core/resolvers/collab.py

from auth.orm import Author
from orm.invite import Invite, InviteStatus
from orm.shout import Shout
from services.auth import login_required
from services.db import local_session
from services.schema import mutation


@mutation.field("accept_invite")
@login_required
async def accept_invite(_: None, info, invite_id: int):
    author_dict = info.context["author"]
    author_id = author_dict.get("id")
    if author_id:
        author_id = int(author_id)
        # Check if the user exists
        with local_session() as session:
            # Check if the invite exists
            invite = session.query(Invite).filter(Invite.id == invite_id).first()
            if invite and invite.author_id is author_id and invite.status is InviteStatus.PENDING.value:
                # Add the user to the shout authors
                shout = session.query(Shout).filter(Shout.id == invite.shout_id).first()
                if shout:
                    if author_id not in shout.authors:
                        author = session.query(Author).filter(Author.id == author_id).first()
                        if author:
                            shout.authors.append(author)
                            session.add(shout)
                            session.delete(invite)
                            session.commit()
                    return {"success": True, "message": "Invite accepted"}
                return {"error": "Shout not found"}
            return {"error": "Invalid invite or already accepted/rejected"}
    else:
        return {"error": "Unauthorized"}


@mutation.field("reject_invite")
@login_required
async def reject_invite(_: None, info, invite_id: int):
    author_dict = info.context["author"]
    author_id = author_dict.get("id")

    if author_id:
        # Check if the user exists
        with local_session() as session:
            author_id = int(author_id)
            # Check if the invite exists
            invite = session.query(Invite).filter(Invite.id == invite_id).first()
            if invite and invite.author_id is author_id and invite.status is InviteStatus.PENDING.value:
                # Delete the invite
                session.delete(invite)
                session.commit()
                return {"success": True, "message": "Invite rejected"}
            return {"error": "Invalid invite or already accepted/rejected"}
    return {"error": "User not found"}


@mutation.field("create_invite")
@login_required
async def create_invite(_: None, info, slug: str = "", author_id: int = 0):
    author_dict = info.context["author"]
    viewer_id = author_dict.get("id")
    roles = info.context.get("roles", [])
    is_admin = info.context.get("is_admin", False)
    if not viewer_id and not is_admin and "admin" not in roles and "editor" not in roles:
        return {"error": "Access denied"}
    if author_id:
        # Check if the inviter is the owner of the shout
        with local_session() as session:
            shout = session.query(Shout).filter(Shout.slug == slug).first()
            inviter = session.query(Author).filter(Author.id == viewer_id).first()
            if inviter and shout and shout.authors and inviter.id is shout.created_by:
                # Check if an invite already exists
                existing_invite = (
                    session.query(Invite)
                    .filter(
                        Invite.inviter_id == inviter.id,
                        Invite.author_id == author_id,
                        Invite.shout_id == shout.id,
                        Invite.status == InviteStatus.PENDING.value,
                    )
                    .first()
                )
                if existing_invite:
                    return {"error": "Invite already sent"}

                # Create a new invite
                new_invite = Invite(
                    inviter_id=viewer_id,
                    author_id=author_id,
                    shout_id=shout.id,
                    status=InviteStatus.PENDING.value,
                )
                session.add(new_invite)
                session.commit()

                return {"error": None, "invite": new_invite}
            return {"error": "Invalid author"}
    else:
        return {"error": "Access denied"}


@mutation.field("remove_author")
@login_required
async def remove_author(_: None, info, slug: str = "", author_id: int = 0):
    viewer_id = info.context.get("author", {}).get("id")
    is_admin = info.context.get("is_admin", False)
    roles = info.context.get("roles", [])
    if not viewer_id and not is_admin and "admin" not in roles and "editor" not in roles:
        return {"error": "Access denied"}
    with local_session() as session:
        author = session.query(Author).filter(Author.id == author_id).first()
        if author:
            shout = session.query(Shout).filter(Shout.slug == slug).first()
            # NOTE: owner should be first in a list
            if shout and author.id is shout.created_by:
                shout.authors = [author for author in shout.authors if author.id != author_id]
                session.commit()
                return {}
    return {"error": "Access denied"}


@mutation.field("remove_invite")
@login_required
async def remove_invite(_: None, info, invite_id: int):
    author_dict = info.context["author"]
    author_id = author_dict.get("id")
    if isinstance(author_id, int):
        # Check if the user exists
        with local_session() as session:
            # Check if the invite exists
            invite = session.query(Invite).filter(Invite.id == invite_id).first()
            if isinstance(invite, Invite):
                shout = session.query(Shout).filter(Shout.id == invite.shout_id).first()
                if shout and shout.deleted_at is None and invite:
                    if invite.inviter_id is author_id or author_id == shout.created_by:
                        if invite.status is InviteStatus.PENDING.value:
                            # Delete the invite
                            session.delete(invite)
                            session.commit()
                            return {}
                        return None
                    return None
                return None
            return {"error": "Invalid invite or already accepted/rejected"}
    else:
        return {"error": "Author not found"}