EventHub/EventHubBack
3
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Добавлен эндпойнт /v1/admin/reviews #20

Browse Source
This commit is contained in:
Алексей Сабилин
2026-05-08 16:33:46 +03:00
parent 11971ebb06
commit 393cf00631
7 changed files with 378 additions and 147 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/core/core_review.erl
+3 -1
View File
@@ -5,7 +5,7 @@
update/2, delete/1, hide/2, unhide/2]).
-export([get_average_rating/2, has_user_reviewed/3]).
-export([generate_id/0]).
-export([count_reviews/0]).
-export([count_reviews/0, list_all/0]).
%% Создание отзыва
create(UserId, TargetType, TargetId, Rating, Comment) ->
@@ -115,6 +115,8 @@ has_user_reviewed(UserId, TargetType, TargetId) ->
count_reviews() -> mnesia:table_info(review, size).
list_all() -> mnesia:dirty_match_object(#review{_ = '_'}).
%% Внутренние функции
generate_id() ->
base64:encode(crypto:strong_rand_bytes(16), #{mode => urlsafe, padding => false}).
src/eventhub_app.erl
+2 -1
View File
@@ -111,7 +111,8 @@ start_admin_http() ->
{"/v1/admin/reports", admin_handler_reports, []},
{"/v1/admin/reports/:id", admin_handler_report_by_id, []},
% ================== ОТЗЫВЫ ==================
{"/v1/admin/reviews/:id", admin_handler_reviews, []},
{"/v1/admin/reviews", admin_handler_reviews, []},
{"/v1/admin/reviews/:id", admin_handler_reviews_by_id, []},
% ================== БАН-СЛОВА ==================
{"/v1/admin/banned-words", admin_handler_banned_words, []},
{"/v1/admin/banned-words/:word", admin_handler_banned_words, []},
src/handlers/admin/admin_handler_reviews.erl
+53 -45
View File
@@ -1,63 +1,71 @@
-module(admin_handler_reviews).
-behaviour(cowboy_handler).
-export([init/2]).
-include("records.hrl").
-export([init/2]).
init(Req, _Opts) ->
case cowboy_req:method(Req) of
<<"GET">> -> get_review(Req);
<<"PUT">> -> update_review(Req);
_ -> send_error(Req, 405, <<"Method not allowed">>)
<<"GET">> -> list_reviews(Req);
<<"PATCH">> -> bulk_update_reviews(Req);
_ -> send_error(Req, 405, <<"Method not allowed">>)
end.
get_review(Req) ->
list_reviews(Req) ->
case auth_admin(Req) of
{ok, _AdminId, Req1} ->
Filters = parse_filters(Req1),
Reviews = logic_review:list_admin_reviews(Filters),
Json = [review_to_json(R) || R <- Reviews],
send_json(Req1, 200, Json);
{error, Code, Msg, Req1} ->
send_error(Req1, Code, Msg)
end.
bulk_update_reviews(Req) ->
case auth_admin(Req) of
{ok, _AdminId, Req1} ->
try
{ok, Body, Req2} = cowboy_req:read_body(Req1),
Operations = jsx:decode(Body, [return_maps]),
case logic_review:bulk_update_status(Operations) of
{ok, Count} ->
send_json(Req2, 200, #{updated_count => Count});
{error, Reason} ->
send_error(Req2, 400, Reason)
end
catch
_:_ -> send_error(Req1, 400, <<"Invalid JSON body">>)
end;
{error, Code, Msg, Req1} ->
send_error(Req1, Code, Msg)
end.
auth_admin(Req) ->
case handler_auth:authenticate(Req) of
{ok, AdminId, Req1} ->
case admin_utils:is_admin(AdminId) of
true ->
ReviewId = cowboy_req:binding(id, Req1),
case core_review:get_by_id(ReviewId) of
{ok, Review} ->
send_json(Req1, 200, review_to_json(Review));
{error, not_found} ->
send_error(Req1, 404, <<"Review not found">>)
end;
false ->
send_error(Req1, 403, <<"Admin access required">>)
true -> {ok, AdminId, Req1};
false -> {error, 403, <<"Admin access required">>, Req1}
end;
{error, Code, Message, Req1} ->
send_error(Req1, Code, Message)
{error, Code, Msg, Req1} ->
{error, Code, Msg, Req1}
end.
