04/16 Upload codebase

app/routes/vault.py

@@ -0,0 +1,95 @@
+from flask import Blueprint, request, jsonify, g
+from app import db
+from app.models.vault_item import VaultItem, ItemType
+from app.services.auth_service import require_jwt
+
+vault_bp = Blueprint('vault', __name__)
+
+VALID_TYPES = {t.value for t in ItemType}
+
+
+@vault_bp.route('', methods=['GET'])
+@require_jwt
+def list_items():
+    items = VaultItem.query.filter_by(user_id=g.current_user_id).order_by(
+        VaultItem.name.asc()
+    ).all()
+    return jsonify([item.to_dict() for item in items]), 200
+
+
+@vault_bp.route('', methods=['POST'])
+@require_jwt
+def create_item():
+    data = request.get_json(silent=True) or {}
+    name = (data.get('name') or '').strip()
+    item_type = data.get('item_type', 'password')
+    enc_data = data.get('enc_data', '')
+    iv = data.get('iv', '')
+    folder_id = data.get('folder_id')
+
+    if not name:
+        return jsonify({'error': 'name is required'}), 400
+    if item_type not in VALID_TYPES:
+        return jsonify({'error': f'item_type must be one of {sorted(VALID_TYPES)}'}), 400
+    if not enc_data or not iv:
+        return jsonify({'error': 'enc_data and iv are required'}), 400
+
+    item = VaultItem(
+        user_id=g.current_user_id,
+        folder_id=folder_id,
+        item_type=item_type,   # stored as plain string
+        name=name,
+        enc_data=enc_data,
+        iv=iv,
+    )
+    try:
+        db.session.add(item)
+        db.session.commit()
+    except Exception as e:
+        db.session.rollback()
+        return jsonify({'error': f'Database error: {str(e)}'}), 500
+    return jsonify(item.to_dict()), 201
+
+
+@vault_bp.route('/<int:item_id>', methods=['GET'])
+@require_jwt
+def get_item(item_id):
+    item = VaultItem.query.filter_by(id=item_id, user_id=g.current_user_id).first()
+    if not item:
+        return jsonify({'error': 'Item not found'}), 404
+    return jsonify(item.to_dict()), 200
+
+
+@vault_bp.route('/<int:item_id>', methods=['PUT'])
+@require_jwt
+def update_item(item_id):
+    item = VaultItem.query.filter_by(id=item_id, user_id=g.current_user_id).first()
+    if not item:
+        return jsonify({'error': 'Item not found'}), 404
+
+    data = request.get_json(silent=True) or {}
+    if 'name' in data:
+        name = data['name'].strip()
+        if not name:
+            return jsonify({'error': 'name cannot be empty'}), 400
+        item.name = name
+    if 'folder_id' in data:
+        item.folder_id = data['folder_id']
+    if 'enc_data' in data:
+        item.enc_data = data['enc_data']
+    if 'iv' in data:
+        item.iv = data['iv']
+
+    db.session.commit()
+    return jsonify(item.to_dict()), 200
+
+
+@vault_bp.route('/<int:item_id>', methods=['DELETE'])
+@require_jwt
+def delete_item(item_id):
+    item = VaultItem.query.filter_by(id=item_id, user_id=g.current_user_id).first()
+    if not item:
+        return jsonify({'error': 'Item not found'}), 404
+    db.session.delete(item)
+    db.session.commit()
+    return jsonify({'message': 'Item deleted'}), 200