Graham McIntire
c6d2c48264
Adds bearer-token authenticated REST API at /api/v1 covering every action a non-admin user can perform on the website: contact + beacon submission, beacon-monitor management, propagation queries, profile read/update, and self-service API token issuance/revocation. Security: SHA-256-hashed bearer tokens (mwp_ prefix, plaintext shown once at creation), RFC 9457 problem+json error responses, RFC 9651 RateLimit-* headers backed by an ETS bucket (600/min per token, 60/min per anonymous IP, 30/min on /auth/tokens), private-contact filtering by viewer. Docs at docs/api/README.md (prose reference) and docs/api/openapi.yaml (OpenAPI 3.1 spec covering every endpoint, response, and schema). Tests: 124 new tests across schema, plug, error renderer, rate limiter, fallback, and every controller. 16/17 API modules at 100% line coverage; FallbackController at 87.5% (one defmodule line, an Erlang-cover artifact for action_fallback-only modules).
32 lines
1 KiB
Elixir
32 lines
1 KiB
Elixir
defmodule MicrowavepropWeb.Api.V1.ProfileController do
|
|
@moduledoc "Public per-callsign user profile (no email exposed)."
|
|
|
|
use Phoenix.Controller, formats: [:json]
|
|
|
|
alias Microwaveprop.Accounts
|
|
alias Microwaveprop.Beacons
|
|
alias Microwaveprop.Radio
|
|
alias MicrowavepropWeb.Api.ErrorJSON
|
|
alias MicrowavepropWeb.Api.V1.BeaconJSON
|
|
alias MicrowavepropWeb.Api.V1.ContactJSON
|
|
alias MicrowavepropWeb.Api.V1.UserJSON
|
|
|
|
plug :accepts, ["json"]
|
|
|
|
def show(conn, %{"callsign" => callsign}) do
|
|
case Accounts.get_user_by_callsign(callsign) do
|
|
nil ->
|
|
ErrorJSON.send_problem(conn, 404, "not_found", "Callsign not registered.")
|
|
|
|
user ->
|
|
contacts = Radio.list_contacts_involving_callsign(user.callsign)
|
|
beacons = user |> Beacons.list_beacons_for_user() |> Enum.filter(& &1.approved)
|
|
|
|
json(conn, %{
|
|
user: UserJSON.public(user).data,
|
|
contacts: ContactJSON.index(%{contacts: contacts}).data,
|
|
beacons: BeaconJSON.index(%{beacons: beacons}).data
|
|
})
|
|
end
|
|
end
|
|
end
|