Stage 3.4

src/handlers/handler_booking_by_id.erl

@@ -0,0 +1,128 @@
+-module(handler_booking_by_id).
+-include("records.hrl").
+
+-export([init/2]).
+
+init(Req, Opts) ->
+  handle(Req, Opts).
+
+handle(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"GET">> -> get_booking(Req);
+    <<"PUT">> -> update_booking(Req);
+    <<"DELETE">> -> cancel_booking(Req);
+    _ -> send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+%% GET /v1/bookings/:id - получение бронирования
+get_booking(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      BookingId = cowboy_req:binding(id, Req1),
+      case logic_booking:get_booking(UserId, BookingId) of
+        {ok, Booking} ->
+          Response = booking_to_json(Booking),
+          send_json(Req1, 200, Response);
+        {error, access_denied} ->
+          send_error(Req1, 403, <<"Access denied">>);
+        {error, not_found} ->
+          send_error(Req1, 404, <<"Booking not found">>);
+        {error, _} ->
+          send_error(Req1, 500, <<"Internal server error">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% PUT /v1/bookings/:id - подтверждение/отклонение бронирования (владельцем)
+update_booking(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      BookingId = cowboy_req:binding(id, Req1),
+      {ok, Body, Req2} = cowboy_req:read_body(Req1),
+      try jsx:decode(Body, [return_maps]) of
+        Decoded when is_map(Decoded) ->
+          case maps:get(<<"action">>, Decoded, undefined) of
+            <<"confirm">> ->
+              case logic_booking:confirm_booking(UserId, BookingId, confirm) of
+                {ok, Booking} ->
+                  Response = booking_to_json(Booking),
+                  send_json(Req2, 200, Response);
+                {error, access_denied} ->
+                  send_error(Req2, 403, <<"Access denied">>);
+                {error, not_found} ->
+                  send_error(Req2, 404, <<"Booking not found">>);
+                {error, _} ->
+                  send_error(Req2, 500, <<"Internal server error">>)
+              end;
+            <<"decline">> ->
+              case logic_booking:confirm_booking(UserId, BookingId, decline) of
+                {ok, Booking} ->
+                  Response = booking_to_json(Booking),
+                  send_json(Req2, 200, Response);
+                {error, access_denied} ->
+                  send_error(Req2, 403, <<"Access denied">>);
+                {error, not_found} ->
+                  send_error(Req2, 404, <<"Booking not found">>);
+                {error, _} ->
+                  send_error(Req2, 500, <<"Internal server error">>)
+              end;
+            _ ->
+              send_error(Req2, 400, <<"Missing or invalid 'action' field. Use 'confirm' or 'decline'">>)
+          end;
+        _ ->
+          send_error(Req2, 400, <<"Invalid JSON">>)
+      catch
+        _:_ ->
+          send_error(Req2, 400, <<"Invalid JSON format">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% DELETE /v1/bookings/:id - отмена бронирования (участником)
+cancel_booking(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      BookingId = cowboy_req:binding(id, Req1),
+      case logic_booking:cancel_booking(UserId, BookingId) of
+        {ok, Booking} ->
+          Response = booking_to_json(Booking),
+          send_json(Req1, 200, Response);
+        {error, access_denied} ->
+          send_error(Req1, 403, <<"Access denied">>);
+        {error, not_found} ->
+          send_error(Req1, 404, <<"Booking not found">>);
+        {error, _} ->
+          send_error(Req1, 500, <<"Internal server error">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% Вспомогательные функции
+booking_to_json(Booking) ->
+  #{
+    id => Booking#booking.id,
+    event_id => Booking#booking.event_id,
+    user_id => Booking#booking.user_id,
+    status => Booking#booking.status,
+    confirmed_at => case Booking#booking.confirmed_at of
+                      undefined -> null;
+                      Dt -> datetime_to_iso8601(Dt)
+                    end,
+    created_at => datetime_to_iso8601(Booking#booking.created_at),
+    updated_at => datetime_to_iso8601(Booking#booking.updated_at)
+  }.
+
+datetime_to_iso8601({{Year, Month, Day}, {Hour, Minute, Second}}) ->
+  iolist_to_binary(io_lib:format("~4..0B-~2..0B-~2..0BT~2..0B:~2..0B:~2..0BZ",
+    [Year, Month, Day, Hour, Minute, Second])).
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).

