+
+{% autoescape off %}
+
Hello {{ user.username }}
+
Thank you for your interest in joining us! as last step, please
+Click Here
+To confirm your email address with us.
+If you are unable to click the above link, please copy and paste the full URL below into your browser:
+{{domain}}/verify-email/?uid={{uid}}&confirmation_token={{token}}
+{% endautoescape %}
+
+
+
+
+
diff --git a/app/inventory/tests.py b/app/inventory/tests.py
new file mode 100644
index 0000000..286eaf2
--- /dev/null
+++ b/app/inventory/tests.py
@@ -0,0 +1,97 @@
+from rest_framework.test import APITestCase, APIClient
+from rest_framework import status
+from django.urls import reverse
+from django.contrib.auth import get_user_model
+from .models import Product, Category, Order, OrderItem
+
+User = get_user_model()
+
+class CustomTokenObtainPairViewTest(APITestCase):
+
+ def setUp(self):
+ self.user = User.objects.create_user(email='firstuser@gmail.com', password='Testing123', name='First User')
+ self.user.is_email_verified = True
+ self.user.save()
+ self.url = reverse('token')
+
+ def test_token_obtain_pair(self):
+ response = self.client.post(self.url, {'email': 'firstuser@gmail.com', 'password': 'Testing123'})
+ self.assertEqual(response.status_code, status.HTTP_200_OK)
+ self.assertIn('access', response.data)
+ self.assertIn('refresh', response.data)
+
+class UserRegistrationViewTest(APITestCase):
+
+ def setUp(self):
+ self.url = reverse('user_register')
+
+ def test_user_registration(self):
+ response = self.client.post(self.url, {'email': 'newuser@gmail.com', 'password': 'Testing123', 'name': 'New User'})
+ self.assertEqual(response.status_code, status.HTTP_200_OK)
+ self.assertIn('data', response.data)
+
+class ProductViewTest(APITestCase):
+
+ def setUp(self):
+ self.category = Category.objects.create(name='Category1',
+ slug='test-category')
+ self.product = Product.objects.create(name='Product1', slug='test-product',
+ description='Test Description',
+ category=self.category)
+ self.url = reverse('product_list_create')
+ self.lst_url = reverse('product_list')
+
+ def test_get_products(self):
+ response = self.client.get(self.lst_url)
+ self.assertEqual(response.status_code, status.HTTP_200_OK)
+ self.assertEqual(len(response.data), 1)
+ self.assertEqual(response.data[0]['name'], 'Product1')
+
+ def test_post_product(self):
+ data = {
+ 'name': 'New Product',
+ 'slug': 'new-product',
+ 'description': 'New Description',
+ 'price':200,
+ 'category': self.category.slug
+ }
+ response = self.client.post(self.url, data)
+ self.assertEqual(response.status_code, status.HTTP_201_CREATED)
+ self.assertEqual(response.data['name'], 'New Product')
+
+class CategoryViewTest(APITestCase):
+
+ def setUp(self):
+ self.category = Category.objects.create(name='Test Category', slug='test-category')
+ self.url = reverse('category_list_create')
+ self.lst_url =reverse('category_list')
+
+ def test_get_categories(self):
+ response = self.client.get(self.lst_url)
+ self.assertEqual(response.status_code, status.HTTP_200_OK)
+ self.assertEqual(len(response.data), 1)
+ self.assertEqual(response.data[0]['name'], 'Test Category')
+
+ def test_post_category(self):
+ data = {'name': 'New Category', 'slug': 'new-category'}
+ response = self.client.post(self.url, data)
+ self.assertEqual(response.status_code, status.HTTP_201_CREATED)
+ self.assertEqual(response.data['name'], 'New Category')
+
+class OrderViewTest(APITestCase):
+
+ def setUp(self):
+ self.user = User.objects.create_user(email='firstuser@gmail.com', password='Testing123', name='First User')
