wip: invoices api

2026-05-01 18:20:27 +00:00 · 2025-06-16 16:41:02 +01:00
parent 82c4475ece
commit 6c37031b00
12 changed files with 675 additions and 5 deletions
@@ -45,9 +45,10 @@ func (api *API) Initialize() {
 	api.instance.Use(session.Middleware(sessions.NewCookieStore([]byte("SECRET"))))
 	api.instance.Pre(middleware.AddTrailingSlash())

-	api.ClientRoutes()
-	api.UserRoutes()
 	api.AuthRoutes()
+	api.UserRoutes()
+	api.ClientRoutes()
+	api.InvoiceRoutes()

 	api.instance.Logger.Fatal(api.instance.Start(fmt.Sprintf(":%d", lib.DEFAULT_PORT)))
 }
@@ -0,0 +1,291 @@
+package api
+
+import (
+	"errors"
+	"net/http"
+
+	"github.com/google/uuid"
+	"github.com/labstack/echo/v4"
+
+	"github.com/hazemKrimi/crimson-vault/internal/types"
+)
+
+func (api *API) CreateItemHandler(context echo.Context) error {
+	userIdString, ok := context.Get("id").(string)
+
+	if !ok {
+		return types.Error{Code: http.StatusInternalServerError, Cause: errors.New("Session ID not found after authorization."), Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	userId, err := uuid.Parse(userIdString)
+
+	if err != nil {
+		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	id, err := uuid.Parse(context.Param("id"))
+
+	if err != nil {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"Invoice ID is required to add an Invoice Item!"}}
+	}
+
+	var body types.CreateItemRequestBody
+
+	if err := context.Bind(&body); err != nil {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"Invalid JSON!"}}
+	}
+
+	if err := context.Validate(body); err != nil {
+		return err
+	}
+
+	item, err := api.db.CreateItem(userId, id, body)
+
+	return context.JSON(http.StatusOK, item)
+}
+
+func (api *API) CreateInvoiceHandler(context echo.Context) error {
+	userId, ok := context.Get("id").(string)
+
+	if !ok {
+		return types.Error{Code: http.StatusInternalServerError, Cause: errors.New("Session ID not found after authorization."), Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	id, err := uuid.Parse(userId)
+
+	if err != nil {
+		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	var body types.CreateInvoiceRequestBody
+
+	if err := context.Bind(&body); err != nil {
+		return types.Error{Code: http.StatusBadRequest, Cause: err, Messages: []string{"Invalid JSON!"}}
+	}
+
+	if err := context.Validate(body); err != nil {
+		return err
+	}
+
+	invoice, err := api.db.CreateInvoice(id, body)
+
+	if err != nil {
+		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error creating Invoice!"}}
+	}
+
+	return context.JSON(http.StatusOK, invoice)
+}
+
+func (api *API) GetAllItemsHandler(context echo.Context) error {
+	id, err := uuid.Parse(context.Param("id"))
+
+	if err != nil {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"Invoice ID is required to get Items!"}}
+	}
+
+	items, err := api.db.GetItems(id)
+
+	if err != nil {
+		return types.Error{Code: http.StatusInternalServerError, Messages: []string{"Unexpected error getting Items!"}}
+	}
+
+	return context.JSON(http.StatusOK, items)
+}
+
+func (api *API) GetAllInvoicesHandler(context echo.Context) error {
+	invoices, err := api.db.GetInvoices()
+
+	if err != nil {
+		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error getting Invoices!"}}
+	}
+
+	return context.JSON(http.StatusOK, invoices)
+}
+
+func (api *API) GetItemHandler(context echo.Context) error {
+	userIdString, ok := context.Get("id").(string)
+
+	if !ok {
+		return types.Error{Code: http.StatusInternalServerError, Cause: errors.New("Session ID not found after authorization."), Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	userId, err := uuid.Parse(userIdString)
+
+	if err != nil {
+		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	id, err := uuid.Parse(context.Param("id"))
+
+	if err != nil {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"ID is required to get an Invoice Item!"}}
+	}
+
+	var item types.Item
+
+	if err := api.db.GetItemById(userId, id, &item); err != nil {
+		return types.Error{Code: http.StatusNotFound, Messages: []string{"Invoice Item not found!"}}
+	}
+
+	return context.JSON(http.StatusOK, item)
+}
+
+func (api *API) GetInvoiceHandler(context echo.Context) error {
+	userIdString, ok := context.Get("id").(string)
+
+	if !ok {
+		return types.Error{Code: http.StatusInternalServerError, Cause: errors.New("Session ID not found after authorization."), Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	userId, err := uuid.Parse(userIdString)
+
+	if err != nil {
+		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	id, err := uuid.Parse(context.Param("id"))
+
+	if err != nil {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"ID is required to get an Invoice!"}}
+	}
+
+	var invoice types.Invoice
+
+	if err := api.db.GetInvoiceById(userId, id, &invoice); err != nil {
+		return types.Error{Code: http.StatusNotFound, Messages: []string{"Invoice not found!"}}
+	}
+
+	return context.JSON(http.StatusOK, invoice)
+}
+
+func (api *API) UpdateItemHandler(context echo.Context) error {
+	userIdString, ok := context.Get("id").(string)
+
+	if !ok {
+		return types.Error{Code: http.StatusInternalServerError, Cause: errors.New("Session ID not found after authorization."), Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	userId, err := uuid.Parse(userIdString)
+
+	if err != nil {
+		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	id, err := uuid.Parse(context.Param("id"))
+
+	if err != nil {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"ID is required to update an Invoice Item!"}}
+	}
+
+	var body types.UpdateItemRequestBody
+
+	if err := context.Bind(&body); err != nil {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"Invalid JSON!"}}
+	}
+
+	empty := body == types.UpdateItemRequestBody{}
+
+	if empty {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"You must update at lease one field!"}}
+	}
+
+	var item types.Item
+
+	if err := api.db.UpdateItem(userId, id, body, &item); err != nil {
+		return types.Error{Code: http.StatusNotFound, Messages: []string{"Invoice Item not found!"}}
+	}
+
+	return context.JSON(http.StatusOK, item)
+}
+
+func (api *API) UpdateInvoiceHandler(context echo.Context) error {
+	userIdString, ok := context.Get("id").(string)
+
+	if !ok {
+		return types.Error{Code: http.StatusInternalServerError, Cause: errors.New("Session ID not found after authorization."), Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	userId, err := uuid.Parse(userIdString)
+
+	if err != nil {
+		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	id, err := uuid.Parse(context.Param("id"))
+
+	if err != nil {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"ID is required to update an Invoice!"}}
+	}
+
+	var body types.UpdateInvoiceRequestBody
+
+	if err := context.Bind(&body); err != nil {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"Invalid JSON!"}}
+	}
+
+	empty := body == types.UpdateInvoiceRequestBody{}
+
+	if empty {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"You must update at lease one field!"}}
+	}
+
+	var item types.Item
+
+	if err := api.db.UpdateInvoice(userId, id, body, &item); err != nil {
+		return types.Error{Code: http.StatusNotFound, Messages: []string{"Invoice not found!"}}
+	}
+
+	return context.JSON(http.StatusOK, item)
+}
+
+func (api *API) DeleteItemHandler(context echo.Context) error {
+	userIdString, ok := context.Get("id").(string)
+
+	if !ok {
+		return types.Error{Code: http.StatusInternalServerError, Cause: errors.New("Session ID not found after authorization."), Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	userId, err := uuid.Parse(userIdString)
+
+	if err != nil {
+		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	id, err := uuid.Parse(context.Param("id"))
+
+	if err != nil {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"ID is required to delete an Invoice Item!"}}
+	}
+
+	if err := api.db.DeleteItem(userId, id); err != nil {
+		return types.Error{Code: http.StatusNotFound, Messages: []string{"Invoice Item not found!"}}
+	}
+
+	return context.JSON(http.StatusOK, map[string]string{"message": "Invoice Item deleted successfully!"})
+}
+
+func (api *API) DeleteInvoiceHandler(context echo.Context) error {
+	userIdString, ok := context.Get("id").(string)
+
+	if !ok {
+		return types.Error{Code: http.StatusInternalServerError, Cause: errors.New("Session ID not found after authorization."), Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	userId, err := uuid.Parse(userIdString)
+
+	if err != nil {
+		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error getting User!"}}
+	}
+
+	id, err := uuid.Parse(context.Param("id"))
+
+	if err != nil {
+		return types.Error{Code: http.StatusBadRequest, Messages: []string{"ID is required to delete an Invoice Item!"}}
+	}
+
+	if err := api.db.DeleteInvoice(userId, id); err != nil {
+		return types.Error{Code: http.StatusNotFound, Messages: []string{"Invoice Item not found!"}}
+	}
+
+	return context.JSON(http.StatusOK, map[string]string{"message": "Invoice Item deleted successfully!"})
+}
@@ -25,6 +25,21 @@ func (api *API) UserRoutes() {
 	users.DELETE("/me/logo/", api.DeleteUserLogoHandler, api.AuthSessionMiddleware)
 }

