POST API Endpoints for Sending and Accepting Friend invitations between two Users; GET request endpoint for listview for Friend Invites

src/chigame/api/permissions.py

@@ -0,0 +1,6 @@
+from rest_framework.permissions import BasePermission
+
+
+class IsUnauthenticated(BasePermission):
+    def has_permission(self, request, view):
+        return not request.user or not request.user.is_authenticated

src/chigame/api/serializers.py

@@ -1,7 +1,7 @@
 from rest_framework import serializers
 
 from chigame.games.models import Category, Chat, Game, Lobby, Mechanic, Message, Tournament, User
-from chigame.users.models import Group
+from chigame.users.models import FriendInvitation, Group, UserProfile
 
 
 class GameSerializer(serializers.ModelSerializer):
@@ -10,6 +10,12 @@ class Meta:
         fields = "__all__"
 
 
+class UserProfileSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = UserProfile
+        fields = "__all__"
+
+
 class LobbySerializer(serializers.ModelSerializer):
     class Meta:
         model = Lobby
@@ -59,7 +65,6 @@ class Meta:
 
 class MessageSerializer(serializers.ModelSerializer):
     sender = serializers.EmailField(write_only=True)
-
     tournament = serializers.IntegerField(write_only=True)
 
     class Meta:
@@ -81,9 +86,16 @@ def create(self, validated_data):
         return message
 
 
+class FriendInvitationSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = FriendInvitation
+        fields = "__all__"
+
+
 class GroupSerializer(serializers.ModelSerializer):
     class Meta:
         model = Group
+
         fields = "__all__"
 
 

src/chigame/api/urls.py

@@ -33,6 +33,24 @@
 ]
 
 urlpatterns = [
+    path(
+        "friend-invitations/send/<int:sender_pk>/<int:receiver_pk>/",
+        views.SendFriendInvitationView.as_view(),
+        name="send-friend-invitation",
+    ),
+    path(
+        "friend-invitations/accept/<int:invitation_pk>/",
+        views.AcceptFriendInvitationView.as_view(),
+        name="accept-friend-invitation",
+    ),
+    path("friend-invitations/", views.FriendInvitationList.as_view(), name="friend-invitation-list"),
+    path("user-profiles/create/<int:user_pk>/", views.UserProfileCreateView.as_view(), name="create-user-profile"),
+    path("user-profiles/", views.UserProfileListView.as_view(), name="user-profile-list"),
+    path(
+        "user-profiles/update/<int:user_profile_pk>/",
+        views.UserProfileUpdateView.as_view(),
+        name="update-user-profile",
+    ),
     path("games/", include(game_patterns)),
     path("lobbies/", include(lobby_patterns)),
     path("users/", include(user_patterns)),

src/chigame/api/views.py

@@ -9,19 +9,20 @@
 from chigame.api.filters import GameFilter
 from chigame.api.serializers import (
     CategorySerializer,
+    FriendInvitationSerializer,
     GameSerializer,
     GroupSerializer,
     LobbySerializer,
     MechanicSerializer,
     MessageFeedSerializer,
     MessageSerializer,
+    UserProfileSerializer,
     UserSerializer,
 )
-from chigame.games.models import Game, Lobby, Message, User
-from chigame.users.models import Group, UserProfile
+from chigame.games.models import Game, Lobby, Message
+from chigame.users.models import FriendInvitation, Group, User, UserProfile
 
 
-# Helper function to get user from slug
 def get_user(lookup_value):
     # If the lookup_value is an integer, use the id field
     if lookup_value.isdigit():
@@ -106,6 +107,73 @@ class MessageView(generics.CreateAPIView):
     serializer_class = MessageSerializer
 
 
+class SendFriendInvitationView(APIView):
+    def post(self, request, *args, **kwargs):
+        sender_pk = self.kwargs["sender_pk"]
+        receiver_pk = self.kwargs["receiver_pk"]
+        sender = get_object_or_404(User, pk=sender_pk)
+        receiver = get_object_or_404(User, pk=receiver_pk)
+        if sender == receiver:
+            return Response(
+                {"detail": "You cannot send an invitation to yourself."}, status=status.HTTP_400_BAD_REQUEST
+            )
+        invitation = FriendInvitation(sender=sender, receiver=receiver)
+        invitation.save()
+        serializer = FriendInvitationSerializer(invitation)
+        return Response(serializer.data, status=status.HTTP_201_CREATED)
+
+
+class AcceptFriendInvitationView(APIView):
+    def post(self, request, *args, **kwargs):
+        invitation_pk = self.kwargs["invitation_pk"]
+        invitation = get_object_or_404(FriendInvitation, pk=invitation_pk)
+        if invitation.accepted:
+            return Response(
+                {"detail": "This invitation has already been accepted."}, status=status.HTTP_400_BAD_REQUEST
+            )
+        invitation.accept_invitation()  # Error with this method in the users.models
+        serializer = FriendInvitationSerializer(invitation)
+        return Response(serializer.data, status=status.HTTP_200_OK)
+
+
+class FriendInvitationList(generics.ListAPIView):
+    queryset = FriendInvitation.objects.all()
+    serializer_class = FriendInvitationSerializer
+
+
+class UserProfileCreateView(APIView):
+    def post(self, request, *args, **kwargs):
+        user_pk = self.kwargs["user_pk"]
+        user = get_object_or_404(User, pk=user_pk)
+        existing_profile = UserProfile.objects.filter(user=user).first()
+        if existing_profile:
+            serializer = UserProfileSerializer(existing_profile)
+            return Response(serializer.data, status=status.HTTP_200_OK)
+
+        serializer = UserProfileSerializer(data=request.data)
+        if serializer.is_valid():
+            profile = serializer.save(user=user)
+            return Response(UserProfileSerializer(profile).data, status=status.HTTP_201_CREATED)
+        return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
+
+
+class UserProfileListView(generics.ListAPIView):
+    queryset = UserProfile.objects.all()
+    serializer_class = UserProfileSerializer
+
+
+class UserProfileUpdateView(APIView):
+    def patch(self, request, *args, **kwargs):
+        user_profile_pk = self.kwargs["user_profile_pk"]
+        user_profile = get_object_or_404(UserProfile, pk=user_profile_pk)
+
+        serializer = UserProfileSerializer(user_profile, data=request.data, partial=True)
+        if serializer.is_valid():
+            updated_profile = serializer.save()
+            return Response(UserProfileSerializer(updated_profile).data, status=status.HTTP_200_OK)
+        return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
+
+
 class GroupListView(generics.ListCreateAPIView):
     queryset = Group.objects.all()
     serializer_class = GroupSerializer

src/config/settings/base.py

@@ -78,6 +78,7 @@
     "django_filters",
     "django_tables2",
 ]
+
 THIRD_PARTY_APPS = [
     "crispy_forms",
     "crispy_bootstrap5",