+ self.client.force_authenticate(user=self.user)
+ self.category = Category.objects.create(name='Test Category', slug='test-category')
+ self.product = Product.objects.create(name='Test Product', slug='test-product',
+ description='Test Description',
+ category=self.category)
+ self.url = reverse('order_list_create')
+
+ def test_get_orders(self):
+ order = Order.objects.create(user=self.user)
+ OrderItem.objects.create(order=order, product=self.product, quantity=1)
+ response = self.client.get(self.url)
+ self.assertEqual(response.status_code, status.HTTP_200_OK)
+ self.assertEqual(response.data[0]['order_items'][0]['product']['name'], 'Test Product')
diff --git a/app/inventory/urls.py b/app/inventory/urls.py
new file mode 100644
index 0000000..5c9014c
--- /dev/null
+++ b/app/inventory/urls.py
@@ -0,0 +1,26 @@
+from django.urls import path
+from rest_framework_simplejwt.views import TokenRefreshView
+from .views import CustomTokenObtain,UserRegistrationView,ProductView,CategoryView,OrderView
+
+urlpatterns = [
+ # JWT views
+ path("token/", CustomTokenObtain.as_view(), name="token"),
+ path("token/refresh/", TokenRefreshView.as_view(), name="refresh-token"),
+
+ # other views
+ path("register/", UserRegistrationView.as_view(),name='user_register'),
+ #products urls
+ path('inventory/products/',ProductView.as_view(),name='product_list'),# list all products
+ path('inventory/product/create/',ProductView.as_view(),name ='product_list_create'),#Create a new product
+ path('inventory/product/
/',ProductView.as_view()),#detail view of a single product
+ path('inventory/product//update/',ProductView.as_view()),# update a product
+ path('inventory/product//delete/',ProductView.as_view()),#delete a product
+ #category urls
+ path('inventory/categories/',CategoryView.as_view(),name='category_list'),#list all categories
+ path('inventory/category//',CategoryView.as_view()),#list category item
+ path('inventory/category/create/',CategoryView.as_view(),name='category_list_create'),#create a category item
+ #Order view
+ path('inventory/order/create/',OrderView.as_view(), name ='order_list_create'),# create order
+ path('inventory/order-history/',OrderView.as_view()),# all user order history
+ path('inventory/order//history/',OrderView.as_view()),# single user order history
+]
\ No newline at end of file
diff --git a/app/inventory/views.py b/app/inventory/views.py
new file mode 100644
index 0000000..5ce309b
--- /dev/null
+++ b/app/inventory/views.py
@@ -0,0 +1,229 @@
+from django.shortcuts import render
+from rest_framework_simplejwt.serializers import TokenObtainPairSerializer
+from rest_framework_simplejwt.views import TokenObtainPairView
+from rest_framework import generics, status
+from rest_framework_simplejwt.tokens import RefreshToken
+from .custom_auth import EmailNameAuthBackend
+from rest_framework.views import APIView
+from rest_framework.permissions import IsAuthenticated
+from rest_framework.decorators import permission_classes
+from django.db import transaction
+from rest_framework.response import Response
+from rest_framework.permissions import AllowAny
+from django.db.models import Q
+from rest_framework.pagination import PageNumberPagination
+from rest_framework.decorators import api_view
+from django.contrib.auth import authenticate
+from django.contrib.auth import get_user_model
+
+
+#local imports
+from .serializers import UserSerializer,ProductSerializer,\
+ OrderItemSerializer,OrderSerializer,CategorySerializer,OrderHistorySerializer
+from .models import Category, Product,Order,OrderItem
+# Create your views here.
