From 36e6d3df24628cba764559add4127ab99e57c6f6 Mon Sep 17 00:00:00 2001
From: Tom Hacohen <tom@stosb.com>
Date: Sun, 27 Dec 2020 21:32:48 +0200
Subject: [PATCH] Members: add member endpoints.

---
 etebase_fastapi/app.py    |  1 +
 etebase_fastapi/member.py | 83 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 84 insertions(+)
 create mode 100644 etebase_fastapi/member.py

diff --git a/etebase_fastapi/app.py b/etebase_fastapi/app.py
index ff50ce5..755340c 100644
--- a/etebase_fastapi/app.py
+++ b/etebase_fastapi/app.py
@@ -14,6 +14,7 @@ from fastapi import FastAPI, Request
 from .exceptions import CustomHttpException
 from .authentication import authentication_router
 from .collection import collection_router
+from . import member  # noqa
 from .invitation import invitation_incoming_router, invitation_outgoing_router
 from .msgpack import MsgpackResponse
 
diff --git a/etebase_fastapi/member.py b/etebase_fastapi/member.py
new file mode 100644
index 0000000..36aa5ce
--- /dev/null
+++ b/etebase_fastapi/member.py
@@ -0,0 +1,83 @@
+import typing as t
+
+from django.contrib.auth import get_user_model
+from django.db.models import QuerySet
+from fastapi import Depends, status
+from pydantic import BaseModel
+
+from django_etebase import models
+from .authentication import get_authenticated_user
+from .msgpack import MsgpackResponse
+from .utils import get_object_or_404
+from .stoken_handler import filter_by_stoken_and_limit
+
+from .collection import collection_router, get_collection_queryset
+
+User = get_user_model()
+default_queryset: QuerySet = models.CollectionMember.objects.all()
+
+
+def get_queryset(user: User, collection_uid: str, queryset=default_queryset) -> t.Tuple[models.Collection, QuerySet]:
+    collection = get_object_or_404(get_collection_queryset(user, models.Collection.objects), uid=collection_uid)
+    return collection, queryset.filter(collection=collection)
+
+
+class CollectionMemberOut(BaseModel):
+    username: str
+    accessLevel: models.AccessLevels
+
+    class Config:
+        orm_mode = True
+
+    @classmethod
+    def from_orm(cls: t.Type["CollectionMemberOut"], obj: models.CollectionMember) -> "CollectionMemberOut":
+        return cls(username=obj.user.username, accessLevel=obj.accessLevel)
+
+
+class MemberListResponse(BaseModel):
+    data: t.List[CollectionMemberOut]
+    iterator: t.Optional[str]
+    done: bool
+
+
+@collection_router.get("/{collection_uid}/member/", response_model=MemberListResponse)
+def member_list(
+    collection_uid: str,
+    iterator: t.Optional[str] = None,
+    limit: int = 50,
+    user: User = Depends(get_authenticated_user),
+):
+    _, queryset = get_queryset(user, collection_uid)
+    queryset = queryset.order_by("id")
+    result, new_stoken_obj, done = filter_by_stoken_and_limit(
+        iterator, limit, queryset, models.CollectionMember.stoken_annotation
+    )
+    new_stoken = new_stoken_obj and new_stoken_obj.uid
+
+    ret = MemberListResponse(
+        data=[CollectionMemberOut.from_orm(item) for item in result],
+        iterator=new_stoken,
+        done=done,
+    )
+    return MsgpackResponse(ret)
+
+
+@collection_router.delete("/{collection_uid}/member/{username}/", status_code=status.HTTP_204_NO_CONTENT)
+def member_delete(
+    collection_uid: str,
+    username: str,
+    user: User = Depends(get_authenticated_user),
+):
+    _, queryset = get_queryset(user, collection_uid)
+    obj = get_object_or_404(queryset, user__username__iexact=username)
+    obj.revoke()
+
+
+@collection_router.post("/{collection_uid}/member/leave/", status_code=status.HTTP_204_NO_CONTENT)
+def member_leave(
+    collection_uid: str,
+    user: User = Depends(get_authenticated_user),
+):
+    collection, _ = get_queryset(user, collection_uid)
+    obj = get_object_or_404(collection.members, user=user)
+    obj.revoke()