update_review(Req) ->
case handler_auth:authenticate(Req) of
{ok, AdminId, Req1} ->
case admin_utils:is_admin(AdminId) of
true ->
ReviewId = cowboy_req:binding(id, Req1),
{ok, Body, Req2} = cowboy_req:read_body(Req1),
try jsx:decode(Body, [return_maps]) of
#{<<"status">> := NewStatus} ->
case core_review:update_status(ReviewId, NewStatus) of
{ok, Review} ->
send_json(Req2, 200, review_to_json(Review));
{error, not_found} ->
send_error(Req2, 404, <<"Review not found">>);
{error, _} ->
send_error(Req2, 500, <<"Internal server error">>)
end;
_ ->
send_error(Req2, 400, <<"Missing status field">>)
catch
_:_ -> send_error(Req2, 400, <<"Invalid JSON">>)
end;
false ->
send_error(Req1, 403, <<"Admin access required">>)
end;
{error, Code, Message, Req1} ->
send_error(Req1, Code, Message)
end.
%% Извлечение параметров фильтрации из query string.
%% Например: ?target_type=event&target_id=...&user_id=...
parse_filters(Req) ->
Qs = cowboy_req:parse_qs(Req),
lists:filtermap(
fun
({<<"target_type">>, Val}) -> {true, {target_type, Val}};
({<<"target_id">>, Val}) -> {true, {target_id, Val}};
({<<"user_id">>, Val}) -> {true, {user_id, Val}};
(_) -> false
end,
Qs
).
review_to_json(R) ->
#{
src/handlers/admin/admin_handler_reviews_by_id.erl
+93
View File
@@ -0,0 +1,93 @@
-module(admin_handler_reviews_by_id).
-behaviour(cowboy_handler).
-export([init/2]).
-include("records.hrl").
init(Req, _Opts) ->
case cowboy_req:method(Req) of
<<"GET">> -> get_review(Req);
<<"PUT">> -> update_review(Req);
_ -> send_error(Req, 405, <<"Method not allowed">>)
end.
get_review(Req) ->
case handler_auth:authenticate(Req) of
{ok, AdminId, Req1} ->
case admin_utils:is_admin(AdminId) of
true ->
ReviewId = cowboy_req:binding(id, Req1),
case core_review:get_by_id(ReviewId) of
{ok, Review} ->
send_json(Req1, 200, review_to_json(Review));
{error, not_found} ->
send_error(Req1, 404, <<"Review not found">>)
end;
false ->
send_error(Req1, 403, <<"Admin access required">>)
end;
{error, Code, Message, Req1} ->
send_error(Req1, Code, Message)
end.
update_review(Req) ->
case handler_auth:authenticate(Req) of
{ok, AdminId, Req1} ->
case admin_utils:is_admin(AdminId) of
true ->
ReviewId = cowboy_req:binding(id, Req1),
{ok, Body, Req2} = cowboy_req:read_body(Req1),
try jsx:decode(Body, [return_maps]) of
#{<<"status">> := NewStatus} ->
case core_review:update_status(ReviewId, NewStatus) of
{ok, Review} ->
send_json(Req2, 200, review_to_json(Review));
{error, not_found} ->
send_error(Req2, 404, <<"Review not found">>);
{error, _} ->
send_error(Req2, 500, <<"Internal server error">>)
end;
_ ->
send_error(Req2, 400, <<"Missing status field">>)
catch
_:_ -> send_error(Req2, 400, <<"Invalid JSON">>)
end;
false ->
send_error(Req1, 403, <<"Admin access required">>)
end;
{error, Code, Message, Req1} ->
send_error(Req1, Code, Message)
end.
review_to_json(R) ->
#{
id => R#review.id,
user_id => R#review.user_id,
target_type => R#review.target_type,
target_id => R#review.target_id,
rating => R#review.rating,
comment => R#review.comment,
status => R#review.status,
created_at => datetime_to_iso8601(R#review.created_at),
updated_at => datetime_to_iso8601(R#review.updated_at)
}.
datetime_to_iso8601({{Year, Month, Day}, {Hour, Minute, Second}}) ->
iolist_to_binary(io_lib:format("~4..0B-~2..0B-~2..0BT~2..0B:~2..0B:~2..0BZ",
[Year, Month, Day, Hour, Minute, Second]));
datetime_to_iso8601(undefined) -> undefined.
send_json(Req, Status, Data) ->
Headers = #{
<<"content-type">> => <<"application/json">>,
<<"access-control-allow-origin">> => <<"*">>,
<<"access-control-expose-headers">> => <<"Content-Range">>
},
Body = jsx:encode(Data),
cowboy_req:reply(Status, Headers, Body, Req),
{ok, Body, []}.
send_error(Req, Status, Message) ->
Body = jsx:encode(#{error => Message}),
cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req),
{ok, Body, []}.
src/logic/logic_review.erl
+67 -3
View File
@@ -2,8 +2,9 @@
-include("records.hrl").
