Multitenant implementation with custom Domain, theme per vendor

app/api/v1/admin/__init__.py

@@ -5,6 +5,7 @@ Admin API router aggregation.
 This module combines all admin-related API endpoints:
 - Authentication (login/logout)
 - Vendor management (CRUD, bulk operations)
+- Vendor domains management (custom domains, DNS verification)
 - User management (status, roles)
 - Dashboard and statistics
 - Marketplace monitoring
@@ -20,6 +21,7 @@ from fastapi import APIRouter
 from . import (
     auth,
     vendors,
+    vendor_domains,
     users,
     dashboard,
     marketplace,
@@ -34,28 +36,56 @@ from . import (
 router = APIRouter()
 
 
+# ============================================================================
+# Authentication & Authorization
+# ============================================================================
+
 # Include authentication endpoints
 router.include_router(auth.router, tags=["admin-auth"])
 
+
+# ============================================================================
+# Vendor Management
+# ============================================================================
+
 # Include vendor management endpoints
 router.include_router(vendors.router, tags=["admin-vendors"])
 
+# Include vendor domains management endpoints
+router.include_router(vendor_domains.router, tags=["admin-vendor-domains"])
+
+
+# ============================================================================
+# User Management
+# ============================================================================
+
 # Include user management endpoints
 router.include_router(users.router, tags=["admin-users"])
 
+
+# ============================================================================
+# Dashboard & Statistics
+# ============================================================================
+
 # Include dashboard and statistics endpoints
 router.include_router(dashboard.router, tags=["admin-dashboard"])
 
+
+# ============================================================================
+# Marketplace & Imports
+# ============================================================================
+
 # Include marketplace monitoring endpoints
 router.include_router(marketplace.router, tags=["admin-marketplace"])
 
-# Include monitoring endpoints (placeholder)
-# router.include_router(monitoring.router, tags=["admin-monitoring"])
 
 # ============================================================================
-# Admin Models Integration
+# Platform Administration
 # ============================================================================
 
+# Include monitoring endpoints (placeholder for future implementation)
+# router.include_router(monitoring.router, tags=["admin-monitoring"])
+
 # Include audit logging endpoints
 router.include_router(audit.router, tags=["admin-audit"])
 
@@ -65,6 +95,7 @@ router.include_router(settings.router, tags=["admin-settings"])
 # Include notifications and alerts endpoints
 router.include_router(notifications.router, tags=["admin-notifications"])
 
+
 # ============================================================================
 # HTML Page Routes (Jinja2 Templates)
 # ============================================================================
@@ -72,5 +103,6 @@ router.include_router(notifications.router, tags=["admin-notifications"])
 # Include HTML page routes (these return rendered templates, not JSON)
 router.include_router(pages.router, tags=["admin-pages"])
 
+
 # Export the router
 __all__ = ["router"]

app/api/v1/admin/pages.py

@@ -16,6 +16,7 @@ Routes:
 - GET /vendors/create → Create vendor form (auth required)
 - GET /vendors/{vendor_code} → Vendor details (auth required)
 - GET /vendors/{vendor_code}/edit → Edit vendor form (auth required)
+- GET /vendors/{vendor_code}/domains → Vendor domains management (auth required)
 - GET /users         → User management page (auth required)
 - GET /imports       → Import history page (auth required)
 - GET /settings      → Settings page (auth required)
@@ -166,6 +167,55 @@ async def admin_vendor_edit_page(
     )
 
