U wjϤ@sddlZddlZddlZddlmZmZddlmZddlm Z ddl m Z ddl m Z ddlmZddlmZdd lmZdd lmZdd lmZd d lmZddlmZddlmZddlmZmZdd lmZddlmZddlmZddlmZdd lmZddlZddlmZm Z m!Z!ddlm"Z"mZd dlm#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+ddl,m-Z-m.Z.m/Z/e-dZ0ddej1fddZ2ej3fddZ4ddZ5ddZ6GdddeZ7ddej1fd dZ2ej3dfd!dZ4d"d#Z8d$d%Z9d&d'd(d)d*hZ:d+d,d-hZ;d.d/d0hZd3Z?e@d4ZAe@d5ZBd6d7ZCd8d9ZDd:d;ZEdddeZ7Gd?d@d@eZGGdAdBdBeZHGdCdDdDeZIGdEdFdFeZJGdGdHdHeZKGdIdJdJeZLGdKdLdLeZMe jNdMdNZOGdOdPdPeZPdS)QN) authenticatelogin)User) ContentFile) transaction)Qstatus)APIViewResponse)IsAuthenticated) RefreshToken)Profiles) make_password)ObjectDoesNotExist)MultiPartParser FormParser JSONParser)AllowAnyr ) Property PropertyImage PropertyVideoPropertyDocument BuyerEnquiry SellerEnquirySellerEnquiryPhotoSellerEnquiryVideoSellerEnquiryDocument)DecimalInvalidOperation ROUND_HALF_UPz0.01cCs.t|dddd|rd|inid|i|dS)Nsuccesscoderesponse)r errormessagedatarr r)r(r%r+//var/www/html/VPFITNESS/school/./myapp/views.pyok1sr-cCst|ddd|d|dS)Nfailedr$T)r r'r(rr r(r%r+r+r,fail:sr0c Cs^|dks|dkr td|dztt|WStttfk rXtd|dYnXdS)z Validate + coerce a value into a Decimal, raising a clear message on bad input. Goes through str() first so binary floating-point artifacts (e.g. 0.1 + 0.2 != 0.3) never leak into money fields. N'z' is required.z' must be a valid number.) ValueErrorr strr! TypeError)value field_namer+r+r, to_decimalBs r8cCst|jttdS)zKRound a Decimal to exactly 2 places using standard rounding (not banker's).)rounding)r quantize TWO_PLACESr"r6r+r+r,q2Psr=c@seZdZdZddZdS) LoginAPIViewu< Accepts either a username or an email in `username`, plus `password`. `fcm_token` (optional) is stored against the profile for push notifications — it is intentionally NOT written into `pincode`; that was a bug in the previous version. Adjust the field name below to match your Profile model. c Cs|j}|dpd}|d}|d}|r4|s@tdtjStd|}|rztj j|d}|j }Wqtj k rtdtj YSXn|}t |||d } | dkrtdtj S| jstd tjSt|| t| } d} d} d} zTtj j| jd }|r||_|jdgd |jr(||jjnd} |j} |j} Wntj k rRYnXt| j | j| j | j| jt| t| j | d | | d ddSNusernamer1password fcm_tokenz)Username/email and password are required.z[^@]+@[^@]+\.[^@]+)Z email__iexactzInvalid username or password.)r@rAzThis account has been disabled.user_id) update_fieldsloop) nameidr@emailZisSuperZrefreshtokenprofileZ companynamephonerolez Login successr(!r)getstripr0r HTTP_400_BAD_REQUESTrematchrobjectsr@ DoesNotExistZHTTP_401_UNAUTHORIZEDr is_activeHTTP_403_FORBIDDENrrZfor_userrrHrBsaveprofilesbuild_absolute_uriurlrLrMr-rI is_superuserr4Z access_tokenselfrequestr)Zusername_or_emailrArBis_emailmatchedZusername_to_authuserrJZ profile_photorLrMrKr+r+r,post^sb           LoginAPIView.postN)__name__ __module__ __qualname____doc__rdr+r+r+r,r>Vsr>ZSuccesscCst|ddd||d|dS)Nr#r$r r'r(r)rr r*r+r+r,r-scCst|ddd||d|dS)Nr.r$Trjrr )r(r%r)r+r+r,r0scCsV|r |jsdS|js|jrdSztjj|jd}|jdkWStk rPYdSXdS)zMatches the role convention used in LoginAPIView (Profiles.role). Adjust the role value below if your project uses a different number for "admin".FTrCrN) is_authenticatedr]is_staffrrUrPrHrM Exception)rcrKr+r+r, is_admin_users   rncCs2|sdSz||jWStk r,YdSXdSN)r[r\rm)r`fieldr+r+r,build_file_urls rqZjpgZjpegZpngZwebpZgifZmp4ZwebmZoggZpdfdocZdocx z^\+?