+
+
+User = get_user_model()
+class CustomTokenObtainPairSerializer(TokenObtainPairSerializer):
+ @classmethod
+ def get_token(cls, user):# serialize a JWT token combining user name and email
+ token = super().get_token(user)
+ token["name"] = user.name
+ token["email"] = user.email
+
+ return token
+
+class CustomTokenObtain(TokenObtainPairView):
+ serializer_class = CustomTokenObtainPairSerializer
+ def post(self, request, *args, **kwargs):
+ data = request.data #get the request data and retrieve email/name and password
+ name = data['email']or None
+ password = data['password'] or None
+ user = authenticate(request, email=name , password=password)# try to authenticate with the info
+ if user is not None:# if user is authenticated and not none
+ if user.is_active:
+ refresh = RefreshToken.for_user(user) #get a refresh token
+ token = {
+ 'refresh': str(refresh),
+ 'access': str(refresh.access_token),
+ }
+ return Response(token, status=status.HTTP_200_OK)# respond with the access and refresh token
+ return Response({'error': 'Account disabled!'}, status=status.HTTP_401_UNAUTHORIZED)
+ return Response({'error': 'Invalid login Details'}, status=status.HTTP_401_UNAUTHORIZED)
+
+
+class UserRegistrationView(generics.GenericAPIView):
+ serializer_class = UserSerializer
+ permission_classes =[]
+ def post(self, request,*args,**kwargs):
+ data = request.data.copy()
+ serializer = self.serializer_class(data=data)
+ if serializer.is_valid():
+ serializer = serializer.save()
+
+ data = {'message':f'Account created succesffuly!','data':UserSerializer(serializer).data}
+ return Response(data,status=status.HTTP_200_OK)
+ return Response(serializer.errors,status=status.HTTP_400_BAD_REQUEST)
+
+
+
+class ProductView(APIView):#One View for all CRUD on Product model
+ authentication_classes=[]
+ permission_classes =[AllowAny]
+ serializer_class = ProductSerializer #serializer class to be used all round the ProducView via self
+ model_class = Product #model class to be used all round the ProducView via self
+ def get(self, request, slug=None,*args,**kwargs):
+ search_query = request.query_params.get('search', None)
+ queryset = Product.objects.all()
+ if search_query:
+ queryset = queryset.filter(
+ Q(name__icontains=search_query) |
+ Q(description__icontains=search_query) |
+ Q(category__name__icontains=search_query)
+ )
+ paginator = PageNumberPagination()
+ paginator.page_size = 1
+ paginated_queryset = paginator.paginate_queryset(queryset, request)
+ serializer = self.serializer_class(paginated_queryset, many=True)
+ return paginator.get_paginated_response(serializer.data)
+ if slug:
+ try:
+ product = self.model_class.objects.get(slug=slug)
+ serializer = self.serializer_class(product,many =False)
+ return Response(serializer.data)
+ except self.model_class.DoesNotExist:
+ return Response({'error':'Object not found!'}, status=status.HTTP_400_BAD_REQUEST)
+ else:
+ products = self.model_class.objects.all()
+ serializer = self.serializer_class(products, many=True)
+ for item in serializer.data:
+ item['category'] = CategorySerializer(Category.objects.get(id = item['category'])).data
+ return Response(serializer.data)
+
+ def post(self, request,*args,**kwargs):
+ data = request.data.copy()
+ category_identifier =request.data.get('category','')
+ category = Category.objects.filter(# get ctegory by Id or slug
+ Q(slug__icontains=category_identifier) |Q(id__icontains=category_identifier))
+ data['category'] = category[0].id
+ serializer = self.serializer_class(data=data)
+ if serializer.is_valid():
+ serializer.save()
+ return Response(serializer.data, status=status.HTTP_201_CREATED)
+ return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
+
+ def put(self, request, slug):
+ try:
+ product = self.model_class.objects.get(slug=slug)
+ except self.model_class.DoesNotExist:# object not found
+ return Response({'error':'Object not found!'}, status=status.HTTP_400_BAD_REQUEST)
+ serializer = self.serializer_class(product, data=request.data)
+ if serializer.is_valid():
+ serializer.save()