 
+# ============================================================================
+# VENDOR DOMAINS ROUTES
+# ============================================================================
+
+@router.get("/vendors/{vendor_code}/domains", response_class=HTMLResponse, include_in_schema=False)
+async def admin_vendor_domains_page(
+        request: Request,
+        vendor_code: str = Path(..., description="Vendor code"),
+        current_user: User = Depends(get_current_admin_user),
+        db: Session = Depends(get_db)
+):
+    """
+    Render vendor domains management page.
+    Shows custom domains, verification status, and DNS configuration.
+    """
+    return templates.TemplateResponse(
+        "admin/vendor-domains.html",
+        {
+            "request": request,
+            "user": current_user,
+            "vendor_code": vendor_code,
+        }
+    )
+
+
+# ============================================================================
+# VENDOR THEMES ROUTES
+# ============================================================================
+
+@router.get("/vendors/{vendor_code}/theme", response_class=HTMLResponse, include_in_schema=False)
+async def admin_vendor_theme_page(
+        request: Request,
+        vendor_code: str = Path(..., description="Vendor code"),
+        current_user: User = Depends(get_current_admin_user),
+        db: Session = Depends(get_db)
+):
+    """
+    Render vendor theme customization page.
+    """
+    return templates.TemplateResponse(
+        "admin/vendor-theme.html",
+        {
+            "request": request,
+            "user": current_user,
+            "vendor_code": vendor_code,
+        }
+    )
+
+
 # ============================================================================
 # USER MANAGEMENT ROUTES
 # ============================================================================
@@ -257,6 +307,7 @@ async def admin_components_page(
         }
     )
 
+
 @router.get("/icons", response_class=HTMLResponse, include_in_schema=False)
 async def admin_icons_page(
     request: Request,
@@ -275,6 +326,7 @@ async def admin_icons_page(
         }
     )
 
+
 @router.get("/testing", response_class=HTMLResponse, include_in_schema=False)
 async def admin_testing_hub(
         request: Request,