\d{10,13}$z^[^@\s]+@[^@\s]+\.[^@\s]+$cCs|rt|ddsdSdS)N r1z+Enter a valid mobile number (10-13 digits).) MOBILE_RErTreplacer<r+r+r,validate_mobilesrycCs|rt|sdSdS)NzEnter a valid email address.)EMAIL_RErTr<r+r+r,validate_email_formatsr{c Csd|jkr |jdddnd}||krPd|jd|ddt|dS|jd }||krd|jd |d d |d |d SdS)z;Returns an error string, or None if the file is acceptable..rr1r2z' is not a supported z format. Allowed: z, iz' is z.1fuMB — z files must be under zMB.N)rGrsplitlowerjoinsortedsize)fallowed_extensionsZmax_mblabelextZsize_mbr+r+r,validate_uploads$$ "rcCsH|sdS|dz |}W5|X|jddd}t||dS)uReads an existing uploaded file and returns a ContentFile so it can be saved onto a different model's FileField/ImageField — used when a seller's submitted photos/videos/documents are copied onto the live Property listing at approval time.Nrb/rr})rG)openclosereadrGr~r)Z file_fieldcontentrGr+r+r,copy_django_files   rc@seZdZdZegZddZdS)r>z Accepts either a username or an email in `username`, plus `password`. `fcm_token` (optional) is stored against the profile for push notifications. c Cs|j}|dpd}|d}|d}|r4|s@tdtjStd|}|rztj j|d}|j }Wqtj k rtdtj YSXn|}t |||d } | dkrtdtj S| jstd tjSt|| t| } d} d} d} zTtj j| jd }|r||_|jdgd |jr(||jjnd} |j} |j} Wntj k rRYnXt| j | j| j | j| jt| t| j | d | | d ddSr?rOr^r+r+r,rdsb           reN)rfrgrhrirpermission_classesrdr+r+r+r,r> sc@sJeZdZdZegZeeegZ dddZ ddZ ddZ d d Z d d Zd S)PropertyAPIViewal GET /api/v1/property/ -> list (search, place_name, property_type, featured, status) GET /api/v1/property// -> single property with images/videos/documents POST /api/v1/property/ -> create (admin only) PUT /api/v1/property// -> update (admin only) DELETE /api/v1/property// -> delete (admin only) Fcs|jjdddd}|j|j|j|j|j|j|j dk rBt |j nd|j |j |j |j|j|rpt|jndd }|r||j|j|j|jfdd|Dfdd|jjddddDfd d|jjddddDd |S) NrrorderrH) rHtitle place_namedistrict property_type land_areaprice price_displayshort_description is_featuredr created_atZ cover_imagecs,g|]$}|jt|j|j|j|jdqS))rHimagecaptionis_coverr)rHrqrrrr).0Zimr`r+r, vsz5PropertyAPIView.get_property_data..cs,g|]$}|jt|j|j|j|jdqS))rHvideo video_urlrr)rHrqrrrrrvrr+r,rzscs(g|] }|jt|j|j|jdqS))rHdocumentrr)rHrqrrrrdrr+r,r~s) full_addressmap_link description updated_atimagesvideos documents)rfilterorder_byrHrrrrrrr4rrrr rfirstrqrupdaterrrrrr)r_r`propdetailedrr)r+rr,get_property_data^s@   z!PropertyAPIView.get_property_datac s|d}|dk rZztjj|d}Wn tk rDtdtjYSXtj|ddSj dd }j dd }j d d }j d d } j d d } tj dd } t jr| rz| jt| d } Wntk rYnXn | jdd } |rF| t|dt|dBt|dBt|dB} |rX| j|d} |rj| j|d} | dkr| jdd} tfdd| DS)NrHrHProperty not foundTrsearchr1rrfeaturedr -created_atrr)Zplace_name__icontains)Zdistrict__icontains)Ztitle__icontains)Zfull_address__icontains)Zplace_name__iexact)r1rcsg|]}|qSr+)rrpr`r_r+r,rsz'PropertyAPIView.get..)rPrrUrr0r HTTP_404_NOT_FOUNDr-r query_paramsrQallrrnrcrintr3r) r_r`argskwargsrHrrrrr status_param propertiesr+rr,rPsF       zPropertyAPIView.getc Ost|jstdtjS|j}zD|d}|d}|d}|rJ|rJ|sXtdtjWS|d}|dkrz t|dkrtd tjWWSWn&t t fk rtd tjYWSXt |j|||d |d |d |d||dpd|d|d|dt |ddkrdndt |dddkr6dndd} | t|j|| dddtjdWStk r} ztdt | tjWYSd} ~ XYnXdS)Nz(You are not authorized to add a propertyrrrz,title, place_name and land_area are requiredrNr1r Price must be a positive number.Price must be a valid number.rrrrrrrrrtrueTruerr r)rcrrrrrrrrrrrrr TrzProperty added successfullyr/An error occurred: )rnrcr0r rXr)rPrRfloatr5r3rr4rYr-rHTTP_201_CREATEDrmHTTP_500_INTERNAL_SERVER_ERROR) r_r`rrr)rrr raw_pricerer+r+r,rdsN         zPropertyAPIView.postc Osrt|jstdtjS|d}|j}ztjj|d}Wn t k rXtdtj YSXddddd d d d d dg }|D]}||krvt ||||qvd|kr|d} | dkrzt | dkrtdtj WSWn$ttfk rtdtj YSX| pd|_d|kr*t|ddkr$dnd|_d|krRt|ddkrLdnd|_|t|j||ddddS)Nz.You are not authorized to update this propertyrHrrrrrrrrrrrrrrrrrrrrr TrzProperty updated successfullyrN)rnrcr0r rXrPr)rrUrrsetattrrrRr5r3rr4rrYr-r) r_r`rrrHr)rfieldsrprr+r+r,putsJ         zPropertyAPIView.putcOsht|jstdtjS|d}ztjj|d}Wn tk rRtdtj YSX| t dddS)Nz.You are not authorized to delete this propertyrHrrzProperty deleted successfullyrN) rnrcr0r rXrPrrUrrdeleter-)r_r`rrrHrr+r+r,rs   zPropertyAPIView.deleteN)F)rfrgrhrirrrrrparser_classesrrPrdrrr+r+r+r,rSs  ')-$rc@seZdZdZegZddZdS)PropertyLocationAPIViewzNGET /api/v1/property-location/ -> distinct active place names, alphabetically.cOsDtjjddjddjddjddd}tt|d d d }t|S) NrrT)Zplace_name__isnullr1)rr)flatcSs|Sro)r)sr+r+r,z-PropertyLocationAPIView.get..)key)rrUrexclude values_listrsetr-)r_r`rrnamesZ unique_sortedr+r+r,rPszPropertyLocationAPIView.getNrfrgrhrirrrPr+r+r+r,r src@seZdZdZegZddZdS)DashboardSummaryAPIViewzNGET /api/v1/dashboard-summary/ -> counts for the admin dashboard (admin only).c Ost|jstdtjStjtjjddtjjddt jt jjddt jt jjddt jj ddd}t |S)NYou are not authorizedrrr)Ztotal_propertiesZactive_propertiesZfeatured_propertiesZtotal_buyer_enquiriesZnew_buyer_enquiriesZtotal_seller_enquiriesZnew_seller_enquiriesZpending_seller_approvals) rnrcr0r rXrrUcountrrrrr-)r_r`rrr)r+r+r,rPs   zDashboardSummaryAPIView.getNrr+r+r+r,rsrc@s.eZdZdZegZeegZddZ ddZ dS)PropertyImageAPIViewu POST /api/v1/property-image/ -> upload (form fields: property, images[] files) — admin only DELETE /api/v1/property-image// -> remove one image — admin only c Ost|jstdtjS|jd}|jd}zt j j|d}Wn t k r`tdtj YSX|srtdtj S|D]&}t|ttd}|rvt|tj Sqvg} |D].