from flask import Blueprint, jsonify, request, abort from flask_jwt_extended import jwt_required, get_jwt_identity from models import Task, db from datetime import datetime from user_views import admin_required, validate_access task_bp = Blueprint('task_bp', __name__) # ============================================================ # 🚀 1. API ENDPOINTS (ROUTES) # ============================================================ @task_bp.route('/tasks', methods=['GET']) @jwt_required() def get_all_tasks(): admin_required(get_jwt_identity()) # only admin can get all tasks tasks = Task.query.all() return jsonify([task.to_dict() for task in tasks]) @task_bp.route('/tasks/', methods=['GET']) @jwt_required() def get_task(task_id): task = Task.query.get(task_id) # return task or None if task not found check_if_task_exists(task) return jsonify(task.to_dict()) @task_bp.route('/tasks/user/', methods=['GET']) @jwt_required() def get_tasks_by_user(user_id): validate_access(user_id) tasks = Task.query.filter_by(user_id=user_id).all() tasks = [task.to_dict() for task in tasks] return jsonify(tasks) @task_bp.route('/tasks', methods=['POST']) @jwt_required() def create_task(): data = request.get_json() due_date = datetime.strptime(data['due_date'], '%d-%m-%Y %H:%M') task = Task(title=data['title'], description=data['description'], due_date=due_date, done=data['done'], user_id=get_jwt_identity()) db.session.add(task) db.session.commit() return jsonify(task.to_dict()) @task_bp.route('/tasks/', methods=['PUT', 'PATCH']) @jwt_required() def update_task(task_id): task = Task.query.get(task_id) check_if_task_exists(task) request_data = request.get_json() request_fields = set(request_data.keys()) editable_fields = Task.get_editable_fields() # PUT requires all values if request.method == 'PUT': if request_fields != editable_fields: return jsonify({'error': 'Invalid request data structure.'}), 400 for field_name in editable_fields: requested_value = request_data.get(field_name) if requested_value is None: continue new_value = datetime.strptime(requested_value, '%d-%m-%Y %H:%M') \ if field_name == 'due_date' else requested_value setattr(task, field_name, new_value) db.session.commit() return jsonify(task.to_dict()) @task_bp.route('/tasks/', methods=['DELETE']) @jwt_required() def delete_task(task_id): task = Task.query.get(task_id) check_if_task_exists(task) db.session.delete(task) db.session.commit() return jsonify({}) # ============================================================ # 🔧 2. UTILITIES # ============================================================ def check_if_task_exists(task): # Check if task exists or user has permissions to see it if task is None: abort(404, {'error': 'Task not found.'}) user_id = task.user_id validate_access(user_id) # ============================================================ # ❌ 3. ERROR HANDLERS # ============================================================ @task_bp.errorhandler(403) def forbidden_error(error): response = jsonify(error.description) response.status_code = 403 return response @task_bp.errorhandler(404) def not_found_error(error): response = jsonify(error.description) response.status_code = 404 return response