+ return Response(serializer.data,status=status.HTTP_200_OK)
+ return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
+
+ def delete(self, request, slug):
+ try:
+ product = self.model_class.objects.get(slug=slug)
+ except self.model_class.DoesNotExist:
+ return Response({'error':'Object not found!'}, status=status.HTTP_400_BAD_REQUEST)
+ else:
+ product.delete()
+ return Response(status=status.HTTP_204_NO_CONTENT)
+
+
+
+
+class CategoryView(APIView):
+ authentication_classes=[]
+ permission_classes =[]
+ serializer_class = CategorySerializer
+ model_class = Category
+ def get(self, request, slug=None,*args,**kwargs):
+ if slug:
+ try:
+ category = self.model_class.objects.get(slug=slug)
+ serializer = self.serializer_class(category,many =False)
+ return Response(serializer.data,status=status.HTTP_200_OK)
+ except self.model_class.DoesNotExist:
+ return Response({'error':'Object not found!'}, status=status.HTTP_400_BAD_REQUEST)
+ categories = self.model_class.objects.all()
+ serializer = self.serializer_class(categories, many=True)
+ return Response(serializer.data, status=status.HTTP_200_OK)
+ def post(self, request,*args,**kwargs):
+ data = request.data.copy()
+ serializer = self.serializer_class(data=data)
+ if serializer.is_valid():
+ serializer.save()
+ return Response(serializer.data, status=status.HTTP_201_CREATED)
+ return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
+
+
+class OrderView(APIView):
+ permission_classes =[IsAuthenticated]
+ serializer_class = OrderSerializer
+ model_class = Order
+ def get(self, request, slug=None,*args,**kwargs):
+ if slug:
+ try:
+ order = self.model_class.objects.get(slug=slug,user = request.user)
+ serializer = OrderHistorySerializer(order,many =False)
+ return Response(serializer.data)
+ except self.model_class.DoesNotExist:
+ return Response({'error':'Object not found!'}, status=status.HTTP_400_BAD_REQUEST)
+ orders = Order.objects.filter(user=request.user)
+ serializer = OrderHistorySerializer(orders, many=True)
+ return Response(serializer.data)
+
+ @transaction.atomic #use atomic to rolback if need be
+ def post(self, request, *args, **kwargs):
+ data = request.data.copy()
+ data['user'] = request.user.id
+
+ serializer = self.serializer_class(data=data)
+ if serializer.is_valid():
+ order = serializer.save()
+ products_data = data.get('products', [])
+
+ for item_data in products_data:
+ try:
+ product = Product.objects.get(slug=item_data['slug'])
+ quantity = item_data.get('quantity', 1)
+ OrderItem.objects.create(order=order, product=product, quantity=quantity)
+ except Product.DoesNotExist:
+ transaction.set_rollback(True)# rollback actions on db
+ return Response({'error': f"Product with slug {item_data['slug']} not found"}, status=status.HTTP_400_BAD_REQUEST)
+
+ return Response(serializer.data, status=status.HTTP_201_CREATED)
+
+ return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
+
+
+@api_view(['GET'])
+@permission_classes([AllowAny])
+def endpoints(request):# endpoint to keep all out endpoint at the root url for easy access and development
+ data = [
+
+ "api/v1/register/",
+ "api/v1/token/",
+ "api/v1/token/refresh/",
+ #products urls
+ 'api/v1/inventory/products/',
+ 'api/v1/inventory/product/create/',
+ 'api/v1/inventory/product//',
+ 'api/v1/inventory/product//update/',
+ 'api/v1/inventory/product//delete/',
+ #category urls
+ 'api/v1/inventory/categories/',
+ 'api/v1/inventory/category//',
+ 'api/v1/inventory/category/create/',
+ #Order urls
+ 'api/v1/inventory/order/create/',
+ 'api/v1/inventory/order-history/',
+ 'api/v1/inventory/order//history/',
+]
+
+
+ return Response(data)
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
index 843358c..2d0bc5e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,4 +1,11 @@
-Django>=3.0,<4.0.2
+asgiref==3.8.1
+Django==4.0.1
djangorestframework==3.13.1
-
-# flake8>=3.6.0,<3.7.0
\ No newline at end of file
+djangorestframework-simplejwt==5.3.1
+PyJWT==2.8.0
+python-decouple==3.8
+pytz==2024.1
+six==1.16.0
+sqlparse==0.5.1
+typing_extensions==4.12.2
+tzdata==2024.1