app.infrastructure.views

  1"""
  2Infrastructure API views for hospital management.
  3
  4Endpoints documented:
  5- /api/hospitals/                      : Hospital CRUD
  6- /api/hospitals/{hospital_pk}/roles/  : Role CRUD for a hospital
  7- /api/hospitals/{hospital_pk}/users/  : Hospital user CRUD
  8- /api/hospitals/{hospital_pk}/shifts/ : Shift CRUD for a hospital
  9- /api/hospitals/{hospital_pk}/blocks/ : Block CRUD for a hospital
 10- /api/hospitals/{hospital_pk}/hierarchies/ : Approver hierarchy CRUD
 11- /api/hospitals/{hospital_pk}/wards/  : Ward CRUD for a hospital
 12- /api/set-password/                   : Change user password
 13- /api/switch-block/                   : Switch user's current block
 14- /api/switch-ward/                    : Switch user's current ward
 15
 16Each endpoint is documented with drf-spectacular's @extend_schema for OpenAPI generation.
 17"""
 18
 19from rest_framework import viewsets, status
 20from rest_framework.views import APIView
 21from .serializers import HospitalSerializer, RoleSerializer, HospitalUserSerializer, ShiftSerializer, BlockSerializer, WardSerializer, ApproverHierarchySerializer
 22from accounts.models import Hospital, User, Role
 23from management.models import Shift, Blocks, Ward
 24from .models import ApproverHierarchy, ApproverLevel, BlockChange, WardChange
 25from .permissions import IsHospitalUserOrSuperUser, RoleEditPermission, UserPermission, WardPermission
 26from rest_framework.response import Response
 27from rest_framework.permissions import IsAuthenticated
 28from drf_spectacular.utils import extend_schema, OpenApiTypes, OpenApiParameter, OpenApiResponse
 29from rest_framework.decorators import action
 30from django_filters.rest_framework import DjangoFilterBackend
 31
 32@extend_schema(
 33    summary="Hospital CRUD",
 34    description="Create, retrieve, update, and list hospitals.",
 35    responses={200: HospitalSerializer(many=True)}
 36)
 37class HospitalViewSet(viewsets.ModelViewSet):
 38    """
 39    ViewSet for hospital CRUD operations.
 40    """
 41    serializer_class = HospitalSerializer
 42    permission_classes = [IsHospitalUserOrSuperUser]
 43
 44    def get_queryset(self):
 45        print(self.kwargs)
 46        user = self.request.user
 47        return Hospital.objects.filter()
 48
 49    def get_serializer_context(self):
 50        context = super().get_serializer_context()
 51        context['hospital_id'] = self.kwargs.get('pk')
 52        return context
 53
 54    def destroy(self, request, *args, **kwargs):
 55        return Response({"detail": "Deletion not allowed."}, status=405)
 56
 57@extend_schema(
 58    summary="Change user's password",
 59    description="Change password by providing phone and new password.",
 60    parameters=[
 61        OpenApiParameter(name="phone", type=str, location="query", required=True, description="User's phone number"),
 62        OpenApiParameter(name="password", type=str, location="query", required=True, description="New password"),
 63    ],
 64    responses={
 65        200: OpenApiResponse(description="Password changed successfully."),
 66        404: OpenApiResponse(description="User not found."),
 67        400: OpenApiResponse(description="Bad request."),
 68    },
 69)
 70class PasswordChangeViewSet(APIView):
 71    """
 72    APIView to change a user's password.
 73    """
 74    permission_classes = []
 75
 76    @extend_schema(
 77        summary="Change user's password",
 78        description="This endpoint allows a user to change their password by providing their phone number and new password.",
 79        parameters=[
 80            OpenApiParameter(name="phone", type=str, location="query", required=True, description="User's phone number"),
 81            OpenApiParameter(name="password", type=str, location="query", required=True, description="New password"),
 82        ],
 83        responses={
 84            200: OpenApiResponse(description="Password changed successfully."),
 85            404: OpenApiResponse(description="User not found."),
 86            400: OpenApiResponse(description="Bad request."),
 87        },
 88    )
 89    def post(self, request, *args, **kwargs):
 90        try:
 91            phone = request.data.get('phone')
 92            password = request.data.get('password')
 93
 94            user = User.objects.get(phone_number=phone)
 95            user.set_password(password)
 96            user.save()
 97            return Response({"detail": "Password changed successfully."}, status=200)
 98        except User.DoesNotExist:
 99            return Response({"detail": "User not found."}, status=404)
100        except Exception as e:
101            return Response({"detail": str(e)}, status=400)
102
103@extend_schema(
104    summary="Role CRUD",
105    description="Create, retrieve, update, and list roles for a hospital.",
106    responses={200: RoleSerializer(many=True)}
107)
108class RoleViewSet(viewsets.ModelViewSet):
109    """
