Files
orion/app/modules/tenancy/routes/pages/merchant.py
Samir Boulahtit 93b7279c3a fix(loyalty): guard feature provider usage methods against None db session
Fixes deployment test failures where get_store_usage() and get_merchant_usage()
were called with db=None but attempted to run queries.

Also adds noqa suppressions for pre-existing security validator findings
in dev-toolbar (innerHTML with trusted content) and test fixtures
(hardcoded test passwords).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-11 22:31:34 +01:00

143 lines
3.9 KiB
Python

# app/modules/tenancy/routes/pages/merchant.py
"""
Tenancy Merchant Page Routes (HTML rendering).
Merchant portal pages for tenancy-related views:
- Stores list (merchant's own stores)
- Profile management
Auto-discovered by the route system (merchant.py in routes/pages/).
"""
from fastapi import APIRouter, Depends, Request
from fastapi.responses import HTMLResponse
from sqlalchemy.orm import Session
from app.api.deps import get_current_merchant_from_cookie_or_header, get_db
from app.modules.core.utils.page_context import get_context_for_frontend
from app.modules.enums import FrontendType
from app.modules.tenancy.schemas.auth import UserContext
from app.templates_config import templates
router = APIRouter()
ROUTE_CONFIG = {
"prefix": "/account",
}
@router.get("/stores", response_class=HTMLResponse, include_in_schema=False)
async def merchant_stores_page(
request: Request,
current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
db: Session = Depends(get_db),
):
"""
Render the merchant's stores list page.
Shows all stores owned by the authenticated merchant with
status and basic information.
"""
context = get_context_for_frontend(
FrontendType.MERCHANT,
request,
db,
user=current_user,
)
return templates.TemplateResponse(
"tenancy/merchant/stores.html",
context,
)
@router.get("/stores/{store_id}", response_class=HTMLResponse, include_in_schema=False)
async def merchant_store_detail_page(
request: Request,
store_id: int,
current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
db: Session = Depends(get_db),
):
"""
Render the merchant store detail/edit page.
Shows store details and allows editing merchant-allowed fields.
"""
context = get_context_for_frontend(
FrontendType.MERCHANT,
request,
db,
user=current_user,
)
context["store_id"] = store_id
return templates.TemplateResponse(
"tenancy/merchant/store-detail.html",
context,
)
@router.get("/team", response_class=HTMLResponse, include_in_schema=False)
async def merchant_team_page(
request: Request,
current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
db: Session = Depends(get_db),
):
"""
Render the merchant team management page.
Shows team members across all stores owned by the merchant,
with ability to invite and manage per-store teams.
"""
context = get_context_for_frontend(
FrontendType.MERCHANT,
request,
db,
user=current_user,
)
return templates.TemplateResponse(
"tenancy/merchant/team.html",
context,
)
@router.get("/my-account", response_class=HTMLResponse, include_in_schema=False)
async def merchant_my_account_page(
request: Request,
current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
db: Session = Depends(get_db),
):
"""Render the merchant user's personal account page."""
context = get_context_for_frontend(
FrontendType.MERCHANT,
request,
db,
user=current_user,
)
return templates.TemplateResponse(
"tenancy/merchant/my-account.html",
context,
)
@router.get("/profile", response_class=HTMLResponse, include_in_schema=False)
async def merchant_profile_page(
request: Request,
current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
db: Session = Depends(get_db),
):
"""
Render the merchant profile page.
Shows merchant business details and allows editing contact info,
business address, and tax information.
"""
context = get_context_for_frontend(
FrontendType.MERCHANT,
request,
db,
user=current_user,
)
return templates.TemplateResponse(
"tenancy/merchant/profile.html",
context,
)