learnhouse/src/services/orgs.py

import json
from typing import List
from uuid import uuid4
from pydantic import BaseModel
from src.services.users import User
from ..services.database import create_config_collection, check_database, create_database, learnhouseDB, learnhouseDB
from ..services.security import *
from fastapi import FastAPI, HTTPException, status, Request, Response, BackgroundTasks
from datetime import datetime

#### Classes ####################################################


class Organization(BaseModel):
    name: str
    description: str
    email: str


class OrganizationInDB(Organization):
    org_id: str
    owners: List[str]
    admins: List[str]


#### Classes ####################################################


async def get_organization(org_id: str):
    await check_database()
    orgs = learnhouseDB["organizations"]

    org = orgs.find_one({"org_id": org_id})

    if not org:
        raise HTTPException(
            status_code=status.HTTP_409_CONFLICT, detail="Organization does not exist")

    org = Organization(**org)
    return org


async def create_org(org_object: Organization, current_user: User):
    await check_database()
    orgs = learnhouseDB["organizations"]

    # find if org already exists using name
    isOrgAvailable = orgs.find_one({"name": org_object.name})

    if isOrgAvailable:
        raise HTTPException(
            status_code=status.HTTP_409_CONFLICT, detail="Organization name already exists")

    # generate org_id with uuid4
    org_id = str(f"org_{uuid4()}")

    org = OrganizationInDB(org_id=org_id, owners=[
        current_user.username], admins=[
        current_user.username], **org_object.dict())

    org_in_db = orgs.insert_one(org.dict())

    if not org_in_db:
        raise HTTPException(
            status_code=status.HTTP_503_SERVICE_UNAVAILABLE, detail="Unavailable database")

    return org.dict()


async def update_org(org_object: Organization, org_id: str, current_user: User):
    await check_database()

    # verify org rights
    await verify_org_rights(org_id, current_user)

    orgs = learnhouseDB["organizations"]

    org = orgs.find_one({"org_id": org_id})

    # get owner & adminds value from org object database
    owners = org["owners"]
    admins = org["admins"]

    if not org:
        raise HTTPException(
            status_code=status.HTTP_409_CONFLICT, detail="Organization does not exist")

    updated_org = OrganizationInDB(
        org_id=org_id, owners=owners, admins=admins, **org_object.dict())

    orgs.update_one({"org_id": org_id}, {"$set": updated_org.dict()})

    return Organization(**updated_org.dict())


async def delete_org(org_id: str, current_user: User):
    await check_database()

    await verify_org_rights(org_id, current_user)

    orgs = learnhouseDB["organizations"]

    org = orgs.find_one({"org_id": org_id})

    if not org:
        raise HTTPException(
            status_code=status.HTTP_409_CONFLICT, detail="Organization does not exist")

    isDeleted = orgs.delete_one({"org_id": org_id})

    if isDeleted:
        return {"detail": "Org deleted"}
    else:
        raise HTTPException(
            status_code=status.HTTP_503_SERVICE_UNAVAILABLE, detail="Unavailable database")


async def get_orgs(page: int = 1, limit: int = 10):
    await check_database()
    orgs = learnhouseDB["orgs"]

    # get all orgs from database
    all_orgs = orgs.find().sort("name", 1).skip(10 * (page - 1)).limit(limit)

    return [json.loads(json.dumps(house, default=str)) for house in all_orgs]


#### Security ####################################################

async def verify_org_rights(org_id: str, current_user: User):
    await check_database()
    orgs = learnhouseDB["organizations"]

    org = orgs.find_one({"org_id": org_id})

    if not org:
        raise HTTPException(
            status_code=status.HTTP_409_CONFLICT, detail="Organization does not exist")

    isAdmin = current_user.username in org["admins"]
    isOwner = current_user.username in org["owners"]

    if not isAdmin and not isOwner:
        raise HTTPException(
            status_code=status.HTTP_403_FORBIDDEN, detail="You do not have rights to this organization")

    return True

#### Security ####################################################