mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-11-08 21:14:47 +09:00
Juan DenisandClaude Opus 4.5
5f48bb1a37
- GET /workflows - List all workflows for user - GET /workflows/<id> - Get single workflow - POST /workflows - Create new workflow - PUT /workflows/<id> - Update workflow - DELETE /workflows/<id> - Delete workflow - JWT authentication and access control Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
131 lines
3.7 KiB
Python
131 lines
3.7 KiB
Python
import json
|
|
from flask import Blueprint, request, jsonify
|
|
from flask_jwt_extended import jwt_required, get_jwt_identity
|
|
from app import db
|
|
from app.models import Workflow, User
|
|
|
|
workflows_bp = Blueprint('workflows', __name__)
|
|
|
|
|
|
@workflows_bp.route('', methods=['GET'])
|
|
@jwt_required()
|
|
def get_workflows():
|
|
"""Get all workflows for the current user."""
|
|
current_user_id = get_jwt_identity()
|
|
user = User.query.get(current_user_id)
|
|
|
|
if user.role == 'admin':
|
|
workflows = Workflow.query.all()
|
|
else:
|
|
workflows = Workflow.query.filter_by(user_id=current_user_id).all()
|
|
|
|
return jsonify({
|
|
'workflows': [w.to_dict() for w in workflows]
|
|
})
|
|
|
|
|
|
@workflows_bp.route('/<int:workflow_id>', methods=['GET'])
|
|
@jwt_required()
|
|
def get_workflow(workflow_id):
|
|
"""Get a single workflow by ID."""
|
|
current_user_id = get_jwt_identity()
|
|
user = User.query.get(current_user_id)
|
|
workflow = Workflow.query.get(workflow_id)
|
|
|
|
if not workflow:
|
|
return jsonify({'error': 'Workflow not found'}), 404
|
|
|
|
if user.role != 'admin' and workflow.user_id != current_user_id:
|
|
return jsonify({'error': 'Access denied'}), 403
|
|
|
|
return jsonify(workflow.to_dict())
|
|
|
|
|
|
@workflows_bp.route('', methods=['POST'])
|
|
@jwt_required()
|
|
def create_workflow():
|
|
"""Create a new workflow."""
|
|
current_user_id = get_jwt_identity()
|
|
data = request.get_json()
|
|
|
|
if not data:
|
|
return jsonify({'error': 'No data provided'}), 400
|
|
|
|
name = data.get('name')
|
|
if not name:
|
|
return jsonify({'error': 'Name is required'}), 400
|
|
|
|
workflow = Workflow(
|
|
name=name,
|
|
description=data.get('description', ''),
|
|
nodes=json.dumps(data.get('nodes', [])),
|
|
edges=json.dumps(data.get('edges', [])),
|
|
viewport=json.dumps(data.get('viewport')) if data.get('viewport') else None,
|
|
user_id=current_user_id
|
|
)
|
|
|
|
db.session.add(workflow)
|
|
db.session.commit()
|
|
|
|
return jsonify({
|
|
'message': 'Workflow created successfully',
|
|
'workflow': workflow.to_dict()
|
|
}), 201
|
|
|
|
|
|
@workflows_bp.route('/<int:workflow_id>', methods=['PUT'])
|
|
@jwt_required()
|
|
def update_workflow(workflow_id):
|
|
"""Update an existing workflow."""
|
|
current_user_id = get_jwt_identity()
|
|
user = User.query.get(current_user_id)
|
|
workflow = Workflow.query.get(workflow_id)
|
|
|
|
if not workflow:
|
|
return jsonify({'error': 'Workflow not found'}), 404
|
|
|
|
if user.role != 'admin' and workflow.user_id != current_user_id:
|
|
return jsonify({'error': 'Access denied'}), 403
|
|
|
|
data = request.get_json()
|
|
if not data:
|
|
return jsonify({'error': 'No data provided'}), 400
|
|
|
|
if 'name' in data:
|
|
workflow.name = data['name']
|
|
if 'description' in data:
|
|
workflow.description = data['description']
|
|
if 'nodes' in data:
|
|
workflow.nodes = json.dumps(data['nodes'])
|
|
if 'edges' in data:
|
|
workflow.edges = json.dumps(data['edges'])
|
|
if 'viewport' in data:
|
|
workflow.viewport = json.dumps(data['viewport']) if data['viewport'] else None
|
|
|
|
db.session.commit()
|
|
|
|
return jsonify({
|
|
'message': 'Workflow updated successfully',
|
|
'workflow': workflow.to_dict()
|
|
})
|
|
|
|
|
|
@workflows_bp.route('/<int:workflow_id>', methods=['DELETE'])
|
|
@jwt_required()
|
|
def delete_workflow(workflow_id):
|
|
"""Delete a workflow."""
|
|
current_user_id = get_jwt_identity()
|
|
user = User.query.get(current_user_id)
|
|
workflow = Workflow.query.get(workflow_id)
|
|
|
|
if not workflow:
|
|
return jsonify({'error': 'Workflow not found'}), 404
|
|
|
|
if user.role != 'admin' and workflow.user_id != current_user_id:
|
|
return jsonify({'error': 'Access denied'}), 403
|
|
|
|
db.session.delete(workflow)
|
|
db.session.commit()
|
|
|
|
return jsonify({'message': 'Workflow deleted successfully'})
|