generated from coulomb/repo-seed
Bernd Worsch
f1978c3888
A2 — Compilation fixes: - Remove inline FK constraints from Schema.sql; IHP schema compiler cannot parse them. Add 1744329600-restore-fk-constraints.sql migration to restore referential integrity at the DB level. - Rename `#label` → `#label_` throughout to avoid clash with Haskell built-in. - Fix `hub.id == hid` UUID comparisons to use `toUUID hub.id`. - Replace non-existent `setStatus`/`respondJson` calls with `renderJsonWithStatusCode` throughout Api controllers. - Fix qualified package import for `cryptohash-sha256` in Auth.hs. - Add `CanSelect (Text, Text)` instance in Helper.View. - Refactor HSX inline lambdas to named helper functions in 100+ views (GHC cannot infer types for anonymous functions inside quasi-quoted HSX). - Fix missing imports (IHP.QueryBuilder, IHP.Fetch, Web.Routes, Only, etc.) across helpers and controllers. - Remove duplicate `diffUTCTime` definition in BottleneckDetector. - Change `createEventForHub` return type from `IO ResponseReceived` to `IO ()`. - Seed type-registry vocabulary via 1744502400-seed-type-registries.sql (moved from Schema.sql where IHP does not execute INSERT statements). A3 — Tailwind build pipeline: - Add `tailwindcss` to flake.nix native packages. - Uncomment `tailwind.exec` process in devenv shell config. - Add tailwind/tailwind.config.js (scans Web/View/**/*.hs). - Add tailwind/app.css with @tailwind directives. A4 — Admin user seed: - Add 1744416000-seed-admin-user.sql: inserts admin@inter-hub.local with bcrypt-hashed password admin1234! (cost 10). - Add .env.example documenting all required environment variables and default admin credentials. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
98 lines
4.2 KiB
Haskell
98 lines
4.2 KiB
Haskell
module Web.Controller.ApiInteractionEvents where
|
|
|
|
import Web.Types
|
|
import Generated.Types
|
|
import IHP.Prelude
|
|
import IHP.ControllerPrelude
|
|
import Data.Aeson (object, (.=))
|
|
import qualified Data.Text as T
|
|
import Network.Wai (requestMethod, requestHeaders, responseLBS, ResponseReceived)
|
|
import Network.HTTP.Types (status201, status401, status403, status405, status422)
|
|
import IHP.Controller.Render (renderJson, renderJsonWithStatusCode)
|
|
import Application.Helper.TypeRegistry (validateEventType)
|
|
|
|
instance Controller ApiInteractionEventsController where
|
|
|
|
action CreateApiInteractionEventAction = do
|
|
-- Method guard — only POST accepted.
|
|
when (requestMethod ?request /= "POST") do
|
|
renderJsonWithStatusCode status405 (object ["error" .= ("Method not allowed" :: Text)])
|
|
|
|
-- Bearer token auth — validate against hub.api_key.
|
|
let authHeader = lookup "Authorization" (requestHeaders ?request)
|
|
let mApiKey = authHeader >>= \h ->
|
|
let t = cs h :: Text
|
|
in if "Bearer " `T.isPrefixOf` t
|
|
then Just (T.drop 7 t)
|
|
else Nothing
|
|
|
|
case mApiKey of
|
|
Nothing -> do
|
|
renderJsonWithStatusCode status401 (object ["error" .= ("Authorization: Bearer <hub-api-key> required" :: Text)])
|
|
Just apiKey -> do
|
|
mHub <- query @Hub
|
|
|> filterWhere (#apiKey, Just apiKey)
|
|
|> fetchOneOrNothing
|
|
case mHub of
|
|
Nothing -> do
|
|
renderJsonWithStatusCode status401 (object ["error" .= ("Invalid or unknown API key" :: Text)])
|
|
Just hub -> createEventForHub hub
|
|
|
|
createEventForHub :: (?context :: ControllerContext, ?modelContext :: ModelContext, ?respond :: Respond, ?request :: Request) => Hub -> IO ()
|
|
createEventForHub hub = do
|
|
-- Validate required fields per contract v1.0
|
|
widgetIdText <- paramOrNothing @Text "widget_id"
|
|
eventType <- paramOrNothing @Text "event_type"
|
|
_occurredAt <- paramOrNothing @Text "occurred_at"
|
|
|
|
let missing = catMaybes
|
|
[ if isNothing widgetIdText then Just ("widget_id" :: Text) else Nothing
|
|
, if isNothing eventType then Just "event_type" else Nothing
|
|
, if isNothing _occurredAt then Just "occurred_at" else Nothing
|
|
]
|
|
|
|
unless (null missing) do
|
|
renderJsonWithStatusCode status422 (object
|
|
[ "error" .= ("Missing required fields" :: Text)
|
|
, "missing" .= missing
|
|
])
|
|
|
|
let Just wIdText = widgetIdText
|
|
Just evType = eventType
|
|
|
|
evTypeResult <- liftIO $ validateEventType evType
|
|
case evTypeResult of
|
|
Left _ -> do
|
|
renderJsonWithStatusCode status422 (object
|
|
[ "error" .= ("Unacceptable event_type" :: Text)
|
|
, "hint" .= ("Register the event type in the Type Registry before submitting" :: Text)
|
|
])
|
|
Right () -> pure ()
|
|
|
|
-- Resolve widget — must belong to this hub.
|
|
case readMay wIdText of
|
|
Nothing -> do
|
|
renderJsonWithStatusCode status422 (object ["error" .= ("widget_id must be a valid UUID" :: Text)])
|
|
Just rawId -> do
|
|
let wId = Id rawId :: Id Widget
|
|
mWidget <- fetchOneOrNothing wId
|
|
case mWidget of
|
|
Nothing -> do
|
|
renderJsonWithStatusCode status422 (object ["error" .= ("Widget not found" :: Text)])
|
|
Just widget -> do
|
|
when (widget.hubId /= toUUID hub.id) do
|
|
renderJsonWithStatusCode status403 (object ["error" .= ("Widget does not belong to this hub" :: Text)])
|
|
|
|
event <- newRecord @InteractionEvent
|
|
|> set #widgetId widget.id
|
|
|> set #eventType evType
|
|
|> set #actorType "external_adapter"
|
|
|> createRecord
|
|
|
|
renderJsonWithStatusCode status201 (object
|
|
[ "id" .= event.id
|
|
, "widget_id" .= event.widgetId
|
|
, "event_type" .= event.eventType
|
|
, "occurred_at" .= event.occurredAt
|
|
])
|