app/api/v1/admin/vendor_domains.py

@@ -0,0 +1,328 @@
+# app/api/v1/admin/vendor_domains.py
+"""
+Admin endpoints for managing vendor custom domains.
+
+Follows the architecture pattern:
+- Endpoints only handle HTTP layer
+- Business logic in service layer
+- Proper exception handling
+- Pydantic schemas for validation
+"""
+
+import logging
+from typing import List
+
+from fastapi import APIRouter, Depends, Path, Body, Query
+from sqlalchemy.orm import Session
+
+from app.api.deps import get_current_admin_user
+from app.core.database import get_db
+from app.services.vendor_domain_service import vendor_domain_service
+from app.exceptions import VendorNotFoundException
+from models.schema.vendor_domain import (
+    VendorDomainCreate,
+    VendorDomainUpdate,
+    VendorDomainResponse,
+    VendorDomainListResponse,
+    DomainVerificationInstructions,
+    DomainVerificationResponse,
+    DomainDeletionResponse,
+)
+from models.database.user import User
+from models.database.vendor import Vendor
+
+router = APIRouter(prefix="/vendors")
+logger = logging.getLogger(__name__)
+
+
+def _get_vendor_by_id(db: Session, vendor_id: int) -> Vendor:
+    """
+    Helper to get vendor by ID.
+
+    Args:
+        db: Database session
+        vendor_id: Vendor ID
+
+    Returns:
+        Vendor object
+
+    Raises:
+        VendorNotFoundException: If vendor not found
+    """
+    vendor = db.query(Vendor).filter(Vendor.id == vendor_id).first()
+    if not vendor:
+        raise VendorNotFoundException(str(vendor_id), identifier_type="id")
+    return vendor
+
+
+@router.post("/{vendor_id}/domains", response_model=VendorDomainResponse)
+def add_vendor_domain(
+        vendor_id: int = Path(..., description="Vendor ID", gt=0),
+        domain_data: VendorDomainCreate = Body(...),
+        db: Session = Depends(get_db),
+        current_admin: User = Depends(get_current_admin_user),
+):
+    """
+    Add a custom domain to vendor (Admin only).
+
+    This endpoint:
+    1. Validates the domain format
+    2. Checks if domain is already registered
+    3. Generates verification token
+    4. Creates domain record (unverified, inactive)
+    5. Returns domain with verification instructions
+
+    **Domain Examples:**
+    - myshop.com
+    - shop.mybrand.com
+    - customstore.net
+
+    **Next Steps:**
+    1. Vendor adds DNS TXT record
+    2. Admin clicks "Verify Domain" to confirm ownership
+    3. Once verified, domain can be activated
+
+    **Raises:**
+    - 404: Vendor not found
+    - 409: Domain already registered
+    - 422: Invalid domain format or reserved subdomain
+    """
+    domain = vendor_domain_service.add_domain(
+        db=db,
+        vendor_id=vendor_id,
+        domain_data=domain_data
+    )
+
+    return VendorDomainResponse(
+        id=domain.id,
+        vendor_id=domain.vendor_id,
+        domain=domain.domain,
+        is_primary=domain.is_primary,
+        is_active=domain.is_active,
+        is_verified=domain.is_verified,
+        ssl_status=domain.ssl_status,
+        verification_token=domain.verification_token,
+        verified_at=domain.verified_at,
+        ssl_verified_at=domain.ssl_verified_at,
+        created_at=domain.created_at,
+        updated_at=domain.updated_at,
+    )
+
+
+@router.get("/{vendor_id}/domains", response_model=VendorDomainListResponse)
+def list_vendor_domains(
+        vendor_id: int = Path(..., description="Vendor ID", gt=0),
+        db: Session = Depends(get_db),
+        current_admin: User = Depends(get_current_admin_user),
+):
+    """
+    List all domains for a vendor (Admin only).
+
+    Returns domains ordered by:
+    1. Primary domains first
+    2. Creation date (newest first)
+
+    **Raises:**
+    - 404: Vendor not found
+    """
+    # Verify vendor exists
+    _get_vendor_by_id(db, vendor_id)
+
+    domains = vendor_domain_service.get_vendor_domains(db, vendor_id)
+
+    return VendorDomainListResponse(
+        domains=[
+            VendorDomainResponse(
+                id=d.id,
+                vendor_id=d.vendor_id,
+                domain=d.domain,
+                is_primary=d.is_primary,
+                is_active=d.is_active,
+                is_verified=d.is_verified,
+                ssl_status=d.ssl_status,
+                verification_token=d.verification_token if not d.is_verified else None,
+                verified_at=d.verified_at,
+                ssl_verified_at=d.ssl_verified_at,
+                created_at=d.created_at,
+                updated_at=d.updated_at,
+            )
+            for d in domains
+        ],
+        total=len(domains)
+    )
+
+
+@router.get("/domains/{domain_id}", response_model=VendorDomainResponse)
+def get_domain_details(
+        domain_id: int = Path(..., description="Domain ID", gt=0),
+        db: Session = Depends(get_db),
+        current_admin: User = Depends(get_current_admin_user),
+):
+    """
+    Get detailed information about a specific domain (Admin only).
+
+    **Raises:**
+    - 404: Domain not found
+    """
+    domain = vendor_domain_service.get_domain_by_id(db, domain_id)
+
+    return VendorDomainResponse(
+        id=domain.id,
+        vendor_id=domain.vendor_id,
