Implement basic aircraft management

api/routes/aircraft.py

@@ -0,0 +1,117 @@
+import logging
+
+from fastapi import APIRouter, Depends, HTTPException
+
+from app.deps import get_current_user, admin_required
+from database import aircraft as db
+from schemas.aircraft import AircraftDisplaySchema, AircraftCreateSchema
+from schemas.user import UserDisplaySchema, AuthLevel
+
+router = APIRouter()
+
+logger = logging.getLogger("aircraft")
+
+
+@router.get('/', summary="Get aircraft created by the currently logged-in user", status_code=200)
+async def get_aircraft(user: UserDisplaySchema = Depends(get_current_user)) -> list[AircraftDisplaySchema]:
+    """
+    Get a list of aircraft created by the currently logged-in user
+
+    :param user: Current user
+    :return: List of aircraft
+    """
+    aircraft = await db.retrieve_aircraft(user.id)
+    return aircraft
+
+
+@router.get('/all', summary="Get all aircraft created by all users", status_code=200,
+            dependencies=[Depends(admin_required)], response_model=list[AircraftDisplaySchema])
+async def get_all_aircraft() -> list[AircraftDisplaySchema]:
+    """
+    Get a list of all aircraft created by any user
+
+    :return: List of aircraft
+    """
+    aircraft = await db.retrieve_aircraft()
+    return aircraft
+
+
+@router.get('/{aircraft_id}', summary="Get details of a given aircraft", response_model=AircraftDisplaySchema,
+            status_code=200)
+async def get_aircraft_by_id(aircraft_id: str,
+                             user: UserDisplaySchema = Depends(get_current_user)) -> AircraftDisplaySchema:
+    """
+    Get all details of a given aircraft
+
+    :param aircraft_id: ID of requested aircraft
+    :param user: Currently logged-in user
+    :return: Aircraft details
+    """
+    aircraft = await db.retrieve_aircraft_by_id(aircraft_id)
+    if str(aircraft.user) != user.id and AuthLevel(user.level) != AuthLevel.ADMIN:
+        logger.info("Attempted access to unauthorized aircraft by %s", user.username)
+        raise HTTPException(403, "Unauthorized access")
+
+    return aircraft
+
+
+@router.post('/', summary="Add an aircraft", status_code=200)
+async def add_aircraft(aircraft_body: AircraftCreateSchema,
+                       user: UserDisplaySchema = Depends(get_current_user)) -> dict:
+    """
+    Add an aircraft to the database
+
+    :param aircraft_body: Information associated with new aircraft
+    :param user: Currently logged-in user
+    :return: Error message if request invalid, else ID of newly created aircraft
+    """
+
+    aircraft = await db.insert_aircraft(aircraft_body, user.id)
+
+    return {"id": str(aircraft)}
+
+
+@router.put('/{aircraft_id}', summary="Update the given aircraft with new information", status_code=200)
+async def update_aircraft(aircraft_id: str, aircraft_body: AircraftCreateSchema,
+                          user: UserDisplaySchema = Depends(get_current_user)) -> dict:
+    """
+    Update the given aircraft with new information
+
+    :param aircraft_id: ID of aircraft to update
+    :param aircraft_body: New aircraft information to update with
+    :param user: Currently logged-in user
+    :return: Updated aircraft
+    """
+    aircraft = await get_aircraft_by_id(aircraft_id, user)
+    if aircraft is None:
+        raise HTTPException(404, "Aircraft not found")
+
+    if str(aircraft.user) != user.id and AuthLevel(user.level) != AuthLevel.ADMIN:
+        logger.info("Attempted access to unauthorized aircraft by %s", user.username)
+        raise HTTPException(403, "Unauthorized access")
+
+    updated_aircraft_id = await db.update_aircraft(aircraft_body, aircraft_id)
+
+    return {"id": str(updated_aircraft_id)}
+
+
+@router.delete('/{aircraft_id}', summary="Delete the given aircraft", status_code=200,
+               response_model=AircraftDisplaySchema)
+async def delete_aircraft(aircraft_id: str,
+                          user: UserDisplaySchema = Depends(get_current_user)) -> AircraftDisplaySchema:
+    """
+    Delete the given aircraft
+
+    :param aircraft_id: ID of aircraft to delete
+    :param user: Currently logged-in user
+    :return: 200
+    """
+    aircraft = await get_aircraft_by_id(aircraft_id, user)
+
+    if str(aircraft.user) != user.id and AuthLevel(user.level) != AuthLevel.ADMIN:
+        logger.info("Attempted access to unauthorized aircraft by %s", user.username)
+        raise HTTPException(403, "Unauthorized access")
+
+    deleted = await db.delete_aircraft(aircraft_id)
+
+    return deleted

api/routes/flights.py

@@ -1,14 +1,12 @@
-import json
 import logging
 from datetime import datetime
-from typing import Dict, Union, List
 
 from fastapi import APIRouter, HTTPException, Depends
 
 from app.deps import get_current_user, admin_required
 from database import flights as db
-from schemas.flight import FlightConciseSchema, FlightDisplaySchema, FlightCreateSchema, FlightByDateSchema
 
+from schemas.flight import FlightConciseSchema, FlightDisplaySchema, FlightCreateSchema, FlightByDateSchema
 from schemas.user import UserDisplaySchema, AuthLevel
 
 router = APIRouter()
@@ -27,7 +25,6 @@ async def get_flights(user: UserDisplaySchema = Depends(get_current_user), sort:
     :param order: Order of sorting (asc/desc)
     :return: List of flights
     """
-    # l = get_flight_list(filters=[[{"field": "user", "operator": "eq", "value": user.id}]])
     flights = await db.retrieve_flights(user.id, sort, order)
     return flights