Добавлен эндпойнт /v1/admin/reviews #20

src/handlers/admin/admin_handler_reviews.erl

@@ -1,63 +1,71 @@
 -module(admin_handler_reviews).
 -behaviour(cowboy_handler).
--export([init/2]).
 
 -include("records.hrl").
 
+-export([init/2]).
+
 init(Req, _Opts) ->
   case cowboy_req:method(Req) of
-    <<"GET">> -> get_review(Req);
-    <<"PUT">> -> update_review(Req);
-    _         -> send_error(Req, 405, <<"Method not allowed">>)
+    <<"GET">> -> list_reviews(Req);
+    <<"PATCH">> -> bulk_update_reviews(Req);
+    _ -> send_error(Req, 405, <<"Method not allowed">>)
   end.
 
-get_review(Req) ->
+list_reviews(Req) ->
+  case auth_admin(Req) of
+    {ok, _AdminId, Req1} ->
+      Filters = parse_filters(Req1),
+      Reviews = logic_review:list_admin_reviews(Filters),
+      Json = [review_to_json(R) || R <- Reviews],
+      send_json(Req1, 200, Json);
+    {error, Code, Msg, Req1} ->
+      send_error(Req1, Code, Msg)
+  end.
+
+bulk_update_reviews(Req) ->
+  case auth_admin(Req) of
+    {ok, _AdminId, Req1} ->
+      try
+        {ok, Body, Req2} = cowboy_req:read_body(Req1),
+        Operations = jsx:decode(Body, [return_maps]),
+        case logic_review:bulk_update_status(Operations) of
+          {ok, Count} ->
+            send_json(Req2, 200, #{updated_count => Count});
+          {error, Reason} ->
+            send_error(Req2, 400, Reason)
+        end
+      catch
+        _:_ -> send_error(Req1, 400, <<"Invalid JSON body">>)
+      end;
+    {error, Code, Msg, Req1} ->
+      send_error(Req1, Code, Msg)
+  end.
+
+auth_admin(Req) ->
   case handler_auth:authenticate(Req) of
     {ok, AdminId, Req1} ->
       case admin_utils:is_admin(AdminId) of
-        true ->
-          ReviewId = cowboy_req:binding(id, Req1),
-          case core_review:get_by_id(ReviewId) of
-            {ok, Review} ->
-              send_json(Req1, 200, review_to_json(Review));
-            {error, not_found} ->
-              send_error(Req1, 404, <<"Review not found">>)
-          end;
-        false ->
-          send_error(Req1, 403, <<"Admin access required">>)
+        true -> {ok, AdminId, Req1};
+        false -> {error, 403, <<"Admin access required">>, Req1}
       end;
-    {error, Code, Message, Req1} ->
-      send_error(Req1, Code, Message)
+    {error, Code, Msg, Req1} ->
+      {error, Code, Msg, Req1}
   end.
 
-update_review(Req) ->
-  case handler_auth:authenticate(Req) of
-    {ok, AdminId, Req1} ->
-      case admin_utils:is_admin(AdminId) of
-        true ->
-          ReviewId = cowboy_req:binding(id, Req1),
-          {ok, Body, Req2} = cowboy_req:read_body(Req1),
-          try jsx:decode(Body, [return_maps]) of
-            #{<<"status">> := NewStatus} ->
-              case core_review:update_status(ReviewId, NewStatus) of
-                {ok, Review} ->
-                  send_json(Req2, 200, review_to_json(Review));
-                {error, not_found} ->
-                  send_error(Req2, 404, <<"Review not found">>);
-                {error, _} ->
-                  send_error(Req2, 500, <<"Internal server error">>)
-              end;
-            _ ->
-              send_error(Req2, 400, <<"Missing status field">>)
-          catch
-            _:_ -> send_error(Req2, 400, <<"Invalid JSON">>)
-          end;
-        false ->
-          send_error(Req1, 403, <<"Admin access required">>)
-      end;
-    {error, Code, Message, Req1} ->
-      send_error(Req1, Code, Message)
-  end.
+%% Извлечение параметров фильтрации из query string.
+%% Например: ?target_type=event&target_id=...&user_id=...
+parse_filters(Req) ->
+  Qs = cowboy_req:parse_qs(Req),
+  lists:filtermap(
+    fun
+      ({<<"target_type">>, Val}) -> {true, {target_type, Val}};
+      ({<<"target_id">>, Val}) -> {true, {target_id, Val}};
+      ({<<"user_id">>, Val}) -> {true, {user_id, Val}};
+      (_) -> false
+    end,
+    Qs
+  ).
 
 review_to_json(R) ->
   #{