add: implement 9 new scopes, 21 new api endpoints

crates/app/src/routes/api/v1/auth/user_warnings.rs

@@ -1,12 +1,16 @@
 use crate::{
     get_user_from_token,
     model::{ApiReturn, Error},
-    routes::api::v1::CreateUserWarning,
+    routes::{api::v1::CreateUserWarning, pages::PaginatedQuery},
     State,
 };
-use axum::{Extension, Json, extract::Path, response::IntoResponse};
+use axum::{
+    extract::{Path, Query},
+    response::IntoResponse,
+    Extension, Json,
+};
 use axum_extra::extract::CookieJar;
-use tetratto_core::model::{auth::UserWarning, permissions::FinePermission};
+use tetratto_core::model::{auth::UserWarning, oauth, permissions::FinePermission};
 
 /// Create a new user warning.
 pub async fn create_request(
@@ -16,7 +20,7 @@ pub async fn create_request(
     Json(req): Json<CreateUserWarning>,
 ) -> impl IntoResponse {
     let data = &(data.read().await).0;
-    let user = match get_user_from_token!(jar, data) {
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::ModManageWarnings) {
         Some(ua) => ua,
         None => return Json(Error::NotAllowed.into()),
     };
@@ -45,7 +49,7 @@ pub async fn delete_request(
     Extension(data): Extension<State>,
 ) -> impl IntoResponse {
     let data = &(data.read().await).0;
-    let user = match get_user_from_token!(jar, data) {
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::ModManageWarnings) {
         Some(ua) => ua,
         None => return Json(Error::NotAllowed.into()),
     };
@@ -63,3 +67,58 @@ pub async fn delete_request(
         Err(e) => Json(e.into()),
     }
 }
+
+/// Get all warnings for the given user.
+pub async fn on_user_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::ModManageWarnings) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    if !user.permissions.check(FinePermission::MANAGE_WARNINGS) {
+        return Json(Error::NotAllowed.into());
+    }
+
+    match data
+        .get_user_warnings_by_user(user.id, 12, props.page)
+        .await
+    {
+        Ok(w) => Json(ApiReturn {
+            ok: true,
+            message: "Success".to_string(),
+            payload: Some(w),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get a single warning.
+pub async fn get_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::ModManageWarnings) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    if !user.permissions.check(FinePermission::MANAGE_WARNINGS) {
+        return Json(Error::NotAllowed.into());
+    }
+
+    match data.get_user_warning_by_id(id).await {
+        Ok(w) => Json(ApiReturn {
+            ok: true,
+            message: "Success".to_string(),
+            payload: Some(w),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}