first implementation

backend/routes/profile.py

@@ -0,0 +1,94 @@
+"""Profile routes for user contact details."""
+from fastapi import APIRouter, Depends, HTTPException, status
+from sqlalchemy import select
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from auth import get_current_user
+from database import get_db
+from models import User, ROLE_REGULAR
+from schemas import ProfileResponse, ProfileUpdate
+from validation import validate_profile_fields
+
+
+router = APIRouter(prefix="/api/profile", tags=["profile"])
+
+
+async def require_regular_user(
+    current_user: User = Depends(get_current_user),
+) -> User:
+    """Dependency that requires the user to have the 'regular' role."""
+    if ROLE_REGULAR not in current_user.role_names:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Profile access is only available to regular users",
+        )
+    return current_user
+
+
+async def get_godfather_email(db: AsyncSession, godfather_id: int | None) -> str | None:
+    """Get the email of a godfather user by ID."""
+    if not godfather_id:
+        return None
+    result = await db.execute(
+        select(User.email).where(User.id == godfather_id)
+    )
+    return result.scalar_one_or_none()
+
+
+@router.get("", response_model=ProfileResponse)
+async def get_profile(
+    current_user: User = Depends(require_regular_user),
+    db: AsyncSession = Depends(get_db),
+) -> ProfileResponse:
+    """Get the current user's profile (contact details and godfather)."""
+    godfather_email = await get_godfather_email(db, current_user.godfather_id)
+
+    return ProfileResponse(
+        contact_email=current_user.contact_email,
+        telegram=current_user.telegram,
+        signal=current_user.signal,
+        nostr_npub=current_user.nostr_npub,
+        godfather_email=godfather_email,
+    )
+
+
+@router.put("", response_model=ProfileResponse)
+async def update_profile(
+    data: ProfileUpdate,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(require_regular_user),
+) -> ProfileResponse:
+    """Update the current user's profile (contact details)."""
+    # Validate all fields
+    errors = validate_profile_fields(
+        contact_email=data.contact_email,
+        telegram=data.telegram,
+        signal=data.signal,
+        nostr_npub=data.nostr_npub,
+    )
+
+    if errors:
+        raise HTTPException(
+            status_code=422,
+            detail={"field_errors": errors},
+        )
+
+    # Update fields
+    current_user.contact_email = data.contact_email
+    current_user.telegram = data.telegram
+    current_user.signal = data.signal
+    current_user.nostr_npub = data.nostr_npub
+
+    await db.commit()
+    await db.refresh(current_user)
+
+    godfather_email = await get_godfather_email(db, current_user.godfather_id)
+
+    return ProfileResponse(
+        contact_email=current_user.contact_email,
+        telegram=current_user.telegram,
+        signal=current_user.signal,
+        nostr_npub=current_user.nostr_npub,
+        godfather_email=godfather_email,
+    )
+