- Added `ValidatedJson` extractor for automatic JSON validation in `events_controller.rs`, `testimonials_controller.rs`, `mentors_controller.rs`, `gacha_items_controller.rs`, and `hackathon_controller.rs`. - Replaced manual permission checks with `require_permissions!` and `require_auth!` macros in relevant controllers to streamline permission handling. - Introduced `sanitization` utilities in `sanitization.rs` for improved input sanitization. - Added `permission_macros.rs` to encapsulate permission checking logic and reduce boilerplate. - Updated dependencies in `Cargo.toml` to include `serde_json` and `validator`. - Implemented error handling improvements in `notification_service.rs` for better response management.
130 lines
3.8 KiB
Rust
130 lines
3.8 KiB
Rust
use super::{
|
|
events_dto::{
|
|
EventsCreateRequestDto, EventsDetailItemDto, EventsListItemDto,
|
|
EventsUpdateRequestDto,
|
|
},
|
|
events_service::EventsService,
|
|
};
|
|
use axum::extract::{Path, Query};
|
|
use axum::response::IntoResponse;
|
|
use axum::{Extension, http::HeaderMap};
|
|
use imphnen_libs::{
|
|
AppState, MessageResponseDto, MetaRequestDto, ResponseListSuccessDto,
|
|
ResponseSuccessDto, ValidatedJson,
|
|
};
|
|
use imphnen_iam::{PermissionsEnum, require_permissions};
|
|
|
|
#[utoipa::path(
|
|
get,
|
|
path = "/v1/cms/landing/events",
|
|
params(
|
|
("page" = Option<i64>, Query, description = "Page number"),
|
|
("per_page" = Option<i64>, Query, description = "Items per page"),
|
|
("search" = Option<String>, Query, description = "Search keyword"),
|
|
("sort_by" = Option<String>, Query, description = "Sort by field"),
|
|
("order" = Option<String>, Query, description = "Order ASC or DESC"),
|
|
("filter" = Option<String>, Query, description = "Filter value"),
|
|
("filter_by" = Option<String>, Query, description = "Field to filter by"),
|
|
),
|
|
responses(
|
|
(status = 200, description = "[PUBLIC] Get event list", body = ResponseListSuccessDto<Vec<EventsListItemDto>>)
|
|
),
|
|
tag = "Events"
|
|
)]
|
|
pub async fn get_event_list(
|
|
Extension(state): Extension<AppState>,
|
|
Query(meta): Query<MetaRequestDto>,
|
|
) -> impl IntoResponse {
|
|
EventsService::get_event_list(&state, meta).await
|
|
}
|
|
|
|
#[utoipa::path(
|
|
get,
|
|
path = "/v1/cms/landing/events/detail/{id}",
|
|
params(
|
|
("id" = String, Path, description = "Event ID")
|
|
),
|
|
responses(
|
|
(status = 200, description = "[PUBLIC] Get event by ID", body = ResponseSuccessDto<EventsDetailItemDto>)
|
|
),
|
|
tag = "Events"
|
|
)]
|
|
pub async fn get_event_by_id(
|
|
Extension(state): Extension<AppState>,
|
|
Path(id): Path<String>,
|
|
) -> impl IntoResponse {
|
|
EventsService::get_event_by_id(&state, id).await
|
|
}
|
|
|
|
#[utoipa::path(
|
|
post,
|
|
security(
|
|
("Bearer" = [])
|
|
),
|
|
path = "/v1/cms/landing/events/create",
|
|
request_body = EventsCreateRequestDto,
|
|
responses(
|
|
(status = 201, description = "[ADMIN] Create new event", body = MessageResponseDto)
|
|
),
|
|
tag = "Events"
|
|
)]
|
|
pub async fn post_create_event(
|
|
headers: HeaderMap,
|
|
Extension(state): Extension<AppState>,
|
|
ValidatedJson(payload): ValidatedJson<EventsCreateRequestDto>,
|
|
) -> impl IntoResponse {
|
|
require_permissions!(headers, state, [PermissionsEnum::Administrator], {
|
|
EventsService::create_event(&state, payload).await
|
|
})
|
|
}
|
|
|
|
#[utoipa::path(
|
|
patch,
|
|
security(
|
|
("Bearer" = [])
|
|
),
|
|
path = "/v1/cms/landing/events/update/{id}",
|
|
params(
|
|
("id" = String, Path, description = "Event ID")
|
|
),
|
|
request_body = EventsUpdateRequestDto,
|
|
responses(
|
|
(status = 200, description = "[ADMIN] Update event", body = MessageResponseDto)
|
|
),
|
|
tag = "Events"
|
|
)]
|
|
pub async fn patch_update_event(
|
|
headers: HeaderMap,
|
|
Extension(state): Extension<AppState>,
|
|
Path(id): Path<String>,
|
|
ValidatedJson(payload): ValidatedJson<EventsUpdateRequestDto>,
|
|
) -> impl IntoResponse {
|
|
require_permissions!(headers, state, [PermissionsEnum::Administrator], {
|
|
EventsService::update_event(&state, id, payload).await
|
|
})
|
|
}
|
|
|
|
#[utoipa::path(
|
|
delete,
|
|
security(
|
|
("Bearer" = [])
|
|
),
|
|
path = "/v1/cms/landing/events/delete/{id}",
|
|
params(
|
|
("id" = String, Path, description = "Event ID")
|
|
),
|
|
responses(
|
|
(status = 200, description = "[ADMIN] Soft delete event", body = MessageResponseDto)
|
|
),
|
|
tag = "Events"
|
|
)]
|
|
pub async fn delete_event(
|
|
headers: HeaderMap,
|
|
Extension(state): Extension<AppState>,
|
|
Path(id): Path<String>,
|
|
) -> impl IntoResponse {
|
|
require_permissions!(headers, state, [PermissionsEnum::Administrator], {
|
|
EventsService::delete_event(&state, id).await
|
|
})
|
|
}
|