src/handlers/handler_bookings.erl

@@ -0,0 +1,87 @@
+-module(handler_bookings).
+-include("records.hrl").
+
+-export([init/2]).
+
+init(Req, Opts) ->
+  handle(Req, Opts).
+
+handle(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"POST">> -> create_booking(Req);
+    <<"GET">> -> list_bookings(Req);
+    _ -> send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+%% POST /v1/events/:id/bookings - создание бронирования (запись на событие)
+create_booking(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      EventId = cowboy_req:binding(id, Req1),
+      case logic_booking:create_booking(UserId, EventId) of
+        {ok, Booking} ->
+          Response = booking_to_json(Booking),
+          send_json(Req1, 201, Response);
+        {error, already_booked} ->
+          send_error(Req1, 409, <<"Already booked">>);
+        {error, event_full} ->
+          send_error(Req1, 400, <<"Event is full">>);
+        {error, event_not_active} ->
+          send_error(Req1, 400, <<"Event is not active">>);
+        {error, access_denied} ->
+          send_error(Req1, 403, <<"Access denied">>);
+        {error, not_found} ->
+          send_error(Req1, 404, <<"Event not found">>);
+        {error, _} ->
+          send_error(Req1, 500, <<"Internal server error">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% GET /v1/events/:id/bookings - список бронирований события (для владельца)
+list_bookings(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      EventId = cowboy_req:binding(id, Req1),
+      case logic_booking:list_event_bookings(UserId, EventId) of
+        {ok, Bookings} ->
+          Response = [booking_to_json(B) || B <- Bookings],
+          send_json(Req1, 200, Response);
+        {error, access_denied} ->
+          send_error(Req1, 403, <<"Access denied">>);
+        {error, not_found} ->
+          send_error(Req1, 404, <<"Event not found">>);
+        {error, _} ->
+          send_error(Req1, 500, <<"Internal server error">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% Вспомогательные функции
+booking_to_json(Booking) ->
+  #{
+    id => Booking#booking.id,
+    event_id => Booking#booking.event_id,
+    user_id => Booking#booking.user_id,
+    status => Booking#booking.status,
+    confirmed_at => case Booking#booking.confirmed_at of
+                      undefined -> null;
+                      Dt -> datetime_to_iso8601(Dt)
+                    end,
+    created_at => datetime_to_iso8601(Booking#booking.created_at),
+    updated_at => datetime_to_iso8601(Booking#booking.updated_at)
+  }.
+
+datetime_to_iso8601({{Year, Month, Day}, {Hour, Minute, Second}}) ->
+  iolist_to_binary(io_lib:format("~4..0B-~2..0B-~2..0BT~2..0B:~2..0B:~2..0BZ",
+    [Year, Month, Day, Hour, Minute, Second])).
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).

src/handlers/handler_calendars.erl

@@ -23,7 +23,8 @@ create_calendar(Req) ->
           case Decoded of
             #{<<"title">> := Title} ->
               Description = maps:get(<<"description">>, Decoded, <<"">>),
-              case logic_calendar:create_calendar(UserId, Title, Description) of
+              Confirmation = parse_confirmation(maps:get(<<"confirmation">>, Decoded, <<"manual">>)),
+              case logic_calendar:create_calendar(UserId, Title, Description, Confirmation) of
                 {ok, Calendar} ->
                   Response = calendar_to_json(Calendar),
                   send_json(Req2, 201, Response);
@@ -45,6 +46,11 @@ create_calendar(Req) ->
       send_error(Req1, Code, Message)
   end.
 
