Samir Boulahtit
9a0dd84035
The require_module_access dependency was using path-based detection to determine admin vs vendor authentication, which failed for API routes (/api/v1/admin/*) because it only checked for /admin/*. Changes: - Make frontend_type parameter mandatory (was optional with fallback) - Remove path-based detection logic from require_module_access - Update all 33 module route files to pass explicit FrontendType: - 15 admin routes use FrontendType.ADMIN - 18 vendor routes use FrontendType.VENDOR This ensures authentication method is explicitly declared at route definition time, making it independent of URL structure and future-proof for API version changes. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
54 lines
1.4 KiB
Python
54 lines
1.4 KiB
Python
# app/modules/payments/routes/api/admin.py
|
|
"""
|
|
Admin routes for payments module.
|
|
|
|
Provides routes for:
|
|
- Payment gateway configuration
|
|
- Transaction monitoring
|
|
- Refund management
|
|
"""
|
|
|
|
import logging
|
|
|
|
from fastapi import APIRouter, Depends
|
|
|
|
from app.api.deps import require_module_access
|
|
from app.modules.enums import FrontendType
|
|
|
|
admin_router = APIRouter(
|
|
prefix="/payments",
|
|
dependencies=[Depends(require_module_access("payments", FrontendType.ADMIN))],
|
|
)
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
@admin_router.get("/gateways")
|
|
async def list_gateways():
|
|
"""List configured payment gateways."""
|
|
# TODO: Implement gateway listing
|
|
return {
|
|
"gateways": [
|
|
{"code": "stripe", "name": "Stripe", "enabled": True},
|
|
{"code": "paypal", "name": "PayPal", "enabled": False},
|
|
{"code": "bank_transfer", "name": "Bank Transfer", "enabled": True},
|
|
]
|
|
}
|
|
|
|
|
|
@admin_router.get("/transactions")
|
|
async def list_transactions():
|
|
"""List recent transactions across all gateways."""
|
|
# TODO: Implement transaction listing
|
|
return {"transactions": [], "total": 0}
|
|
|
|
|
|
@admin_router.post("/refunds/{transaction_id}")
|
|
async def issue_refund(transaction_id: str, amount: float | None = None):
|
|
"""Issue a refund for a transaction."""
|
|
# TODO: Implement refund logic
|
|
return {
|
|
"status": "pending",
|
|
"transaction_id": transaction_id,
|
|
"refund_amount": amount,
|
|
}
|