feat: implement backend avatar update

apps/api/src/services/users/users.py

@@ -1,13 +1,14 @@
 from datetime import datetime
 from typing import Literal
 from uuid import uuid4
-from fastapi import HTTPException, Request, status
+from fastapi import HTTPException, Request, UploadFile, status
 from sqlmodel import Session, select
+from src.services.users.avatars import upload_avatar
 from src.db.roles import Role, RoleRead
 from src.security.rbac.rbac import (
     authorization_verify_based_on_roles_and_authorship,
     authorization_verify_if_user_is_anon,
-)  
+)
 from src.db.organizations import Organization, OrganizationRead
 from src.db.users import (
     AnonymousUser,
@@ -195,6 +196,49 @@ async def update_user(
     return user
 
 
+async def update_user_avatar(
+    request: Request,
+    db_session: Session,
+    current_user: PublicUser | AnonymousUser,
+    avatar_file: UploadFile | None = None,
+):
+    # Get user
+    statement = select(User).where(User.id == current_user.id)
+    user = db_session.exec(statement).first()
+
+    if not user:
+        raise HTTPException(
+            status_code=400,
+            detail="User does not exist",
+        )
+
+    # RBAC check
+    await rbac_check(request, current_user, "update", user.user_uuid, db_session)
+
+    # Upload thumbnail
+    if avatar_file and avatar_file.filename:
+        name_in_disk = f"{user.user_uuid}_avatar_{uuid4()}.{avatar_file.filename.split('.')[-1]}"
+        await upload_avatar(avatar_file, name_in_disk, user.user_uuid)
+
+        # Update course
+        if name_in_disk:
+            user.avatar_image = name_in_disk
+        else:
+            raise HTTPException(
+                status_code=500,
+                detail="Issue with Avatar upload",
+            )
+
+    # Update user in database
+    db_session.add(user)
+    db_session.commit()
+    db_session.refresh(user)
+
+    user = UserRead.from_orm(user)
+
+    return user
+
+
 async def update_user_password(
     request: Request,
     db_session: Session,