-export([create_review/5, get_review/2, list_reviews/3, list_user_reviews/1,
update_review/3, delete_review/2, hide_review/2, unhide_review/2]).
update_review/3, delete_review/2, hide_review/2, hide_review/3, unhide_review/2, unhide_review/3]).
-export([can_review/3, update_target_rating/2, can_moderate_review/2]).
-export([list_admin_reviews/1, bulk_update_status/1]).
%% Создание отзыва
create_review(UserId, TargetType, TargetId, Rating, Comment) ->
@@ -114,9 +115,12 @@ delete_review(UserId, ReviewId) ->
end.
hide_review(UserId, ReviewId) ->
hide_review(UserId, ReviewId, <<>>).
hide_review(UserId, ReviewId, Reason) ->
case can_moderate_review(UserId, ReviewId) of
true ->
case core_review:hide(ReviewId) of
case core_review:hide(ReviewId, Reason) of
{ok, Review} ->
update_target_rating(Review#review.target_type, Review#review.target_id),
{ok, Review};
@@ -128,9 +132,11 @@ hide_review(UserId, ReviewId) ->
end.
unhide_review(UserId, ReviewId) ->
unhide_review(UserId, ReviewId, <<>>).
unhide_review(UserId, ReviewId, Reason) ->
case can_moderate_review(UserId, ReviewId) of
true ->
case core_review:unhide(ReviewId) of
case core_review:unhide(ReviewId, Reason) of
{ok, Review} ->
update_target_rating(Review#review.target_type, Review#review.target_id),
{ok, Review};
@@ -187,6 +193,64 @@ can_moderate_review(UserId, ReviewId) ->
end
end.
%%%-------------------------------------------------------------------
%%% @doc Получить список всех отзывов (административный режим).
%%% Фильтры: [{target_type, Type}, {target_id, Id}, {user_id, UserId}]
%%% Все фильтры опциональны.
%%% @end
%%%-------------------------------------------------------------------
list_admin_reviews(Filters) ->
AllReviews = core_review:list_all(),
apply_filters(AllReviews, Filters).
%% Вспомогательная функция: фильтрация списка по proplist
apply_filters(Reviews, []) ->
Reviews;
apply_filters(Reviews, [{target_type, Type} | Rest]) ->
apply_filters(
[R || R <- Reviews, R#review.target_type =:= Type],
Rest
);
apply_filters(Reviews, [{target_id, Id} | Rest]) ->
apply_filters(
[R || R <- Reviews, R#review.target_id =:= Id],
Rest
);
apply_filters(Reviews, [{user_id, UserId} | Rest]) ->
apply_filters(
[R || R <- Reviews, R#review.user_id =:= UserId],
Rest
);
apply_filters(Reviews, [_ | Rest]) ->
apply_filters(Reviews, Rest). % Игнорируем неизвестные фильтры
%%%-------------------------------------------------------------------
%%% @doc Массово обновить статусы отзывов.
%%% Operations: [#{id => ReviewId, status => visible | hidden}, ...]
%%% Все изменения выполняются в одной Mnesia-транзакции.
%%% @end
%%%-------------------------------------------------------------------
bulk_update_status(Operations) when is_list(Operations) ->
Fun = fun() ->
lists:foreach(fun do_update_status/1, Operations)
end,
case mnesia:transaction(Fun) of
{atomic, ok} ->
{ok, length(Operations)};
{aborted, Reason} ->
{error, Reason}
end.
do_update_status(#{<<"id">> := Id, <<"status">> := NewStatus}) ->
case core_review:get_by_id(Id) of
{ok, Review} ->
IdReview = Review#review{id = Id},
UpdatedReview = Review#review{status = NewStatus},
core_review:update(IdReview, UpdatedReview);
not_found ->
mnesia:abort(<<"review_not_found">>)
end.
%% Внутренние функции
target_exists(event, EventId) ->
case core_event:get_by_id(EventId) of