}tj j||d} | | jt|| jd qt| d tjd S) NrpropertyrrrzNo images providedrrrrHrzImages uploaded successfullyr/)rnrcr0r rXr)rPFILESgetlistrrUrrrRrIMAGE_EXTENSIONS MAX_IMAGE_MBrcreateappendrHrqrr-r) r_r`rr property_idfilesrrr'createdimgr+r+r,rd<s&     zPropertyImageAPIView.postcOsdt|jstdtjS|d}ztjj|dWn t k rVtdtj YSXt dddS)NrrHrzImage not foundzImage deleted successfullyrN) rnrcr0r rXrPrrUrrrr-r_r`rrrHr+r+r,rWs   zPropertyImageAPIView.deleteN rfrgrhrirrrrrrdrr+r+r+r,r4s rc@s.eZdZdZegZeegZddZ ddZ dS)PropertyVideoAPIViewu POST /api/v1/property-video/ -> upload (form fields: property, videos[] files, video_url) — admin only DELETE /api/v1/property-video// -> remove one video — admin only c Ost|jstdtjS|jd}|jd}|jd}zt j j|d}Wn t k rltdtj YSX|D]&}t |ttd} | rrt| tjSqrg} |D].}tj j||d} | | jt|| jd q|rtj j||d } | | j| jd | s td tjSt| d tjdS)NrrrrrrrrrrHr)rr)rHrzNo videos providedzVideos uploaded successfullyr/)rnrcr0r rXr)rPrrrrUrrrVIDEO_EXTENSIONS MAX_VIDEO_MBrRrrrrHrqrrr-r) r_r`rrrrrrrr'rrr+r+r,rdks.      zPropertyVideoAPIView.postcOsdt|jstdtjS|d}ztjj|dWn t k rVtdtj YSXt dddS)NrrHrzVideo not foundzVideo deleted successfullyrN) rnrcr0r rXrPrrUrrrr-rr+r+r,rs   zPropertyVideoAPIView.deleteNrr+r+r+r,rcs rc@s.eZdZdZegZeegZddZ ddZ dS)PropertyDocumentAPIViewu POST /api/v1/property-document/ -> upload (form fields: property, documents[] files) — admin only DELETE /api/v1/property-document// -> remove one document — admin only c Ost|jstdtjS|jd}|jd}zt j j|d}Wn t k r`tdtj YSX|srtdtj S|D]&}t|ttd}|rvt|tj Sqvg} |D].}tj j||d} | | jt|| jd qt| d tjd S) NrrrrrzNo documents providedrrrrHrzDocuments uploaded successfullyr/)rnrcr0r rXr)rPrrrrUrrrRrDOCUMENT_EXTENSIONSMAX_DOCUMENT_MBrrrrHrqrr-r) r_r`rrrrrrr'rrr+r+r,rds&     zPropertyDocumentAPIView.postcOsdt|jstdtjS|d}ztjj|dWn t k rVtdtj YSXt dddS)NrrHrzDocument not foundzDocument deleted successfullyrN) rnrcr0r rXrPrrUrrrr-rr+r+r,rs   zPropertyDocumentAPIView.deleteNrr+r+r+r,rs rc@s>eZdZdZegZddZddZddZdd Z d d Z d S) BuyerEnquiryAPIViewu| GET /api/v1/buyer-enquiry/ -> list, admin only (filter by ?status=) GET /api/v1/buyer-enquiry// -> single, admin only POST /api/v1/buyer-enquiry/ -> public — buyer submits a requirement PUT /api/v1/buyer-enquiry// -> update status / admin_notes, admin only DELETE /api/v1/buyer-enquiry// -> delete, admin only cCsF|j|j|j|j|j|j|j|j|j|jr2|j j nd|j |j |j d S)N) rH full_name mobile_numberrIpreferred_locationrbudgetr(rZproperty_titler admin_notesr)rHrrrIrrrr(rrrr r r)r_enquiryr+r+r,get_dataszBuyerEnquiryAPIView.get_datacst|jstdtjS|d}|dk rjztjj|d}Wn tk rZtdtj YSXt |S|j dd }tjd}|rz|jt|d}Wntk rYnXt fd d |DS) NrrHrEnquiry not foundr r1rrcsg|]}|qSr+r rrr_r+r,rsz+BuyerEnquiryAPIView.get..)rnrcr0r rXrPrrUrrr-r rrQrrrrr3r_r`rrrHr rZ enquiriesr+rr,rPs"   zBuyerEnquiryAPIView.getc Os.|j}z|d}|d}|r$|s2tdtjWSt|pFt|d}|rZt|tjWSd}|drztjj|dd}Wnt k rd}YnXt jj |||d|d|d|d |d |d } t | | d tjd WStk r(} ztdt| tjWYSd} ~ XYnXdS)Nrrz(full_name and mobile_number are requiredrIrrrrrr()rrrIrrrr(rz8Thank you! Your enquiry has been submitted successfully.r/r)r)rPr0r rRryr{rrUrrrr-r rrmr4r) r_r`rrr)rrr'Z property_objr rr+r+r,rds>     zBuyerEnquiryAPIView.postcOst|jstdtjS|d}|j}ztjj|d}Wn t k rXtdtj YSXd|krn|d|_d|kr|d|_ | t ||ddS) NrrHrr r r Enquiry updated successfullyrN)rnrcr0r rXrPr)rrUrrr rYr-r )r_r`rrrHr)r r+r+r,r s     zBuyerEnquiryAPIView.putcOsdt|jstdtjS|d}ztjj|dWn t k rVtdtj YSXt dddSNrrHrr zEnquiry deleted successfullyrN) rnrcr0r rXrPrrUrrrr-rr+r+r,r3s   zBuyerEnquiryAPIView.deleteN) rfrgrhrirrr rPrdrrr+r+r+r,rs&rcCstjj|j|j|j|j|j|jd|j|j p.