+parse_confirmation(<<"auto">>) -> auto;
+parse_confirmation(<<"manual">>) -> manual;
+parse_confirmation(#{<<"timeout">> := N}) when is_integer(N), N > 0 -> {timeout, N};
+parse_confirmation(_) -> manual.
+
 %% GET /v1/calendars - список календарей
 list_calendars(Req) ->
   case handler_auth:authenticate(Req) of

src/handlers/handler_login.erl

@@ -9,41 +9,54 @@ init(Req, Opts) ->
 handle(Req, _Opts) ->
   case cowboy_req:method(Req) of
     <<"POST">> ->
-      {ok, Body, Req1} = cowboy_req:read_body(Req),
-      case jsx:decode(Body, [return_maps]) of
-        #{<<"email">> := Email, <<"password">> := Password} ->
-          case core_user:get_by_email(Email) of
-            {ok, User} ->
-              case logic_auth:verify_password(Password, User#user.password_hash) of
-                {ok, true} ->
-                  case User#user.status of
-                    active ->
-                      Token = logic_auth:generate_jwt(User#user.id, User#user.role),
-                      {RefreshToken, ExpiresAt} = logic_auth:generate_refresh_token(User#user.id),
-                      save_refresh_token(User#user.id, RefreshToken, ExpiresAt),
-                      Response = #{
-                        user => #{
-                          id => User#user.id,
-                          email => User#user.email,
-                          role => User#user.role
-                        },
-                        token => Token,
-                        refresh_token => RefreshToken
-                      },
-                      send_json(Req1, 200, Response);
-                    frozen ->
-                      send_error(Req1, 403, <<"Account frozen">>);
-                    deleted ->
-                      send_error(Req1, 403, <<"Account deleted">>)
+      case cowboy_req:has_body(Req) of
+        true ->
+          {ok, Body, Req1} = cowboy_req:read_body(Req),
+          case Body of
+            <<>> ->
+              send_error(Req1, 400, <<"Empty request body">>);
+            _ ->
+              try jsx:decode(Body, [return_maps]) of
+                #{<<"email">> := Email, <<"password">> := Password} ->
+                  case core_user:get_by_email(Email) of
+                    {ok, User} ->
+                      case logic_auth:verify_password(Password, User#user.password_hash) of
+                        {ok, true} ->
+                          case User#user.status of
+                            active ->
+                              Token = logic_auth:generate_jwt(User#user.id, User#user.role),
+                              {RefreshToken, ExpiresAt} = logic_auth:generate_refresh_token(User#user.id),
+                              save_refresh_token(User#user.id, RefreshToken, ExpiresAt),
+                              Response = #{
+                                user => #{
+                                  id => User#user.id,
+                                  email => User#user.email,
+                                  role => User#user.role
+                                },
+                                token => Token,
+                                refresh_token => RefreshToken
+                              },
+                              send_json(Req1, 200, Response);
+                            frozen ->
+                              send_error(Req1, 403, <<"Account frozen">>);
+                            deleted ->
+                              send_error(Req1, 403, <<"Account deleted">>)
+                          end;
+                        _ ->
+                          send_error(Req1, 401, <<"Invalid credentials">>)
+                      end;
+                    {error, not_found} ->
+                      send_error(Req1, 401, <<"Invalid credentials">>)
                   end;
                 _ ->
-                  send_error(Req1, 401, <<"Invalid credentials">>)
-              end;
-            {error, not_found} ->
-              send_error(Req1, 401, <<"Invalid credentials">>)
+                  send_error(Req1, 400, <<"Missing email or password">>)
+              catch
+                _:_ ->
+                  send_error(Req1, 400, <<"Invalid JSON">>)
+              end
           end;
-        _ ->
-          send_error(Req1, 400, <<"Invalid request body">>)
+        false ->
+          send_error(Req, 400, <<"Missing request body">>)
       end;
     _ ->
       send_error(Req, 405, <<"Method not allowed">>)

