orion/app/modules/tenancy/routes/pages/store.py

# app/modules/tenancy/routes/pages/store.py
"""
Tenancy Store Page Routes (HTML rendering).

Store pages for authentication and account management:
- Root redirect
- Login
- Team management
- Profile
- Settings
"""

from fastapi import APIRouter, Depends, Path, Request
from fastapi.responses import HTMLResponse, RedirectResponse
from sqlalchemy.orm import Session

from app.api.deps import (
    get_current_store_from_cookie_or_header,
    get_current_store_optional,
    get_db,
)
from app.modules.core.utils.page_context import get_store_context
from app.modules.tenancy.models import User
from app.templates_config import templates

router = APIRouter()


# ============================================================================
# PUBLIC ROUTES (No Authentication Required)
# ============================================================================


@router.get("/{store_code}", response_class=RedirectResponse, include_in_schema=False)
async def store_root_no_slash(store_code: str = Path(..., description="Store code")):
    """
    Redirect /store/{code} (no trailing slash) to login page.
    Handles requests without trailing slash.
    """
    return RedirectResponse(url=f"/store/{store_code}/login", status_code=302)


@router.get(
    "/{store_code}/", response_class=RedirectResponse, include_in_schema=False
)
async def store_root(
    store_code: str = Path(..., description="Store code"),
    current_user: User | None = Depends(get_current_store_optional),
):
    """
    Redirect /store/{code}/ based on authentication status.

    - Authenticated store users -> /store/{code}/dashboard
    - Unauthenticated users -> /store/{code}/login
    """
    if current_user:
        return RedirectResponse(
            url=f"/store/{store_code}/dashboard", status_code=302
        )

    return RedirectResponse(url=f"/store/{store_code}/login", status_code=302)


@router.get(
    "/{store_code}/login", response_class=HTMLResponse, include_in_schema=False
)
async def store_login_page(
    request: Request,
    store_code: str = Path(..., description="Store code"),
    current_user: User | None = Depends(get_current_store_optional),
):
    """
    Render store login page.

    If user is already authenticated as store, redirect to dashboard.
    Otherwise, show login form.

    JavaScript will:
    - Load store info via API
    - Handle login form submission
    - Redirect to dashboard on success
    """
    if current_user:
        return RedirectResponse(
            url=f"/store/{store_code}/dashboard", status_code=302
        )

    return templates.TemplateResponse(
        "tenancy/store/login.html",
        {
            "request": request,
            "store_code": store_code,
        },
    )


# ============================================================================
# AUTHENTICATED ROUTES (Store Users Only)
# ============================================================================


@router.get(
    "/{store_code}/team", response_class=HTMLResponse, include_in_schema=False
)
async def store_team_page(
    request: Request,
    store_code: str = Path(..., description="Store code"),
    current_user: User = Depends(get_current_store_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render team management page.
    JavaScript loads team members via API.
    """
    return templates.TemplateResponse(
        "tenancy/store/team.html",
        get_store_context(request, db, current_user, store_code),
    )


@router.get(
    "/{store_code}/profile", response_class=HTMLResponse, include_in_schema=False
)
async def store_profile_page(
    request: Request,
    store_code: str = Path(..., description="Store code"),
    current_user: User = Depends(get_current_store_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render store profile page.
    User can manage their personal profile information.
    """
    return templates.TemplateResponse(
        "tenancy/store/profile.html",
        get_store_context(request, db, current_user, store_code),
    )


@router.get(
    "/{store_code}/settings", response_class=HTMLResponse, include_in_schema=False
)
async def store_settings_page(
    request: Request,
    store_code: str = Path(..., description="Store code"),
    current_user: User = Depends(get_current_store_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render store settings page.
    JavaScript loads settings via API.
    """
    return templates.TemplateResponse(
        "tenancy/store/settings.html",
        get_store_context(request, db, current_user, store_code),
    )