110    ViewSet for role CRUD operations within a hospital.
111    """
112    serializer_class = RoleSerializer
113    permission_classes = [IsAuthenticated, RoleEditPermission]
114    lookup_field = 'id'
115
116    def get_queryset(self):
117        hospital_id = self.kwargs.get('hospital_pk')
118        print("KWARGS:", self.kwargs)
119        if self.request.query_params.get('is_responder') is not None:
120            return Role.objects.filter(
121                hospital__id=hospital_id,
122                is_responder=True
123            )
124        return Role.objects.filter(hospital__id=hospital_id)
125
126    def get_serializer_context(self):
127        context = super().get_serializer_context()
128        context['hospital_id'] = self.kwargs.get('hospital_pk')
129        return context
130
131    def perform_create(self, serializer):
132        hospital_id = self.kwargs.get('hospital_pk')
133        serializer.save(hospital_id=hospital_id)
134
135    def destroy(self, request, *args, **kwargs):
136        instance = self.get_object()
137        self.perform_destroy(instance)
138        return Response({"detail": "Role deleted successfully."}, status=status.HTTP_204_NO_CONTENT)
139
140@extend_schema(
141    summary="Hospital User CRUD",
142    description="Create, retrieve, update, and list hospital users.",
143    responses={200: HospitalUserSerializer(many=True)}
144)
145class HospitalUserViewSet(viewsets.ModelViewSet):
146    """
147    ViewSet for hospital user CRUD operations.
148    """
149    serializer_class = HospitalUserSerializer
150    permission_classes = [IsAuthenticated, UserPermission]
151    lookup_field = 'id'
152
153    def get_queryset(self):
154        return User.objects.filter(hospital__id=self.kwargs.get('hospital_pk')).exclude(is_superuser=True)
155
156    def get_serializer_context(self):
157        context = super().get_serializer_context()
158        context['hospital_id'] = self.kwargs.get('hospital_pk')
159        return context
160
161@extend_schema(
162    summary="Block CRUD",
163    description="Create, retrieve, update, and list blocks for a hospital.",
164    responses={200: BlockSerializer(many=True)}
165)
166class BlockViewSet(viewsets.ModelViewSet):
167    """
168    ViewSet for block CRUD operations within a hospital.
169    """
170    serializer_class = BlockSerializer
171    permission_classes = [IsAuthenticated, RoleEditPermission]
172    lookup_field = 'id'
173
174    def get_queryset(self):
175        return Blocks.objects.filter(hospital_id=self.kwargs.get('hospital_pk'))
176
177    def get_serializer_context(self):
178        context = super().get_serializer_context()
179        context['hospital_id'] = self.kwargs.get('hospital_pk')
180        return context
181
182    def perform_create(self, serializer):
183        serializer.save(
184            hospital_id=self.kwargs.get('hospital_pk'),
185            created_by=self.request.user
186        )
187
188@extend_schema(
189    summary="Shift CRUD",
190    description="Create, retrieve, update, and list shifts for a hospital.",
191    responses={200: ShiftSerializer(many=True)}
192)
193class ShiftViewSet(viewsets.ModelViewSet):
194    """
195    ViewSet for shift CRUD operations within a hospital.
196    """
197    serializer_class = ShiftSerializer
198    permission_classes = [IsAuthenticated, RoleEditPermission]
199    lookup_field = 'id'
200
201    def get_queryset(self):
202        return Shift.objects.filter(hospital_id=self.kwargs.get('hospital_pk'))
203
204    def get_serializer_context(self):
205        context = super().get_serializer_context()
206        context['hospital_id'] = self.kwargs.get('hospital_pk')
207        return context
208
209    def perform_create(self, serializer):
210        serializer.save(
211            hospital_id=self.kwargs.get('hospital_pk'),
212            created_by=self.request.user
213        )
214
215    def destroy(self, request, *args, **kwargs):
216        return Response({"detail": "Deletion not allowed."}, status=405)
217
218@extend_schema(
219    summary="Approver Hierarchy CRUD",
220    description="Create, retrieve, update, and list approver hierarchies for a hospital.",
221    responses={200: ApproverHierarchySerializer(many=True)}
222)
223class ApproverHierarchyViewSet(viewsets.ModelViewSet):
224    """
225    ViewSet for approver hierarchy CRUD operations within a hospital.
226    """
227    serializer_class = ApproverHierarchySerializer
228    permission_classes = [IsAuthenticated, RoleEditPermission]
229    lookup_field = 'id'
230
231    def get_queryset(self):
232        hospital_id = self.kwargs.get('hospital_pk')
233        return ApproverHierarchy.objects.filter(levels__role__hospital_id=hospital_id).distinct()
234
235    def perform_create(self, serializer):
236        serializer.save()
237
238    def get_serializer_context(self):
239        return super().get_serializer_context()
240
241@extend_schema(
242    summary="Ward CRUD",
243    description="Create, retrieve, update, and list wards for a hospital.",
244    responses={200: WardSerializer(many=True)}
245)
246class WardViewSet(viewsets.ModelViewSet):
247    """
