Archived
Marko (Hermes Implementer)
3b5b301e42
- Backend: Django REST Framework API with Bookmark and Note models - ViewSets with user-scoped querysets and select_related for N+1 prevention - Create/List/Detail/Update/Delete endpoints - Batch delete operations - Unique constraint on user+book+page for bookmarks - IsOwner permission class for object-level access control - Full serializer validation (page > 0, non-empty content, duplicate check) - 30+ pytest-django tests covering CRUD, auth, filtering, edge cases - Frontend: React TypeScript components - AnnotationsContext with useReducer for state management - BookmarkList, NoteList, AddAnnotationForm, AnnotationsDashboard - Inline note editing with immediate save - Batch delete support - API client with JWT auto-refresh interceptors - Paginated query hook for infinite scroll support - Responsive CSS with loading/empty states - Infrastructure: Django project with custom User model, JWT auth, CORS - PostgreSQL database models with proper FK and indexes - Django admin configuration for all models
93 lines
3.1 KiB
Python
93 lines
3.1 KiB
Python
from django_filters.rest_framework import DjangoFilterBackend
|
|
from rest_framework import status, viewsets
|
|
from rest_framework.decorators import action
|
|
from rest_framework.filters import OrderingFilter, SearchFilter
|
|
from rest_framework.permissions import IsAuthenticated
|
|
from rest_framework.response import Response
|
|
|
|
from apps.annotations.models import Bookmark, Note
|
|
from apps.annotations.permissions import IsOwner
|
|
from apps.annotations.serializers import (
|
|
BookmarkCreateSerializer,
|
|
BookmarkSerializer,
|
|
NoteCreateSerializer,
|
|
NoteSerializer,
|
|
)
|
|
|
|
|
|
class BookmarkViewSet(viewsets.ModelViewSet):
|
|
"""CRUD for user bookmarks. Users can only manage their own bookmarks."""
|
|
|
|
permission_classes = [IsAuthenticated, IsOwner]
|
|
filter_backends = [DjangoFilterBackend, SearchFilter, OrderingFilter]
|
|
filterset_fields = ["book"]
|
|
search_fields = ["location_text"]
|
|
ordering_fields = ["created_at", "page"]
|
|
ordering = ["-created_at"]
|
|
|
|
def get_serializer_class(self):
|
|
if self.action == "create":
|
|
return BookmarkCreateSerializer
|
|
return BookmarkSerializer
|
|
|
|
def get_queryset(self):
|
|
return Bookmark.objects.filter(user=self.request.user).select_related(
|
|
"book"
|
|
)
|
|
|
|
def perform_create(self, serializer):
|
|
serializer.save(user=self.request.user)
|
|
|
|
@action(detail=False, methods=["delete"], url_path="batch-delete")
|
|
def batch_delete(self, request):
|
|
"""Delete multiple bookmarks by id list."""
|
|
ids = request.data.get("ids", [])
|
|
if not ids:
|
|
return Response(
|
|
{"detail": "No ids provided."}, status=status.HTTP_400_BAD_REQUEST
|
|
)
|
|
deleted, _ = Bookmark.objects.filter(
|
|
id__in=ids, user=request.user
|
|
).delete()
|
|
return Response(
|
|
{"deleted": deleted}, status=status.HTTP_200_OK
|
|
)
|
|
|
|
|
|
class NoteViewSet(viewsets.ModelViewSet):
|
|
"""CRUD for user notes. Users can only manage their own notes."""
|
|
|
|
permission_classes = [IsAuthenticated, IsOwner]
|
|
filter_backends = [DjangoFilterBackend, SearchFilter, OrderingFilter]
|
|
filterset_fields = ["book"]
|
|
search_fields = ["content", "location_text"]
|
|
ordering_fields = ["created_at", "page"]
|
|
ordering = ["-created_at"]
|
|
|
|
def get_serializer_class(self):
|
|
if self.action == "create":
|
|
return NoteCreateSerializer
|
|
return NoteSerializer
|
|
|
|
def get_queryset(self):
|
|
return Note.objects.filter(user=self.request.user).select_related(
|
|
"book"
|
|
)
|
|
|
|
def perform_create(self, serializer):
|
|
serializer.save(user=self.request.user)
|
|
|
|
@action(detail=False, methods=["delete"], url_path="batch-delete")
|
|
def batch_delete(self, request):
|
|
"""Delete multiple notes by id list."""
|
|
ids = request.data.get("ids", [])
|
|
if not ids:
|
|
return Response(
|
|
{"detail": "No ids provided."}, status=status.HTTP_400_BAD_REQUEST
|
|
)
|
|
deleted, _ = Note.objects.filter(
|
|
id__in=ids, user=request.user
|
|
).delete()
|
|
return Response(
|
|
{"deleted": deleted}, status=status.HTTP_200_OK
|
|
) |