mirror of
https://github.com/lucaspalomodevelop/eventcally.git
synced 2026-03-13 00:07:22 +00:00
71 lines
2.3 KiB
Python
71 lines
2.3 KiB
Python
from authlib.integrations.flask_oauth2 import current_token
|
|
from flask import make_response
|
|
from flask_apispec import doc, marshal_with, use_kwargs
|
|
|
|
from project import db
|
|
from project.access import access_or_401, login_api_user_or_401
|
|
from project.api import add_api_resource
|
|
from project.api.place.schemas import (
|
|
PlacePatchRequestSchema,
|
|
PlacePostRequestSchema,
|
|
PlaceSchema,
|
|
)
|
|
from project.api.resources import BaseResource
|
|
from project.models import EventPlace
|
|
from project.oauth2 import require_oauth
|
|
|
|
|
|
class PlaceResource(BaseResource):
|
|
@doc(summary="Get place", tags=["Places"])
|
|
@marshal_with(PlaceSchema)
|
|
def get(self, id):
|
|
return EventPlace.query.get_or_404(id)
|
|
|
|
@doc(
|
|
summary="Update place", tags=["Places"], security=[{"oauth2": ["place:write"]}]
|
|
)
|
|
@use_kwargs(PlacePostRequestSchema, location="json", apply=False)
|
|
@marshal_with(None, 204)
|
|
@require_oauth("place:write")
|
|
def put(self, id):
|
|
login_api_user_or_401(current_token.user)
|
|
place = EventPlace.query.get_or_404(id)
|
|
access_or_401(place.adminunit, "place:update")
|
|
|
|
place = self.update_instance(PlacePostRequestSchema, instance=place)
|
|
db.session.commit()
|
|
|
|
return make_response("", 204)
|
|
|
|
@doc(summary="Patch place", tags=["Places"], security=[{"oauth2": ["place:write"]}])
|
|
@use_kwargs(PlacePatchRequestSchema, location="json", apply=False)
|
|
@marshal_with(None, 204)
|
|
@require_oauth("place:write")
|
|
def patch(self, id):
|
|
login_api_user_or_401(current_token.user)
|
|
place = EventPlace.query.get_or_404(id)
|
|
access_or_401(place.adminunit, "place:update")
|
|
|
|
place = self.update_instance(PlacePatchRequestSchema, instance=place)
|
|
db.session.commit()
|
|
|
|
return make_response("", 204)
|
|
|
|
@doc(
|
|
summary="Delete place", tags=["Places"], security=[{"oauth2": ["place:write"]}]
|
|
)
|
|
@marshal_with(None, 204)
|
|
@require_oauth("place:write")
|
|
def delete(self, id):
|
|
login_api_user_or_401(current_token.user)
|
|
place = EventPlace.query.get_or_404(id)
|
|
access_or_401(place.adminunit, "place:delete")
|
|
|
|
db.session.delete(place)
|
|
db.session.commit()
|
|
|
|
return make_response("", 204)
|
|
|
|
|
|
add_api_resource(PlaceResource, "/places/<int:id>", "api_v1_place")
|