+        domain=domain.domain,
+        is_primary=domain.is_primary,
+        is_active=domain.is_active,
+        is_verified=domain.is_verified,
+        ssl_status=domain.ssl_status,
+        verification_token=domain.verification_token if not domain.is_verified else None,
+        verified_at=domain.verified_at,
+        ssl_verified_at=domain.ssl_verified_at,
+        created_at=domain.created_at,
+        updated_at=domain.updated_at,
+    )
+
+
+@router.put("/domains/{domain_id}", response_model=VendorDomainResponse)
+def update_vendor_domain(
+        domain_id: int = Path(..., description="Domain ID", gt=0),
+        domain_update: VendorDomainUpdate = Body(...),
+        db: Session = Depends(get_db),
+        current_admin: User = Depends(get_current_admin_user),
+):
+    """
+    Update domain settings (Admin only).
+
+    **Can update:**
+    - `is_primary`: Set as primary domain for vendor
+    - `is_active`: Activate or deactivate domain
+
+    **Important:**
+    - Cannot activate unverified domains
+    - Setting a domain as primary will unset other primary domains
+    - Cannot modify domain name (delete and recreate instead)
+
+    **Raises:**
+    - 404: Domain not found
+    - 400: Cannot activate unverified domain
+    """
+    domain = vendor_domain_service.update_domain(
+        db=db,
+        domain_id=domain_id,
+        domain_update=domain_update
+    )
+
+    return VendorDomainResponse(
+        id=domain.id,
+        vendor_id=domain.vendor_id,
+        domain=domain.domain,
+        is_primary=domain.is_primary,
+        is_active=domain.is_active,
+        is_verified=domain.is_verified,
+        ssl_status=domain.ssl_status,
+        verification_token=None,  # Don't expose token after updates
+        verified_at=domain.verified_at,
+        ssl_verified_at=domain.ssl_verified_at,
+        created_at=domain.created_at,
+        updated_at=domain.updated_at,
+    )
+
+
+@router.delete("/domains/{domain_id}", response_model=DomainDeletionResponse)
+def delete_vendor_domain(
+        domain_id: int = Path(..., description="Domain ID", gt=0),
+        db: Session = Depends(get_db),
+        current_admin: User = Depends(get_current_admin_user),
+):
+    """
+    Delete a custom domain (Admin only).
+
+    **Warning:** This is permanent and cannot be undone.
+
+    **Raises:**
+    - 404: Domain not found
+    """
+    # Get domain details before deletion
+    domain = vendor_domain_service.get_domain_by_id(db, domain_id)
+    vendor_id = domain.vendor_id
+    domain_name = domain.domain
+
+    # Delete domain
+    message = vendor_domain_service.delete_domain(db, domain_id)
+
+    return DomainDeletionResponse(
+        message=message,
+        domain=domain_name,
+        vendor_id=vendor_id
+    )
+
+
+@router.post("/domains/{domain_id}/verify", response_model=DomainVerificationResponse)
+def verify_domain_ownership(
+        domain_id: int = Path(..., description="Domain ID", gt=0),
+        db: Session = Depends(get_db),
+        current_admin: User = Depends(get_current_admin_user),
+):
+    """
+    Verify domain ownership via DNS TXT record (Admin only).
+
+    **Verification Process:**
+    1. Queries DNS for TXT record: `_letzshop-verify.{domain}`
+    2. Checks if verification token matches
+    3. If found, marks domain as verified
+
+    **Requirements:**
+    - Vendor must have added TXT record to their DNS
+    - DNS propagation may take 5-15 minutes
+    - Record format: `_letzshop-verify.domain.com` TXT `{token}`
+
+    **After verification:**
+    - Domain can be activated
+    - Domain will be available for routing
+
+    **Raises:**
+    - 404: Domain not found
+    - 400: Already verified, or verification failed
+    - 502: DNS query failed
+    """
+    domain, message = vendor_domain_service.verify_domain(db, domain_id)
+
+    return DomainVerificationResponse(
+        message=message,
+        domain=domain.domain,
+        verified_at=domain.verified_at,
+        is_verified=domain.is_verified
+    )
+
+
+@router.get("/domains/{domain_id}/verification-instructions", response_model=DomainVerificationInstructions)
+def get_domain_verification_instructions(
+        domain_id: int = Path(..., description="Domain ID", gt=0),
+        db: Session = Depends(get_db),
+        current_admin: User = Depends(get_current_admin_user),
+):
+    """
+    Get DNS verification instructions for domain (Admin only).
+
+    Returns step-by-step instructions for:
+    1. Where to add DNS records
+    2. What TXT record to create
+    3. Links to common registrars
+    4. Verification token
+
+    **Use this endpoint to:**
+    - Show vendors how to verify their domain
+    - Get the exact TXT record values
+    - Access registrar links
+
+    **Raises:**
+    - 404: Domain not found
+    """
+    instructions = vendor_domain_service.get_verification_instructions(db, domain_id)
+
+    return DomainVerificationInstructions(
+        domain=instructions["domain"],
+        verification_token=instructions["verification_token"],
+        instructions=instructions["instructions"],
+        txt_record=instructions["txt_record"],
+        common_registrars=instructions["common_registrars"]
+    )