# app/modules/loyalty/routes/api/platform.py """ Loyalty module platform routes. Platform endpoints for: - Customer enrollment (by store code) - Apple Wallet pass download - Apple Web Service endpoints for device registration/updates """ import logging from datetime import datetime from fastapi import APIRouter, Depends, Header, HTTPException, Path, Response from sqlalchemy.orm import Session from app.core.database import get_db from app.modules.loyalty.exceptions import ( LoyaltyException, ) from app.modules.loyalty.models import LoyaltyCard from app.modules.loyalty.services import ( apple_wallet_service, program_service, ) logger = logging.getLogger(__name__) # Platform router (no auth required for some endpoints) platform_router = APIRouter(prefix="/loyalty") # ============================================================================= # Enrollment # ============================================================================= @platform_router.get("/programs/{store_code}") def get_program_by_store_code( store_code: str = Path(..., min_length=1, max_length=50), db: Session = Depends(get_db), ): """Get loyalty program info by store code (for enrollment page).""" from app.modules.tenancy.models import Store # Find store by code (store_code or subdomain) store = ( db.query(Store) .filter( (Store.store_code == store_code) | (Store.subdomain == store_code) ) .first() ) if not store: raise HTTPException(status_code=404, detail="Store not found") # Get program program = program_service.get_active_program_by_store(db, store.id) if not program: raise HTTPException(status_code=404, detail="No active loyalty program") return { "store_name": store.name, "store_code": store.store_code, "program": { "id": program.id, "type": program.loyalty_type, "name": program.display_name, "card_color": program.card_color, "logo_url": program.logo_url, "stamps_target": program.stamps_target if program.is_stamps_enabled else None, "stamps_reward": program.stamps_reward_description if program.is_stamps_enabled else None, "points_per_euro": program.points_per_euro if program.is_points_enabled else None, "terms_text": program.terms_text, "privacy_url": program.privacy_url, }, } # ============================================================================= # Apple Wallet Pass Download # ============================================================================= @platform_router.get("/passes/apple/{serial_number}.pkpass") def download_apple_pass( serial_number: str = Path(...), db: Session = Depends(get_db), ): """Download Apple Wallet pass for a card.""" # Find card by serial number card = ( db.query(LoyaltyCard) .filter(LoyaltyCard.apple_serial_number == serial_number) .first() ) if not card: raise HTTPException(status_code=404, detail="Pass not found") try: pass_data = apple_wallet_service.generate_pass(db, card) except LoyaltyException as e: logger.error(f"Failed to generate Apple pass for card {card.id}: {e}") raise HTTPException(status_code=500, detail="Failed to generate pass") return Response( content=pass_data, media_type="application/vnd.apple.pkpass", headers={ "Content-Disposition": f'attachment; filename="{serial_number}.pkpass"', }, ) # ============================================================================= # Apple Web Service Endpoints # (Required for Apple Wallet to register devices and get updates) # ============================================================================= @platform_router.post("/apple/v1/devices/{device_id}/registrations/{pass_type_id}/{serial_number}") def register_device( device_id: str = Path(...), pass_type_id: str = Path(...), serial_number: str = Path(...), authorization: str | None = Header(None), db: Session = Depends(get_db), ): """ Register a device for push notifications. Called by Apple when user adds pass to wallet. """ # Validate authorization token auth_token = None if authorization and authorization.startswith("ApplePass "): auth_token = authorization.split(" ", 1)[1] # Find card card = ( db.query(LoyaltyCard) .filter(LoyaltyCard.apple_serial_number == serial_number) .first() ) if not card: raise HTTPException(status_code=404) # Verify auth token if not auth_token or auth_token != card.apple_auth_token: raise HTTPException(status_code=401) # Get push token from request body # Note: In real implementation, parse the JSON body for pushToken # For now, use device_id as a placeholder try: apple_wallet_service.register_device(db, card, device_id, device_id) return Response(status_code=201) except Exception as e: logger.error(f"Failed to register device: {e}") raise HTTPException(status_code=500) @platform_router.delete("/apple/v1/devices/{device_id}/registrations/{pass_type_id}/{serial_number}") def unregister_device( device_id: str = Path(...), pass_type_id: str = Path(...), serial_number: str = Path(...), authorization: str | None = Header(None), db: Session = Depends(get_db), ): """ Unregister a device. Called by Apple when user removes pass from wallet. """ # Validate authorization token auth_token = None if authorization and authorization.startswith("ApplePass "): auth_token = authorization.split(" ", 1)[1] # Find card card = ( db.query(LoyaltyCard) .filter(LoyaltyCard.apple_serial_number == serial_number) .first() ) if not card: raise HTTPException(status_code=404) # Verify auth token if not auth_token or auth_token != card.apple_auth_token: raise HTTPException(status_code=401) try: apple_wallet_service.unregister_device(db, card, device_id) return Response(status_code=200) except Exception as e: logger.error(f"Failed to unregister device: {e}") raise HTTPException(status_code=500) @platform_router.get("/apple/v1/devices/{device_id}/registrations/{pass_type_id}") def get_serial_numbers( device_id: str = Path(...), pass_type_id: str = Path(...), passesUpdatedSince: str | None = None, db: Session = Depends(get_db), ): """ Get list of pass serial numbers to update. Called by Apple to check for updated passes. """ from app.modules.loyalty.models import AppleDeviceRegistration # Find all cards registered to this device registrations = ( db.query(AppleDeviceRegistration) .filter(AppleDeviceRegistration.device_library_identifier == device_id) .all() ) if not registrations: return Response(status_code=204) # Get cards that have been updated since the given timestamp card_ids = [r.card_id for r in registrations] query = db.query(LoyaltyCard).filter(LoyaltyCard.id.in_(card_ids)) if passesUpdatedSince: try: since = datetime.fromisoformat(passesUpdatedSince.replace("Z", "+00:00")) query = query.filter(LoyaltyCard.updated_at > since) except ValueError: pass cards = query.all() if not cards: return Response(status_code=204) # Return serial numbers serial_numbers = [card.apple_serial_number for card in cards if card.apple_serial_number] last_updated = max(card.updated_at for card in cards) return { "serialNumbers": serial_numbers, "lastUpdated": last_updated.isoformat(), } @platform_router.get("/apple/v1/passes/{pass_type_id}/{serial_number}") def get_latest_pass( pass_type_id: str = Path(...), serial_number: str = Path(...), authorization: str | None = Header(None), db: Session = Depends(get_db), ): """ Get the latest version of a pass. Called by Apple to fetch updated pass data. """ # Validate authorization token auth_token = None if authorization and authorization.startswith("ApplePass "): auth_token = authorization.split(" ", 1)[1] # Find card card = ( db.query(LoyaltyCard) .filter(LoyaltyCard.apple_serial_number == serial_number) .first() ) if not card: raise HTTPException(status_code=404) # Verify auth token if not auth_token or auth_token != card.apple_auth_token: raise HTTPException(status_code=401) try: pass_data = apple_wallet_service.generate_pass(db, card) except LoyaltyException as e: logger.error(f"Failed to generate Apple pass for card {card.id}: {e}") raise HTTPException(status_code=500, detail="Failed to generate pass") return Response( content=pass_data, media_type="application/vnd.apple.pkpass", headers={ "Last-Modified": card.updated_at.strftime("%a, %d %b %Y %H:%M:%S GMT"), }, ) @platform_router.post("/apple/v1/log") def log_errors(): """ Receive error logs from Apple. Apple sends error logs here when there are issues with passes. """ # Just acknowledge - in production you'd log these return Response(status_code=200)