package photos import ( "io" "log/slog" "net/http" "github.com/go-chi/chi/v5" "github.com/ultisuite/ulti-backend/internal/api/apiresponse" "github.com/ultisuite/ulti-backend/internal/api/apivalidate" "github.com/ultisuite/ulti-backend/internal/api/middleware" "github.com/ultisuite/ulti-backend/internal/api/query" photospkg "github.com/ultisuite/ulti-backend/internal/photos" "github.com/ultisuite/ulti-backend/internal/permission" ) type Handler struct { svc *Service logger *slog.Logger } func NewHandler(client *photospkg.Client) *Handler { return &Handler{ svc: NewService(client), logger: slog.Default().With("component", "photos-api"), } } func (h *Handler) Routes() chi.Router { r := chi.NewRouter() read := middleware.RequirePermission(permission.ResourcePhotos, permission.LevelRead) write := middleware.RequirePermission(permission.ResourcePhotos, permission.LevelWrite) r.With(read).Get("/assets", h.ListAssets) r.With(read).Get("/assets/{assetID}/thumbnail", h.Thumbnail) r.With(read).Get("/albums", h.ListAlbums) r.With(write).Post("/assets", h.Upload) r.With(write).Delete("/assets/{assetID}", h.DeleteAsset) return r } func (h *Handler) ListAssets(w http.ResponseWriter, r *http.Request) { claims := middleware.ClaimsFromContext(r.Context()) params, err := query.ParseListRequest(r) if err != nil { apivalidate.WriteQueryError(w, r, err) return } result, err := h.svc.ListAssets(r.Context(), claims.Sub, params) if err != nil { h.logger.Error("list assets", "error", err) apivalidate.WriteInternal(w, r) return } apiresponse.WriteJSON(w, http.StatusOK, result) } func (h *Handler) Upload(w http.ResponseWriter, r *http.Request) { claims := middleware.ClaimsFromContext(r.Context()) id, err := h.svc.UploadAsset(r.Context(), claims.Sub, r.Body, r.Header.Get("Content-Type")) if err != nil { h.logger.Error("upload asset", "error", err) apivalidate.WriteInternal(w, r) return } apiresponse.WriteJSON(w, http.StatusCreated, map[string]string{"id": id}) } func (h *Handler) Thumbnail(w http.ResponseWriter, r *http.Request) { claims := middleware.ClaimsFromContext(r.Context()) assetID := chi.URLParam(r, "assetID") if verr := validateAssetID(assetID); verr != nil { apivalidate.WriteValidationError(w, r, verr) return } body, ct, err := h.svc.GetAssetThumbnail(r.Context(), claims.Sub, assetID) if err != nil { apivalidate.WriteNotFound(w, r, "not found") return } defer body.Close() w.Header().Set("Content-Type", ct) io.Copy(w, body) } func (h *Handler) DeleteAsset(w http.ResponseWriter, r *http.Request) { claims := middleware.ClaimsFromContext(r.Context()) assetID := chi.URLParam(r, "assetID") if verr := validateAssetID(assetID); verr != nil { apivalidate.WriteValidationError(w, r, verr) return } if err := h.svc.DeleteAsset(r.Context(), claims.Sub, assetID); err != nil { h.logger.Error("delete asset", "error", err) apivalidate.WriteInternal(w, r) return } w.WriteHeader(http.StatusNoContent) } func (h *Handler) ListAlbums(w http.ResponseWriter, r *http.Request) { claims := middleware.ClaimsFromContext(r.Context()) params, err := query.ParseListRequest(r) if err != nil { apivalidate.WriteQueryError(w, r, err) return } result, err := h.svc.ListAlbums(r.Context(), claims.Sub, params) if err != nil { h.logger.Error("list albums", "error", err) apivalidate.WriteInternal(w, r) return } apiresponse.WriteJSON(w, http.StatusOK, result) }