Stage 5

src/handlers/handler_admin_reviews.erl

@@ -0,0 +1,91 @@
+-module(handler_admin_reviews).
+-include("records.hrl").
+
+-export([init/2]).
+
+init(Req, Opts) ->
+  handle(Req, Opts).
+
+handle(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"PUT">> -> moderate_review(Req);
+    _ -> send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+%% PUT /v1/admin/reviews/:id - скрыть/раскрыть отзыв
+moderate_review(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, AdminId, Req1} ->
+      % Проверим роль
+      case core_user:get_by_id(AdminId) of
+        {ok, User} ->
+          io:format("User ~p role: ~p~n", [AdminId, User#user.role]);
+        _ -> ok
+      end,
+      ReviewId = cowboy_req:binding(id, Req1),
+      {ok, Body, Req2} = cowboy_req:read_body(Req1),
+      try jsx:decode(Body, [return_maps]) of
+        #{<<"action">> := Action} ->
+          case Action of
+            <<"hide">> ->
+              case logic_review:hide_review(AdminId, ReviewId) of
+                {ok, Review} ->
+                  Response = review_to_json(Review),
+                  send_json(Req2, 200, Response);
+                {error, access_denied} ->
+                  send_error(Req2, 403, <<"Admin access required">>);
+                {error, not_found} ->
+                  send_error(Req2, 404, <<"Review not found">>);
+                {error, _} ->
+                  send_error(Req2, 500, <<"Internal server error">>)
+              end;
+            <<"unhide">> ->
+              case logic_review:unhide_review(AdminId, ReviewId) of
+                {ok, Review} ->
+                  Response = review_to_json(Review),
+                  send_json(Req2, 200, Response);
+                {error, access_denied} ->
+                  send_error(Req2, 403, <<"Admin access required">>);
+                {error, not_found} ->
+                  send_error(Req2, 404, <<"Review not found">>);
+                {error, _} ->
+                  send_error(Req2, 500, <<"Internal server error">>)
+              end;
+            _ ->
+              send_error(Req2, 400, <<"Invalid action. Use 'hide' or 'unhide'">>)
+          end;
+        _ ->
+          send_error(Req2, 400, <<"Missing action field">>)
+      catch
+        _:_ ->
+          send_error(Req2, 400, <<"Invalid JSON format">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% Вспомогательные функции
+review_to_json(Review) ->
+  #{
+    id => Review#review.id,
+    user_id => Review#review.user_id,
+    target_type => Review#review.target_type,
+    target_id => Review#review.target_id,
+    rating => Review#review.rating,
+    comment => Review#review.comment,
+    status => Review#review.status,
+    created_at => datetime_to_iso8601(Review#review.created_at),
+    updated_at => datetime_to_iso8601(Review#review.updated_at)
+  }.
+
+datetime_to_iso8601({{Year, Month, Day}, {Hour, Minute, Second}}) ->
+  iolist_to_binary(io_lib:format("~4..0B-~2..0B-~2..0BT~2..0B:~2..0B:~2..0BZ",
+    [Year, Month, Day, Hour, Minute, Second])).
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).

