
) -> axum::Router<crate::AppState> {
    let restful = config.api_restful;
    let r = axum::Router::new();
    let r = reg_route!(
        r,
        registry,
        restful,
        "/categories",
        get,
        self::list,
        "system public",
        "categories"
    );
    let r = reg_route!(
        r,
        registry,
        restful,
        "/categories",
        create,
        self::create,
        "system public",
        "categories"
    );
    let r = reg_route!(
        r,
        registry,
        restful,
        "/categories/{id}",
        get,
        self::get,
        "system public",
        "categories"
    );
    let r = reg_route!(
        r,
        registry,
        restful,
        "/categories/{id}",
        put,
        update,
        "system public",
        "categories"
    );
    let r = reg_route!(
        r,
        registry,
        restful,
        "/categories/{id}",
        delete,
        self::delete,
        "system public",
        "categories"
    );
    let r = reg_route!(
        r,
        registry,
        restful,
        "/admin/categories",
        get,
        admin_list,
        "system admin",
        "admin/categories"
    );
    let r = reg_route!(
        r,
        registry,
        restful,
        "/admin/categories",
        create,
        admin_create,
        "system admin",
        "admin/categories"
    );
    let r = reg_route!(
        r,
        registry,
        restful,
        "/admin/categories/{id}",
        put,
        admin_update,
        "system admin",
        "admin/categories"
    );
    let r = reg_route!(
        r,
        registry,
        restful,
        "/admin/categories/{id}",
        delete,
        admin_delete,
        "system admin",
        "admin/categories"
    );
    reg_route!(
        r,
        registry,
        restful,
        "/admin/categories/batch",
        post,
        admin_batch,
        "system admin",
        "admin/categories"
    )
}

/// Get category list (paginated)
#[utoipa::path(get, path = "/categories", tag = "categories",
    responses((status = 200, description = "Category list"))
)]
pub async fn list(
    auth: AuthUser,
    State(state): State<crate::AppState>,
    Query(mut params): Query<PaginationParams>,
) -> AppResult<ApiResponse<PaginatedData<CategoryResponse>>> {
    params.sanitize();
    let (items, total) = state
        .category_service
        .list_paginated(&auth, params.page, params.page_size)
        .await?;
    let items: Vec<CategoryResponse> = items
        .into_iter()
        .map(CategoryResponse::from_category)
        .collect();
    Ok(params.paginate(items, total))
}

/// Get a single category
#[utoipa::path(get, path = "/categories/{id}", tag = "categories",
    params(("id" = String, Path, description = "Category ID")),
    responses((status = 200, description = "Category details"))
)]
pub async fn get(
    auth: AuthUser,
    State(state): State<crate::AppState>,
    Path(id): Path<String>,
) -> AppResult<ApiResponse<CategoryResponse>> {
    let id = crate::types::snowflake_id::parse_id(&id)?;
    let cat = state.category_service.get(id, &auth).await?;
    Ok(ApiResponse::success(CategoryResponse::from_category(cat)))
}

/// Create a new category
#[utoipa::path(post, path = "/categories", tag = "categories",
    security(("bearer_auth" = [])),
    request_body = CreateCategoryRequest,
    responses((status = 200, description = "Category created"))
)]
pub async fn create(
    auth: AuthUser,
    State(state): State<crate::AppState>,
    Json(req): Json<CreateCategoryRequest>,
) -> AppResult<ApiResponse<CategoryResponse>> {
    auth.ensure_author()?;
    validation::validate(&req)?;
    let cat = state.category_service.create(&auth, req).await?;
    Ok(ApiResponse::success(CategoryResponse::from_category(cat)))
}

/// Update a category
#[utoipa::path(put, path = "/categories/{id}", tag = "categories",
    security(("bearer_auth" = [])),
    params(("id" = String, Path, description = "Category ID")),
    request_body = UpdateCategoryRequest,
    responses((status = 200, description = "Category updated"))
)]
pub async fn update(
    auth: AuthUser,
    State(state): State<crate::AppState>,
    Path(id): Path<String>,
    Json(req): Json<UpdateCategoryRequest>,
) -> AppResult<ApiResponse<CategoryResponse>> {
    auth.ensure_author()?;
    validation::validate(&req)?;
    let id = crate::types::snowflake_id::parse_id(&id)?;
    let cat = state.category_service.update(&auth, id, req).await?;
    Ok(ApiResponse::success(CategoryResponse::from_category(cat)))
}

/// Delete a category
#[utoipa::path(delete, path = "/categories/{id}", tag = "categories",
    security(("bearer_auth" = [])),
    params(("id" = String, Path, description = "Category ID")),
    responses((status = 200, description = "Category deleted"))
)]
pub async fn delete(
    auth: AuthUser,
    State(state): State<crate::AppState>,
    Path(id): Path<String>,
) -> AppResult<ApiResponse<()>> {
    auth.ensure_author()?;
    let id = crate::types::snowflake_id::parse_id(&id)?;
    state.category_service.delete(id, &auth).await?;
    Ok(ApiResponse::success(()))
}

// ── Admin handlers ──

pub async fn admin_list(
    auth: AuthUser,
    State(state): State<crate::AppState>,
    Query(mut params): Query<PaginationParams>,
) -> AppResult<ApiResponse<PaginatedData<CategoryResponse>>> {
    auth.ensure_admin()?;
    params.sanitize();
    let (items, total) = state
        .category_service
        .list_paginated(&auth, params.page, params.page_size)
        .await?;
    let items: Vec<CategoryResponse> = items
        .into_iter()
        .map(CategoryResponse::from_category)
        .collect();
    Ok(params.paginate(items, total))
}

pub async fn admin_create(
    auth: AuthUser,
    State(state): State<crate::AppState>,
    Json(req): Json<CreateCategoryRequest>,
) -> AppResult<ApiResponse<CategoryResponse>> {
    auth.ensure_admin()?;
    validation::validate(&req)?;
    let cat = state.category_service.create(&auth, req).await?;
    Ok(ApiResponse::success(CategoryResponse::from_category(cat)))
}

pub async fn admin_update(
    auth: AuthUser,
    State(state): State<crate::AppState>,
    Path(id): Path<String>,
    Json(req): Json<UpdateCategoryRequest>,
) -> AppResult<ApiResponse<CategoryResponse>> {
    auth.ensure_admin()?;
    validation::validate(&req)?;
    let id = crate::types::snowflake_id::parse_id(&id)?;
    let cat = state.category_service.update(&auth, id, req).await?;
    Ok(ApiResponse::success(CategoryResponse::from_category(cat)))
}

pub async fn admin_delete(
    auth: AuthUser,
    State(state): State<crate::AppState>,
    Path(id): Path<String>,
) -> AppResult<ApiResponse<()>> {
    auth.ensure_admin()?;
    let id = crate::types::snowflake_id::parse_id(&id)?;
    state.category_service.delete(id, &auth).await?;
    Ok(ApiResponse::success(()))
}

pub async fn admin_batch(
    auth: AuthUser,
    State(state): State<crate::AppState>,
    Json(req): Json<BatchRequest>,
) -> AppResult<ApiResponse<BatchResponse>> {
    auth.ensure_admin()?;
    validation::validate(&req)?;
    let mut affected = 0usize;
    if req.action == "delete" {
        for raw_id in &req.ids {
            if let Ok(id) = crate::types::snowflake_id::parse_id(raw_id)
                && state.category_service.delete(id, &auth).await.is_ok()
            {
                affected += 1;
            }
        }
    }
    Ok(ApiResponse::success(BatchResponse::new(
        &req.action,
        affected,
    )))
}