init

backend/app/routers/clients.py

@@ -0,0 +1,181 @@
+import logging
+
+from fastapi import APIRouter, Depends, HTTPException
+from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
+from pydantic import BaseModel
+from sqlalchemy import select, desc
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.database import get_db
+from app.models.client import Client
+from app.models.order import Order
+from app.models.calculation import Calculation
+from app.models.material import Material
+from app.services.auth import hash_password, verify_password, create_client_token, decode_access_token
+
+logger = logging.getLogger("app.routers.clients")
+
+router = APIRouter()
+bearer = HTTPBearer(auto_error=False)
+
+
+# ─── Helpers ─────────────────────────────────────────────
+
+async def get_current_client(
+    creds: HTTPAuthorizationCredentials = Depends(bearer),
+    db: AsyncSession = Depends(get_db),
+) -> Client:
+    if not creds:
+        raise HTTPException(401, "Требуется авторизация")
+    payload = decode_access_token(creds.credentials)
+    if not payload or payload.get("type") != "client":
+        raise HTTPException(401, "Невалидный токен")
+    result = await db.execute(select(Client).where(Client.id == int(payload["sub"])))
+    client = result.scalar_one_or_none()
+    if not client or not client.is_active:
+        raise HTTPException(401, "Клиент не найден или деактивирован")
+    return client
+
+
+# ─── Auth ────────────────────────────────────────────────
+
+class RegisterRequest(BaseModel):
+    email: str
+    password: str
+    name: str
+    phone: str | None = None
+    company: str | None = None
+
+
+class LoginRequest(BaseModel):
+    email: str
+    password: str
+
+
+class AuthResponse(BaseModel):
+    token: str
+    client: dict
+
+
+@router.post("/register", response_model=AuthResponse)
+async def register(data: RegisterRequest, db: AsyncSession = Depends(get_db)):
+    logger.info("Client register: %s", data.email)
+    existing = await db.execute(select(Client).where(Client.email == data.email))
+    if existing.scalar_one_or_none():
+        raise HTTPException(400, "Пользователь с таким email уже зарегистрирован")
+
+    client = Client(
+        email=data.email,
+        password_hash=hash_password(data.password),
+        name=data.name,
+        phone=data.phone,
+        company=data.company,
+    )
+    db.add(client)
+    await db.commit()
+    await db.refresh(client)
+    logger.info("Client registered: id=%d, email=%s", client.id, client.email)
+
+    token = create_client_token(client.id, client.email)
+    return AuthResponse(
+        token=token,
+        client={"id": client.id, "email": client.email, "name": client.name, "phone": client.phone, "company": client.company},
+    )
+
+
+@router.post("/login", response_model=AuthResponse)
+async def login(data: LoginRequest, db: AsyncSession = Depends(get_db)):
+    logger.info("Client login: %s", data.email)
+    result = await db.execute(select(Client).where(Client.email == data.email, Client.is_active == True))
+    client = result.scalar_one_or_none()
+    if not client or not verify_password(data.password, client.password_hash):
+        raise HTTPException(401, "Неверный email или пароль")
+
+    token = create_client_token(client.id, client.email)
+    logger.info("Client logged in: id=%d", client.id)
+    return AuthResponse(
+        token=token,
+        client={"id": client.id, "email": client.email, "name": client.name, "phone": client.phone, "company": client.company},
+    )
+
+
+# ─── Profile ────────────────────────────────────────────
+
+class ProfileResponse(BaseModel):
+    id: int
+    email: str
+    name: str
+    phone: str | None
+    company: str | None
+
+
+@router.get("/me", response_model=ProfileResponse)
+async def get_profile(client: Client = Depends(get_current_client)):
+    return ProfileResponse(id=client.id, email=client.email, name=client.name, phone=client.phone, company=client.company)
+
+
+class ProfileUpdate(BaseModel):
+    name: str | None = None
+    phone: str | None = None
+    company: str | None = None
+
+
+@router.put("/me", response_model=ProfileResponse)
+async def update_profile(data: ProfileUpdate, client: Client = Depends(get_current_client), db: AsyncSession = Depends(get_db)):
+    if data.name is not None:
+        client.name = data.name
+    if data.phone is not None:
+        client.phone = data.phone
+    if data.company is not None:
+        client.company = data.company
+    await db.commit()
+    await db.refresh(client)
+    return ProfileResponse(id=client.id, email=client.email, name=client.name, phone=client.phone, company=client.company)
+
+
+# ─── Client Orders ───────────────────────────────────────
+
+class ClientOrderOut(BaseModel):
+    order_id: str
+    status: str
+    total_rub: float
+    material_name: str | None = None
+    file_name: str | None = None
+    quantity: int | None = None
+    created_at: str
+    delivery_method: str
+    comment: str | None = None
+
+
+@router.get("/orders", response_model=list[ClientOrderOut])
+async def get_my_orders(client: Client = Depends(get_current_client), db: AsyncSession = Depends(get_db)):
+    logger.info("Client orders requested: client_id=%d", client.id)
+    result = await db.execute(
+        select(Order).where(Order.client_id == client.id).order_by(desc(Order.created_at))
+    )
+    orders = result.scalars().all()
+
+    out = []
+    for o in orders:
+        calc_result = await db.execute(select(Calculation).where(Calculation.id == o.calculation_id))
+        calc = calc_result.scalar_one_or_none()
+        material_name = None
+        if calc:
+            mat_result = await db.execute(select(Material).where(Material.id == calc.material_id))
+            mat = mat_result.scalar_one_or_none()
+            material_name = mat.name if mat else None
+
+        out.append(ClientOrderOut(
+            order_id=o.order_id,
+            status=o.status,
+            total_rub=o.total_rub,
+            material_name=material_name,
+            file_name=calc.file_name if calc else None,
+            quantity=calc.quantity if calc else None,
+            created_at=o.created_at.isoformat() if o.created_at else "",
+            delivery_method=o.delivery_method,
+            comment=o.comment,
+        ))
+
+    logger.info("Returning %d orders for client_id=%d", len(out), client.id)
+    return out