src/handlers/handler_review_by_id.erl

@@ -0,0 +1,116 @@
+-module(handler_review_by_id).
+-include("records.hrl").
+
+-export([init/2]).
+
+init(Req, Opts) ->
+  handle(Req, Opts).
+
+handle(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"GET">> -> get_review(Req);
+    <<"PUT">> -> update_review(Req);
+    <<"DELETE">> -> delete_review(Req);
+    _ -> send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+%% GET /v1/reviews/:id - получение отзыва
+get_review(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      ReviewId = cowboy_req:binding(id, Req1),
+      case logic_review:get_review(UserId, ReviewId) of
+        {ok, Review} ->
+          Response = review_to_json(Review),
+          send_json(Req1, 200, Response);
+        {error, access_denied} ->
+          send_error(Req1, 403, <<"Access denied">>);
+        {error, not_found} ->
+          send_error(Req1, 404, <<"Review not found">>);
+        {error, _} ->
+          send_error(Req1, 500, <<"Internal server error">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% PUT /v1/reviews/:id - обновление отзыва
+update_review(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      ReviewId = cowboy_req:binding(id, Req1),
+      {ok, Body, Req2} = cowboy_req:read_body(Req1),
+      try jsx:decode(Body, [return_maps]) of
+        UpdatesMap when is_map(UpdatesMap) ->
+          Updates = maps:to_list(UpdatesMap),
+          case logic_review:update_review(UserId, ReviewId, Updates) of
+            {ok, _} ->
+              % Получаем обновлённый отзыв из базы
+              case core_review:get_by_id(ReviewId) of
+                {ok, Updated} ->
+                  Response = review_to_json(Updated),
+                  send_json(Req2, 200, Response);
+                _ ->
+                  send_error(Req2, 500, <<"Failed to retrieve updated review">>)
+              end;
+            {error, access_denied} ->
+              send_error(Req2, 403, <<"Access denied">>);
+            {error, not_found} ->
+              send_error(Req2, 404, <<"Review not found">>);
+            {error, _} ->
+              send_error(Req2, 500, <<"Internal server error">>)
+          end;
+        _ ->
+          send_error(Req2, 400, <<"Invalid JSON">>)
+      catch
+        _:_ ->
+          send_error(Req2, 400, <<"Invalid JSON format">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% DELETE /v1/reviews/:id - удаление отзыва
+delete_review(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      ReviewId = cowboy_req:binding(id, Req1),
+      case logic_review:delete_review(UserId, ReviewId) of
+        {ok, deleted} ->
+          send_json(Req1, 200, #{status => <<"deleted">>});
+        {error, access_denied} ->
+          send_error(Req1, 403, <<"Access denied">>);
+        {error, not_found} ->
+          send_error(Req1, 404, <<"Review not found">>);
+        {error, _} ->
+          send_error(Req1, 500, <<"Internal server error">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% Вспомогательные функции
+review_to_json(Review) ->
+  #{
+    id => Review#review.id,
+    user_id => Review#review.user_id,
+    target_type => Review#review.target_type,
+    target_id => Review#review.target_id,
+    rating => Review#review.rating,
+    comment => Review#review.comment,
+    status => Review#review.status,
+    created_at => datetime_to_iso8601(Review#review.created_at),
+    updated_at => datetime_to_iso8601(Review#review.updated_at)
+  }.
+
+datetime_to_iso8601({{Year, Month, Day}, {Hour, Minute, Second}}) ->
+  iolist_to_binary(io_lib:format("~4..0B-~2..0B-~2..0BT~2..0B:~2..0B:~2..0BZ",
+    [Year, Month, Day, Hour, Minute, Second])).
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).

