Fixes deployment test failures where get_store_usage() and get_merchant_usage() were called with db=None but attempted to run queries. Also adds noqa suppressions for pre-existing security validator findings in dev-toolbar (innerHTML with trusted content) and test fixtures (hardcoded test passwords). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
143 lines
3.9 KiB
Python
143 lines
3.9 KiB
Python
# app/modules/tenancy/routes/pages/merchant.py
|
|
"""
|
|
Tenancy Merchant Page Routes (HTML rendering).
|
|
|
|
Merchant portal pages for tenancy-related views:
|
|
- Stores list (merchant's own stores)
|
|
- Profile management
|
|
|
|
Auto-discovered by the route system (merchant.py in routes/pages/).
|
|
"""
|
|
|
|
from fastapi import APIRouter, Depends, Request
|
|
from fastapi.responses import HTMLResponse
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.api.deps import get_current_merchant_from_cookie_or_header, get_db
|
|
from app.modules.core.utils.page_context import get_context_for_frontend
|
|
from app.modules.enums import FrontendType
|
|
from app.modules.tenancy.schemas.auth import UserContext
|
|
from app.templates_config import templates
|
|
|
|
router = APIRouter()
|
|
|
|
ROUTE_CONFIG = {
|
|
"prefix": "/account",
|
|
}
|
|
|
|
|
|
@router.get("/stores", response_class=HTMLResponse, include_in_schema=False)
|
|
async def merchant_stores_page(
|
|
request: Request,
|
|
current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
|
|
db: Session = Depends(get_db),
|
|
):
|
|
"""
|
|
Render the merchant's stores list page.
|
|
|
|
Shows all stores owned by the authenticated merchant with
|
|
status and basic information.
|
|
"""
|
|
context = get_context_for_frontend(
|
|
FrontendType.MERCHANT,
|
|
request,
|
|
db,
|
|
user=current_user,
|
|
)
|
|
return templates.TemplateResponse(
|
|
"tenancy/merchant/stores.html",
|
|
context,
|
|
)
|
|
|
|
|
|
@router.get("/stores/{store_id}", response_class=HTMLResponse, include_in_schema=False)
|
|
async def merchant_store_detail_page(
|
|
request: Request,
|
|
store_id: int,
|
|
current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
|
|
db: Session = Depends(get_db),
|
|
):
|
|
"""
|
|
Render the merchant store detail/edit page.
|
|
|
|
Shows store details and allows editing merchant-allowed fields.
|
|
"""
|
|
context = get_context_for_frontend(
|
|
FrontendType.MERCHANT,
|
|
request,
|
|
db,
|
|
user=current_user,
|
|
)
|
|
context["store_id"] = store_id
|
|
return templates.TemplateResponse(
|
|
"tenancy/merchant/store-detail.html",
|
|
context,
|
|
)
|
|
|
|
|
|
@router.get("/team", response_class=HTMLResponse, include_in_schema=False)
|
|
async def merchant_team_page(
|
|
request: Request,
|
|
current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
|
|
db: Session = Depends(get_db),
|
|
):
|
|
"""
|
|
Render the merchant team management page.
|
|
|
|
Shows team members across all stores owned by the merchant,
|
|
with ability to invite and manage per-store teams.
|
|
"""
|
|
context = get_context_for_frontend(
|
|
FrontendType.MERCHANT,
|
|
request,
|
|
db,
|
|
user=current_user,
|
|
)
|
|
return templates.TemplateResponse(
|
|
"tenancy/merchant/team.html",
|
|
context,
|
|
)
|
|
|
|
|
|
@router.get("/my-account", response_class=HTMLResponse, include_in_schema=False)
|
|
async def merchant_my_account_page(
|
|
request: Request,
|
|
current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
|
|
db: Session = Depends(get_db),
|
|
):
|
|
"""Render the merchant user's personal account page."""
|
|
context = get_context_for_frontend(
|
|
FrontendType.MERCHANT,
|
|
request,
|
|
db,
|
|
user=current_user,
|
|
)
|
|
return templates.TemplateResponse(
|
|
"tenancy/merchant/my-account.html",
|
|
context,
|
|
)
|
|
|
|
|
|
@router.get("/profile", response_class=HTMLResponse, include_in_schema=False)
|
|
async def merchant_profile_page(
|
|
request: Request,
|
|
current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
|
|
db: Session = Depends(get_db),
|
|
):
|
|
"""
|
|
Render the merchant profile page.
|
|
|
|
Shows merchant business details and allows editing contact info,
|
|
business address, and tax information.
|
|
"""
|
|
context = get_context_for_frontend(
|
|
FrontendType.MERCHANT,
|
|
request,
|
|
db,
|
|
user=current_user,
|
|
)
|
|
return templates.TemplateResponse(
|
|
"tenancy/merchant/profile.html",
|
|
context,
|
|
)
|