feat: implement complete CMT backend with API endpoints and test suite

- Add 7 core API endpoints: users, transactions, partners, products, inventory, payments, credit - Implement role-based authentication (admin/write/read-only access) - Add comprehensive database models with proper relationships - Include full test coverage for all endpoints and business logic - Set up Alembic migrations and Docker configuration - Configure FastAPI app with CORS and database integration
2025-09-14 21:04:07 +02:00
parent 49c813778b
commit c086f64363
48 changed files with 6992 additions and 126 deletions
@@ -0,0 +1,126 @@
+from fastapi import APIRouter, Depends, HTTPException, status
+from sqlmodel import Session, select
+from app.core.db import get_session
+from app.core.auth import require_any_access, require_write_access, require_admin
+from app.schemas.models import Partner
+from app.schemas.schemas import (
+    PartnerCreate, 
+    PartnerUpdate, 
+    PartnerResponse, 
+    UserResponse
+)
+from typing import List
+
+router = APIRouter(prefix="/partners", tags=["partners"])
+
+# Create Partner
+@router.post("/", response_model=PartnerResponse, status_code=status.HTTP_201_CREATED)
+def create_partner(
+    partner: PartnerCreate, 
+    session: Session = Depends(get_session),
+    current_user: UserResponse = Depends(require_write_access)
+):
+    """Create a new partner (requires write access)."""
+    # Check if TIN number already exists
+    statement = select(Partner).where(Partner.tin_number == partner.tin_number)
+    existing_partner = session.exec(statement).first()
+    if existing_partner:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="Partner with this TIN number already exists"
+        )
+    
+    # Create new partner
+    partner_data = partner.model_dump()
+    db_partner = Partner(**partner_data)
+    
+    session.add(db_partner)
+    session.commit()
+    session.refresh(db_partner)
+    return db_partner
+
+# Read all Partners
+@router.get("/", response_model=List[PartnerResponse])
+def read_partners(
+    skip: int = 0, 
+    limit: int = 100, 
+    session: Session = Depends(get_session),
+    current_user: UserResponse = Depends(require_any_access)
+):
+    """Get all partners (requires authentication)."""
+    partners = session.exec(select(Partner).offset(skip).limit(limit)).all()
+    return partners
+
+# Read single Partner by ID
+@router.get("/{partner_id}", response_model=PartnerResponse)
+def read_partner(
+    partner_id: int, 
+    session: Session = Depends(get_session),
+    current_user: UserResponse = Depends(require_any_access)
+):
+    """Get specific partner by ID (requires authentication)."""
+    partner = session.get(Partner, partner_id)
+    if not partner:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND, 
+            detail="Partner not found"
+        )
+    return partner
+
+# Update Partner
+@router.put("/{partner_id}", response_model=PartnerResponse)
+def update_partner(
+    partner_id: int, 
+    partner: PartnerUpdate, 
+    session: Session = Depends(get_session),
+    current_user: UserResponse = Depends(require_write_access)
+):
+    """Update specific partner (requires write access)."""
+    db_partner = session.get(Partner, partner_id)
+    if not db_partner:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND, 
+            detail="Partner not found"
+        )
+    
+    # Check for TIN number conflicts if updating TIN
+    update_data = partner.model_dump(exclude_unset=True)
+    if "tin_number" in update_data:
+        statement = select(Partner).where(
+            Partner.tin_number == update_data["tin_number"],
+            Partner.id != partner_id
+        )
+        existing_partner = session.exec(statement).first()
+        if existing_partner:
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail="Partner with this TIN number already exists"
+            )
+    
+    # Update partner
+    for key, value in update_data.items():
+        setattr(db_partner, key, value)
+    
+    session.add(db_partner)
+    session.commit()
+    session.refresh(db_partner)
+    return db_partner
+
+# Delete Partner
+@router.delete("/{partner_id}", status_code=status.HTTP_204_NO_CONTENT)
+def delete_partner(
+    partner_id: int, 
+    session: Session = Depends(get_session),
+    current_user: UserResponse = Depends(require_admin)
+):
+    """Delete specific partner (admin only)."""
+    partner = session.get(Partner, partner_id)
+    if not partner:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND, 
+            detail="Partner not found"
+        )
+    
+    session.delete(partner)
+    session.commit()
+    return None