-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathapp.py
More file actions
152 lines (123 loc) · 4.09 KB
/
app.py
File metadata and controls
152 lines (123 loc) · 4.09 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
from flask import Flask, jsonify, request, abort
from flask_swagger_ui import get_swaggerui_blueprint
from functools import wraps
from marshmallow import Schema, fields, ValidationError
app = Flask(__name__)
# Marshmallow Schemas
class UserSchema(Schema):
username = fields.Str(required=True)
role = fields.Str(required=True, validate=lambda x: x in ['admin', 'user'])
class HouseSchema(Schema):
address = fields.Str(required=True)
num_rooms = fields.Int(required=True)
price = fields.Float(required=True)
# Mock database
users_db = {
"admin": {"id": 1, "username": "admin", "role": "admin"},
"user1": {"id": 2, "username": "user1", "role": "user"}
}
houses_db = {
1: {"id": 1, "address": "123 Main St", "num_rooms": 3, "price": 250000}
}
# Mock tokens
MOCK_TOKENS = {
"admin": "mocked_admin_token",
"user": "mocked_user_token"
}
# Swagger configuration
SWAGGER_URL = '/api/docs'
API_URL = '/static/swagger.json'
swaggerui_blueprint = get_swaggerui_blueprint(
SWAGGER_URL,
API_URL,
config={'app_name': "Sample API"}
)
app.register_blueprint(swaggerui_blueprint, url_prefix=SWAGGER_URL)
def token_required(f):
@wraps(f)
def decorated(*args, **kwargs):
token = request.headers.get('Authorization')
if not token:
return jsonify({"error": "Token is missing"}), 401
if token not in MOCK_TOKENS.values():
return jsonify({"error": "Invalid token"}), 403
request.current_user = next(
(user for user in users_db.values() if MOCK_TOKENS[user['role']] == token),
None
)
return f(*args, **kwargs)
return decorated
@app.route('/api/login', methods=['POST'])
def login():
data = request.json
role = data.get('role')
if role not in MOCK_TOKENS:
abort(400)
return jsonify({"token": MOCK_TOKENS[role]})
@app.route('/api/users', methods=['GET'])
@token_required
def get_users():
if request.current_user['role'] != 'admin':
abort(403)
return jsonify(list(users_db.values()))
@app.route('/api/user/<int:user_id>', methods=['GET'])
@token_required
def get_user(user_id):
user = next((u for u in users_db.values() if u['id'] == user_id), None)
if not user:
abort(404)
if request.current_user['role'] != 'admin' and request.current_user['id'] != user_id:
abort(403)
return jsonify(user)
@app.route('/api/user', methods=['POST'])
@token_required
def create_user():
if request.current_user['role'] != 'admin':
abort(403)
try:
UserSchema().load(request.json)
except ValidationError as err:
return jsonify(err.messages), 400
new_user = request.json
existing_ids = [user['id'] for user in users_db.values()]
new_id = max(existing_ids, default=0) + 1
users_db[new_user['username']] = {
"id": new_id,
"username": new_user['username'],
"role": new_user['role']
}
return jsonify(users_db[new_user['username']]), 201
@app.route('/api/houses', methods=['GET'])
@token_required
def get_houses():
return jsonify(list(houses_db.values()))
@app.route('/api/house/<int:house_id>', methods=['GET'])
@token_required
def get_property(house_id):
house = houses_db.get(house_id)
if not house:
abort(404)
return jsonify(house)
@app.route('/api/house', methods=['POST'])
@token_required
def create_house():
try:
HouseSchema().load(request.json)
except ValidationError as err:
return jsonify(err.messages), 400
new_house = request.json
new_id = max(houses_db.keys(), default=0) + 1
houses_db[new_id] = {
"id": new_id,
"address": new_house['address'],
"num_rooms": new_house['num_rooms'],
"price": new_house['price']
}
return jsonify(houses_db[new_id]), 201
@app.route('/api/house/<int:house_id>', methods=['DELETE'])
@token_required
def delete_house(house_id):
# TODO: Implement logic to delete a house from the database
return jsonify({"message": "Delete functionality not implemented yet"}), 501
if __name__ == '__main__':
app.run(debug=True)