64 lines
2.1 KiB
Python
64 lines
2.1 KiB
Python
# /opt/docker/dev/service_finder/backend/app/api/v1/endpoints/finance_admin.py
|
|
"""
|
|
Finance Admin API endpoints for managing Issuers with strict RBAC protection.
|
|
Protected by DB-driven RequirePermission("finance:view") dependency.
|
|
"""
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException, status
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
from sqlalchemy import select
|
|
from typing import List
|
|
|
|
from app.api import deps
|
|
from app.models.identity import User
|
|
from app.models.marketplace.finance import Issuer
|
|
from app.schemas.finance import IssuerResponse, IssuerUpdate
|
|
|
|
router = APIRouter()
|
|
|
|
|
|
@router.get("/", response_model=List[IssuerResponse], tags=["finance-admin"])
|
|
async def list_issuers(
|
|
db: AsyncSession = Depends(deps.get_db),
|
|
current_user: User = Depends(deps.get_current_active_user),
|
|
_ = Depends(deps.RequirePermission("finance:view")),
|
|
):
|
|
"""
|
|
List all Issuers (billing entities).
|
|
Protected by RequirePermission("finance:view").
|
|
"""
|
|
result = await db.execute(select(Issuer).order_by(Issuer.id))
|
|
issuers = result.scalars().all()
|
|
return issuers
|
|
|
|
|
|
@router.patch("/{issuer_id}", response_model=IssuerResponse, tags=["finance-admin"])
|
|
async def update_issuer(
|
|
issuer_id: int,
|
|
issuer_update: IssuerUpdate,
|
|
db: AsyncSession = Depends(deps.get_db),
|
|
current_user: User = Depends(deps.get_current_active_user),
|
|
_ = Depends(deps.RequirePermission("finance:edit")),
|
|
):
|
|
"""
|
|
Update an Issuer's details (activate/deactivate, revenue limit, API config).
|
|
Protected by RequirePermission("finance:edit").
|
|
"""
|
|
result = await db.execute(select(Issuer).where(Issuer.id == issuer_id))
|
|
issuer = result.scalar_one_or_none()
|
|
|
|
if not issuer:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_404_NOT_FOUND,
|
|
detail=f"Issuer with ID {issuer_id} not found."
|
|
)
|
|
|
|
# Update fields if provided
|
|
update_data = issuer_update.model_dump(exclude_unset=True)
|
|
for field, value in update_data.items():
|
|
setattr(issuer, field, value)
|
|
|
|
await db.commit()
|
|
await db.refresh(issuer)
|
|
|
|
return issuer |