Upload app/api/notifications.py

app/api/notifications.py

@@ -0,0 +1,122 @@
+from fastapi import APIRouter, Depends, HTTPException
+from sqlalchemy.orm import Session
+from pydantic import BaseModel
+from typing import Optional
+from datetime import datetime, timezone
+
+from app.db.base import get_db
+from app.models.notification import Notification
+from app.api.auth import get_current_user
+from app.models.user import User
+
+router = APIRouter(prefix="/notifications", tags=["Notifications"])
+
+
+# ── Schemas ───────────────────────────────────────────────────
+class NotificationCreate(BaseModel):
+    type: str  # checkout_shipping | checkout_payment | checkout_complete
+    title: str
+    message: Optional[str] = None
+    data: Optional[dict] = None
+
+
+class NotificationOut(BaseModel):
+    id: int
+    type: str
+    title: str
+    message: Optional[str]
+    data: Optional[dict]
+    is_read: bool
+    created_at: datetime
+
+    class Config:
+        from_attributes = True
+
+
+# ── POST /notifications — create (no auth, called from checkout) ──
+@router.post("/")
+async def create_notification(payload: NotificationCreate, db: Session = Depends(get_db)):
+    notif = Notification(
+        type=payload.type,
+        title=payload.title,
+        message=payload.message,
+        data=payload.data,
+        is_read=False,
+        created_at=datetime.now(timezone.utc),
+    )
+    db.add(notif)
+    db.commit()
+    db.refresh(notif)
+    return {
+        "isSuccess": True,
+        "value": {"id": notif.id},
+        "statusCode": 201,
+    }
+
+
+# ── GET /notifications — list for admin ──
+@router.get("/")
+async def list_notifications(
+    skip: int = 0,
+    limit: int = 50,
+    unread_only: bool = False,
+    current_user: User = Depends(get_current_user),
+    db: Session = Depends(get_db),
+):
+    if current_user.role.upper() != "ADMIN":
+        raise HTTPException(status_code=403, detail="Admin access required")
+
+    query = db.query(Notification)
+    if unread_only:
+        query = query.filter(Notification.is_read == False)  # noqa: E712
+    query = query.order_by(Notification.created_at.desc())
+
+    total = query.count()
+    notifications = query.offset(skip).limit(limit).all()
+
+    return {
+        "isSuccess": True,
+        "value": {
+            "notifications": [
+                NotificationOut.model_validate(n).model_dump() for n in notifications
+            ],
+            "total": total,
+            "unread_count": db.query(Notification).filter(Notification.is_read == False).count(),  # noqa: E712
+        },
+        "statusCode": 200,
+    }
+
+
+# ── PUT /notifications/{id}/read — mark single as read ──
+@router.put("/{notification_id}/read")
+async def mark_read(
+    notification_id: int,
+    current_user: User = Depends(get_current_user),
+    db: Session = Depends(get_db),
+):
+    if current_user.role.upper() != "ADMIN":
+        raise HTTPException(status_code=403, detail="Admin access required")
+
+    notif = db.query(Notification).filter(Notification.id == notification_id).first()
+    if not notif:
+        raise HTTPException(status_code=404, detail="Notification not found")
+
+    notif.is_read = True
+    db.commit()
+    return {"isSuccess": True, "value": None, "statusCode": 200}
+
+
+# ── PUT /notifications/read-all — mark all as read ──
+@router.put("/read-all")
+async def mark_all_read(
+    current_user: User = Depends(get_current_user),
+    db: Session = Depends(get_db),
+):
+    if current_user.role.upper() != "ADMIN":
+        raise HTTPException(status_code=403, detail="Admin access required")
+
+    db.query(Notification).filter(Notification.is_read == False).update(  # noqa: E712
+        {"is_read": True}
+    )
+    db.commit()
+    return {"isSuccess": True, "value": None, "statusCode": 200}