248    ViewSet for ward CRUD operations within a hospital.
249    """
250    serializer_class = WardSerializer
251    permission_classes = [IsAuthenticated, WardPermission]
252    lookup_field = 'id'
253
254    def get_queryset(self):
255        hospital_id = self.kwargs.get('hospital_pk')
256        queryset = Ward.objects.filter(
257            deleted=False,
258            block__hospital_id=hospital_id
259        )
260
261        block_id = self.request.query_params.get('block')
262        if block_id:
263            queryset = queryset.filter(block_id=block_id)
264
265        floor = self.request.query_params.get('floor')
266        if floor is not None:
267            queryset = queryset.filter(floor=floor)
268
269        return queryset
270
271    def get_serializer_context(self):
272        context = super().get_serializer_context()
273        context['hospital_id'] = self.kwargs.get('hospital_pk')
274        return context
275
276    def perform_create(self, serializer):
277        serializer.save(created_by=self.request.user)
278
279    def destroy(self, request, *args, **kwargs):
280        instance = self.get_object()
281        if request.user.is_superuser:
282            instance.delete()
283            return Response({"detail": "Ward deleted successfully."}, status=status.HTTP_202_ACCEPTED)
284        instance.deleted = True
285        instance.save()
286        return Response({"detail": "Ward soft-deleted successfully."}, status=status.HTTP_202_ACCEPTED)
287
288    @action(detail=True, methods=['post'], url_path='restore')
289    def restore(self, request, *args, **kwargs):
290        instance = self.get_object()
291        instance.deleted = False
292        instance.save()
293        return Response({"detail": "Ward restored successfully."})
294
295@extend_schema(
296    summary="Switch Current Block",
297    description="Switch user's current block by providing block ID.",
298    parameters=[
299        OpenApiParameter(name="block_id", type=int, location="query", required=True, description="Block ID"),
300    ],
301    responses={
302        200: OpenApiResponse(description="Block switched successfully."),
303        400: OpenApiResponse(description="Bad request, block ID is required."),
304        404: OpenApiResponse(description="Block not found.")
305    }
306)
307class SwitchBlock(APIView):
308    """
309    APIView to switch user's current block.
310    """
311    permission_classes = [IsAuthenticated]
312
313    @extend_schema(
314        summary="Switch Current Block",
315        description="This endpoint allows a user to switch their current block by providing the block ID.",
316        parameters=[
317            OpenApiParameter(name="block_id", type=int, location="query", required=True, description="Block ID"),
318        ],
319        responses={
320            200: OpenApiResponse(description="Block switched successfully."),
321            400: OpenApiResponse(description="Bad request, block ID is required."),
322            404: OpenApiResponse(description="Block not found.")
323        }
324    )
325    def post(self, request, *args, **kwargs):
326        user = request.user
327        block_id = request.data.get('block_id')
328
329        if not block_id:
330            return Response({"detail": "Block ID is required."}, status=status.HTTP_400_BAD_REQUEST)
331
332        try:
333            block = Blocks.objects.get(id=block_id, hospital=user.hospital)
334            BlockChange.objects.create(
335                user=user,
336                from_block=user.current_block if user.current_block else None,
337                to_block=block
338            )
339            user.current_block = block
340            user.save()
341            return Response({"detail": "Block switched successfully."}, status=status.HTTP_200_OK)
342        except Blocks.DoesNotExist:
343            return Response({"detail": "Block not found."}, status=status.HTTP_404_NOT_FOUND)
344
345@extend_schema(
346    summary="Switch Current Ward",
347    description="Switch user's current ward by providing ward ID.",
348    parameters=[
349        OpenApiParameter(name="ward_id", type=int, location="query", required=True, description="Ward ID"),
350    ],
351    responses={
352        200: OpenApiResponse(description="Ward switched successfully."),
353        400: OpenApiResponse(description="Bad request, ward ID is required."),
354        404: OpenApiResponse(description="Ward not found.")
355    }
356)
357class SwitchWard(APIView):
358    """
359    APIView to switch user's current ward.
360    """
361    permission_classes = [IsAuthenticated]
362
363    @extend_schema(
364        summary="Switch Current Ward",
365        description="This endpoint allows a user to switch their current ward by providing the ward ID.",
366        parameters=[
367            OpenApiParameter(name="ward_id", type=int, location="query", required=True, description="Ward ID"),
368        ],
369        responses={
370            200: OpenApiResponse(description="Ward switched successfully."),
371            400: OpenApiResponse(description="Bad request, ward ID is required."),
372            404: OpenApiResponse(description="Ward not found.")
373        }
374    )
375    def post(self, request, *args, **kwargs):
376        user = request.user
377        ward_id = request.data.get('ward_id')
378
379        if not ward_id:
380            return Response({"detail": "Ward ID is required."}, status=status.HTTP_400_BAD_REQUEST)
381
382        try:
383            ward = Ward.objects.get(id=ward_id, block__hospital=user.hospital)
384            WardChange.objects.create(
385                user=user,
386                from_ward=user.current_ward if user.current_ward else None,
387                to_ward=ward
388            )
389            user.current_ward = ward
390            user.current_block = ward.block
391            user.save()
392            return Response({"detail": "Ward switched successfully."}, status=status.HTTP_200_OK)
393        except Ward.DoesNotExist:
394            return Response({"detail": "Ward not found."}, status=status.HTTP_404_NOT_FOUND)