src/handlers/handler_reviews.erl

@@ -0,0 +1,107 @@
+-module(handler_reviews).
+-include("records.hrl").
+
+-export([init/2]).
+
+init(Req, Opts) ->
+  handle(Req, Opts).
+
+handle(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"POST">> -> create_review(Req);
+    <<"GET">> -> list_reviews(Req);
+    _ -> send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+%% POST /v1/reviews - создание отзыва
+create_review(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      {ok, Body, Req2} = cowboy_req:read_body(Req1),
+      try jsx:decode(Body, [return_maps]) of
+        Decoded when is_map(Decoded) ->
+          case Decoded of
+            #{<<"target_type">> := TargetTypeBin,
+              <<"target_id">> := TargetId,
+              <<"rating">> := Rating,
+              <<"comment">> := Comment} ->
+              TargetType = parse_target_type(TargetTypeBin),
+              case logic_review:create_review(UserId, TargetType, TargetId, Rating, Comment) of
+                {ok, Review} ->
+                  Response = review_to_json(Review),
+                  send_json(Req2, 201, Response);
+                {error, already_reviewed} ->
+                  send_error(Req2, 409, <<"Already reviewed">>);
+                {error, cannot_review} ->
+                  send_error(Req2, 403, <<"Cannot review this target">>);
+                {error, target_not_found} ->
+                  send_error(Req2, 404, <<"Target not found">>);
+                {error, _} ->
+                  send_error(Req2, 500, <<"Internal server error">>)
+              end;
+            _ ->
+              send_error(Req2, 400, <<"Missing required fields">>)
+          end;
+        _ ->
+          send_error(Req2, 400, <<"Invalid JSON">>)
+      catch
+        _:_ ->
+          send_error(Req2, 400, <<"Invalid JSON format">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% GET /v1/reviews - список отзывов для цели
+list_reviews(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      Qs = cowboy_req:parse_qs(Req1),
+      case {proplists:get_value(<<"target_type">>, Qs), proplists:get_value(<<"target_id">>, Qs)} of
+        {undefined, _} ->
+          send_error(Req1, 400, <<"Missing target_type">>);
+        {_, undefined} ->
+          send_error(Req1, 400, <<"Missing target_id">>);
+        {TargetTypeBin, TargetId} ->
+          TargetType = parse_target_type(TargetTypeBin),
+          case logic_review:list_reviews(UserId, TargetType, TargetId) of
+            {ok, Reviews} ->
+              Response = [review_to_json(R) || R <- Reviews],
+              send_json(Req1, 200, Response);
+            {error, _} ->
+              send_error(Req1, 500, <<"Internal server error">>)
+          end
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% Вспомогательные функции
+parse_target_type(<<"event">>) -> event;
+parse_target_type(<<"calendar">>) -> calendar;
+parse_target_type(_) -> undefined.
+
+review_to_json(Review) ->
+  #{
+    id => Review#review.id,
+    user_id => Review#review.user_id,
+    target_type => Review#review.target_type,
+    target_id => Review#review.target_id,
+    rating => Review#review.rating,
+    comment => Review#review.comment,
+    status => Review#review.status,
+    created_at => datetime_to_iso8601(Review#review.created_at),
+    updated_at => datetime_to_iso8601(Review#review.updated_at)
+  }.
+
+datetime_to_iso8601({{Year, Month, Day}, {Hour, Minute, Second}}) ->
+  iolist_to_binary(io_lib:format("~4..0B-~2..0B-~2..0BT~2..0B:~2..0B:~2..0BZ",
+    [Year, Month, Day, Hour, Minute, Second])).
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).

src/handlers/handler_user_reviews.erl

@@ -0,0 +1,54 @@
+-module(handler_user_reviews).
+-include("records.hrl").
+
+-export([init/2]).
+
+init(Req, Opts) ->
+  handle(Req, Opts).
+
+handle(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"GET">> -> list_user_reviews(Req);
+    _ -> send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+%% GET /v1/user/reviews - список отзывов текущего пользователя
+list_user_reviews(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, UserId, Req1} ->
+      case logic_review:list_user_reviews(UserId) of
+        {ok, Reviews} ->
+          Response = [review_to_json(R) || R <- Reviews],
+          send_json(Req1, 200, Response);
+        {error, _} ->
+          send_error(Req1, 500, <<"Internal server error">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+%% Вспомогательные функции
+review_to_json(Review) ->
+  #{
+    id => Review#review.id,
+    user_id => Review#review.user_id,
+    target_type => Review#review.target_type,
+    target_id => Review#review.target_id,
+    rating => Review#review.rating,
+    comment => Review#review.comment,
+    status => Review#review.status,
+    created_at => datetime_to_iso8601(Review#review.created_at),
+    updated_at => datetime_to_iso8601(Review#review.updated_at)
+  }.
+
+datetime_to_iso8601({{Year, Month, Day}, {Hour, Minute, Second}}) ->
+  iolist_to_binary(io_lib:format("~4..0B-~2..0B-~2..0BT~2..0B:~2..0B:~2..0BZ",
+    [Year, Month, Day, Hour, Minute, Second])).
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).