# app/routes/vendor_pages.py """ Vendor HTML page routes using Jinja2 templates. These routes serve HTML pages for vendor-facing interfaces. Follows the same minimal server-side rendering pattern as admin routes. All routes except /login require vendor authentication. Authentication failures redirect to /vendor/{vendor_code}/login. Routes: - GET /vendor/{vendor_code}/ → Redirect to login or dashboard - GET /vendor/{vendor_code}/login → Vendor login page - GET /vendor/{vendor_code}/dashboard → Vendor dashboard - GET /vendor/{vendor_code}/products → Product management - GET /vendor/{vendor_code}/orders → Order management - GET /vendor/{vendor_code}/customers → Customer management - GET /vendor/{vendor_code}/inventory → Inventory management - GET /vendor/{vendor_code}/marketplace → Marketplace imports - GET /vendor/{vendor_code}/team → Team management - GET /vendor/{vendor_code}/settings → Vendor settings """ from fastapi import APIRouter, Request, Depends, Path from fastapi.responses import HTMLResponse, RedirectResponse from fastapi.templating import Jinja2Templates from app.api.deps import get_current_vendor_from_cookie_or_header from models.database.user import User router = APIRouter() templates = Jinja2Templates(directory="app/templates") # ============================================================================ # PUBLIC ROUTES (No Authentication Required) # ============================================================================ @router.get("/{vendor_code}", response_class=RedirectResponse, include_in_schema=False) async def vendor_root_no_slash(vendor_code: str = Path(..., description="Vendor code")): """ Redirect /vendor/{code} (no trailing slash) to login page. Handles requests without trailing slash. """ return RedirectResponse(url=f"/vendor/{vendor_code}/login", status_code=302) @router.get("/{vendor_code}/", response_class=RedirectResponse, include_in_schema=False) async def vendor_root(vendor_code: str = Path(..., description="Vendor code")): """ Redirect /vendor/{code}/ to login page. Simple approach - let login page handle authenticated redirects. """ return RedirectResponse(url=f"/vendor/{vendor_code}/login", status_code=302) @router.get("/{vendor_code}/login", response_class=HTMLResponse, include_in_schema=False) async def vendor_login_page( request: Request, vendor_code: str = Path(..., description="Vendor code") ): """ Render vendor login page. No authentication required. JavaScript will: - Load vendor info via API - Handle login form submission - Redirect to dashboard on success """ return templates.TemplateResponse( "vendor/login.html", { "request": request, "vendor_code": vendor_code, } ) # ============================================================================ # AUTHENTICATED ROUTES (Vendor Users Only) # ============================================================================ @router.get("/{vendor_code}/dashboard", response_class=HTMLResponse, include_in_schema=False) async def vendor_dashboard_page( request: Request, vendor_code: str = Path(..., description="Vendor code"), current_user: User = Depends(get_current_vendor_from_cookie_or_header) ): """ Render vendor dashboard. JavaScript will: - Load vendor info via API - Load dashboard stats via API - Load recent orders via API - Handle all interactivity """ return templates.TemplateResponse( "vendor/admin/dashboard.html", { "request": request, "user": current_user, "vendor_code": vendor_code, } ) # ============================================================================ # PRODUCT MANAGEMENT # ============================================================================ @router.get("/{vendor_code}/products", response_class=HTMLResponse, include_in_schema=False) async def vendor_products_page( request: Request, vendor_code: str = Path(..., description="Vendor code"), current_user: User = Depends(get_current_vendor_from_cookie_or_header) ): """ Render products management page. JavaScript loads product list via API. """ return templates.TemplateResponse( "vendor/admin/products.html", { "request": request, "user": current_user, "vendor_code": vendor_code, } ) # ============================================================================ # ORDER MANAGEMENT # ============================================================================ @router.get("/{vendor_code}/orders", response_class=HTMLResponse, include_in_schema=False) async def vendor_orders_page( request: Request, vendor_code: str = Path(..., description="Vendor code"), current_user: User = Depends(get_current_vendor_from_cookie_or_header) ): """ Render orders management page. JavaScript loads order list via API. """ return templates.TemplateResponse( "vendor/admin/orders.html", { "request": request, "user": current_user, "vendor_code": vendor_code, } ) # ============================================================================ # CUSTOMER MANAGEMENT # ============================================================================ @router.get("/{vendor_code}/customers", response_class=HTMLResponse, include_in_schema=False) async def vendor_customers_page( request: Request, vendor_code: str = Path(..., description="Vendor code"), current_user: User = Depends(get_current_vendor_from_cookie_or_header) ): """ Render customers management page. JavaScript loads customer list via API. """ return templates.TemplateResponse( "vendor/admin/customers.html", { "request": request, "user": current_user, "vendor_code": vendor_code, } ) # ============================================================================ # INVENTORY MANAGEMENT # ============================================================================ @router.get("/{vendor_code}/inventory", response_class=HTMLResponse, include_in_schema=False) async def vendor_inventory_page( request: Request, vendor_code: str = Path(..., description="Vendor code"), current_user: User = Depends(get_current_vendor_from_cookie_or_header) ): """ Render inventory management page. JavaScript loads inventory data via API. """ return templates.TemplateResponse( "vendor/admin/inventory.html", { "request": request, "user": current_user, "vendor_code": vendor_code, } ) # ============================================================================ # MARKETPLACE IMPORTS # ============================================================================ @router.get("/{vendor_code}/marketplace", response_class=HTMLResponse, include_in_schema=False) async def vendor_marketplace_page( request: Request, vendor_code: str = Path(..., description="Vendor code"), current_user: User = Depends(get_current_vendor_from_cookie_or_header) ): """ Render marketplace import page. JavaScript loads import jobs and products via API. """ return templates.TemplateResponse( "vendor/admin/marketplace.html", { "request": request, "user": current_user, "vendor_code": vendor_code, } ) # ============================================================================ # TEAM MANAGEMENT # ============================================================================ @router.get("/{vendor_code}/team", response_class=HTMLResponse, include_in_schema=False) async def vendor_team_page( request: Request, vendor_code: str = Path(..., description="Vendor code"), current_user: User = Depends(get_current_vendor_from_cookie_or_header) ): """ Render team management page. JavaScript loads team members via API. """ return templates.TemplateResponse( "vendor/admin/team.html", { "request": request, "user": current_user, "vendor_code": vendor_code, } ) # ============================================================================ # SETTINGS # ============================================================================ @router.get("/{vendor_code}/settings", response_class=HTMLResponse, include_in_schema=False) async def vendor_settings_page( request: Request, vendor_code: str = Path(..., description="Vendor code"), current_user: User = Depends(get_current_vendor_from_cookie_or_header) ): """ Render vendor settings page. JavaScript loads settings via API. """ return templates.TemplateResponse( "vendor/settings.html", { "request": request, "user": current_user, "vendor_code": vendor_code, } )