|j |j p<|j p    "rc@sHeZdZdZegZeeegZ ddZ ddZ ddZ dd Z d d Zd S) SellerEnquiryAPIViewu GET /api/v1/seller-enquiry/ -> list, admin only (filter by ?status=) GET /api/v1/seller-enquiry// -> single, admin only POST /api/v1/seller-enquiry/ -> public — seller submits property details (multipart: photos[], videos[], documents[]) PUT /api/v1/seller-enquiry// -> update status / admin_notes, admin only PUT /api/v1/seller-enquiry//?val=approve -> approve & publish as a live Property, admin only DELETE /api/v1/seller-enquiry// -> delete, admin only cs|j|j|j|j|j|j|j|j|j|j |j |j |j |j fdd|jDfdd|jDfdd|jDdS)Ncs g|]}|jt|jdqS)r)rHrqrrrr+r,rsz1SellerEnquiryAPIView.get_data..cs g|]}|jt|jdqS)r)rHrqrrrr+r,rscs g|]}|jt|jdqS)r)rHrqrrrr+r,rs)rH seller_namerrIrrrrrrrr r rrrr)rHrrrIrrrrrrrr r rrrrr)r_r`r r+rr,r zs$zSellerEnquiryAPIView.get_datacstjstdtjS|d}|dk rlztjj|d}Wn tk rZtdtj YSXt  |Sj dd }tjd}|rz|jt|d}Wntk rYnXt fd d |DS) NrrHrr r r1rrcsg|]}|qSr+r rrr+r,rsz,SellerEnquiryAPIView.get..)rnrcr0r rXrPrrUrrr-r rrQrrrrr3rr+rr,rPs"   zSellerEnquiryAPIView.getc Os|j}z|d}|d}|d}|d}|rB|rB|rB|sPtdtjWSt|pdt|d} | rxt| tjWS|jd} |jd} |jd } | D](} t | t t d } | rt| tjWSq| D](} t | t t d } | rt| tjWSq| D](} t | ttd } | rt| tjWSqtjj|||d|||d |d|d|d|dd }| D]} tjj|| dqn| D]} tjj|| dq| D]} tjj|| dqt|||dtjdWStk r}ztdt|tjWYSd}~XYnXdS)NrrrrzCseller_name, mobile_number, property_name and location are requiredrIrrrrrrrrrrr) rrrIrrrrrrr)seller_enquiryr)rr)rrzBThank you! Your property details have been submitted successfully.r/r)r)rPr0r rRryr{rrrrrrrrrrrUrrrrr-r rrmr4r)r_r`rrr)rrrrr'rrrrr rr+r+r,rdsh         zSellerEnquiryAPIView.postc Os:t|jstdtjS|d}|j}|jd}ztj j|d}Wn t k rdtdtj YSX|dkr|jdkrtdtj Szt ||}Wn<tk r} ztd t| tjWYSd} ~ XYnX|||} |j| d <t| d d Sd |kr|d |_d|kr|d|_|t|||dd S)NrrHvalrr Zapproverz8This submission has already been approved and published.z!Could not publish this property: rz2Approved! The property is now live on the website.rNr r r)rnrcr0r rXrPr)rrrUrrrRrrmr4rr rHr-r rY) r_r`rrrHr)rr rrresultr+r+r,rs2      ,       zSellerEnquiryAPIView.putcOsdt|jstdtjS|d}ztjj|dWn t k rVtdtj YSXt dddSr) rnrcr0r rXrPrrUrrrr-rr+r+r,rs   zSellerEnquiryAPIView.deleteN)rfrgrhrirrrrrrr rPrdrrr+r+r+r,rms  ?!r)QrStimebase64django.contrib.authrrdjango.contrib.auth.modelsrdjango.core.files.baser django.dbrdjango.db.modelsrrest_frameworkr Zrest_framework.viewsr Zrest_framework.responser Zrest_framework.permissionsr Zrest_framework_simplejwt.tokensrmodelsrdjango.contrib.auth.hashersrdjango.core.exceptionsrZrest_framework.parsersrrrrrrrrrrrrrdecimalr r!r"r;Z HTTP_200_OKr-rRr0r8r=r>rnrqrrrrrrcompilerwrzryr{rrrrrrrrratomicrrr+r+r+r,sx                 ,  M       H;/33z )