src/handlers/handler_register.erl

@@ -9,31 +9,46 @@ init(Req, Opts) ->
 handle(Req, _Opts) ->
   case cowboy_req:method(Req) of
     <<"POST">> ->
-      {ok, Body, Req1} = cowboy_req:read_body(Req),
-      case jsx:decode(Body, [return_maps]) of
-        #{<<"email">> := Email, <<"password">> := Password} ->
-          case core_user:email_exists(Email) of
-            true ->
-              send_error(Req1, 409, <<"Email already exists">>);
-            false ->
-              case core_user:create(Email, Password) of
-                {ok, User} ->
-                  Token = logic_auth:generate_jwt(User#user.id, User#user.role),
-                  Response = #{
-                    user => #{
-                      id => User#user.id,
-                      email => User#user.email,
-                      role => User#user.role
-                    },
-                    token => Token
-                  },
-                  send_json(Req1, 201, Response);
-                {error, _} ->
-                  send_error(Req1, 500, <<"Internal server error">>)
+      case cowboy_req:has_body(Req) of
+        true ->
+          {ok, Body, Req1} = cowboy_req:read_body(Req),
+          case Body of
+            <<>> ->
+              send_error(Req1, 400, <<"Empty request body">>);
+            _ ->
+              try jsx:decode(Body, [return_maps]) of
+                #{<<"email">> := Email, <<"password">> := Password} ->
+                  case core_user:email_exists(Email) of
+                    true ->
+                      send_error(Req1, 409, <<"Email already exists">>);
+                    false ->
+                      case core_user:create(Email, Password) of
+                        {ok, User} ->
+                          Token = logic_auth:generate_jwt(User#user.id, User#user.role),
+                          Response = #{
+                            user => #{
+                              id => User#user.id,
+                              email => User#user.email,
+                              role => User#user.role
+                            },
+                            token => Token
+                          },
+                          send_json(Req1, 201, Response);
+                        {error, email_exists} ->
+                          send_error(Req1, 409, <<"Email already exists">>);
+                        {error, _} ->
+                          send_error(Req1, 500, <<"Internal server error">>)
+                      end
+                  end;
+                _ ->
+                  send_error(Req1, 400, <<"Missing email or password">>)
+              catch
+                _:_ ->
+                  send_error(Req1, 400, <<"Invalid JSON">>)
               end
           end;
-        _ ->
-          send_error(Req1, 400, <<"Invalid request body">>)
+        false ->
+          send_error(Req, 400, <<"Missing request body">>)
       end;
     _ ->
       send_error(Req, 405, <<"Method not allowed">>)

src/handlers/handler_user_bookings.erl

@@ -0,0 +1,55 @@
+-module(handler_user_bookings).
+-include("records.hrl").
+
+-export([init/2]).
+
+init(Req, Opts) ->
+  handle(Req, Opts).
+
+handle(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"GET">> -> list_user_bookings(Req);
+    _ -> send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+%% GET /v1/user/bookings - список бронирований текущего пользователя
+list_user_bookings(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      case logic_booking:list_user_bookings(UserId) of
+        {ok, Bookings} ->
+          Response = [booking_to_json(B) || B <- Bookings],
+          send_json(Req1, 200, Response);
+        {error, _} ->
+          send_error(Req1, 500, <<"Internal server error">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% Вспомогательные функции
+booking_to_json(Booking) ->
+  #{
+    id => Booking#booking.id,
+    event_id => Booking#booking.event_id,
+    user_id => Booking#booking.user_id,
+    status => Booking#booking.status,
+    confirmed_at => case Booking#booking.confirmed_at of
+                      undefined -> null;
+                      Dt -> datetime_to_iso8601(Dt)
+                    end,
+    created_at => datetime_to_iso8601(Booking#booking.created_at),
+    updated_at => datetime_to_iso8601(Booking#booking.updated_at)
+  }.
+
+datetime_to_iso8601({{Year, Month, Day}, {Hour, Minute, Second}}) ->
+  iolist_to_binary(io_lib:format("~4..0B-~2..0B-~2..0BT~2..0B:~2..0B:~2..0BZ",
+    [Year, Month, Day, Hour, Minute, Second])).
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).