+func (api *API) InvoiceRoutes() {
+	invoices := api.instance.Group("/api/invoices", api.AuthSessionMiddleware)
+
+	invoices.GET("/", api.GetAllInvoicesHandler)
+	invoices.POST("/", api.CreateInvoiceHandler)
+	invoices.POST("/:id/items/", api.CreateItemHandler)
+	invoices.GET("/:id/", api.GetInvoiceHandler)
+	invoices.GET("/:id/items/", api.GetAllItemsHandler)
+	invoices.GET("/items/:id/", api.GetItemHandler)
+	invoices.PUT("/:id/", api.UpdateInvoiceHandler)
+	invoices.PUT("/items/:id/", api.UpdateItemHandler)
+	invoices.DELETE("/:id/", api.DeleteInvoiceHandler)
+	invoices.DELETE("/items/:id/", api.DeleteItemHandler)
+}
+
 func (api *API) AuthRoutes() {
 	auth := api.instance.Group("/api/auth")

@@ -51,7 +51,7 @@ func (api *API) GetAllUsersHandler(context echo.Context) error {
 	users, err := api.db.GetUsers()

 	if err != nil {
-		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error getting User!"}}
+		return types.Error{Code: http.StatusInternalServerError, Cause: err, Messages: []string{"Unexpected error getting Users!"}}
 	}

 	return context.JSON(http.StatusOK, users)
@@ -34,6 +34,8 @@ func (v *CustomValidator) Validate(i any) error {
 					msg = fmt.Sprintf("%s must only contain alphabetic characters!", field)
 				case "e164":
 					msg = fmt.Sprintf("%s must be a valid phone number in e164 format!", field)
+				case "iso4217":
+					msg = fmt.Sprintf("%s must be a valid currency in iso4217 format!", field)
 				case "password":
 					msg = fmt.Sprintf("%s must have at lease one uppercase, one lowercase, one number and one special character!", field)
 				case "eqcsfield":