bssapp/svc/routes/orders.go

package routes

import (
	"bssapp-backend/auth"
	"bssapp-backend/models"
	"bssapp-backend/queries"
	"bssapp-backend/utils"
	"database/sql"
	"encoding/json"
	"errors"
	"fmt"
	"net/http"

	"github.com/gorilla/mux"
)

// ================================
// POST /api/order/update
// ================================
func UpdateOrderHandler(w http.ResponseWriter, r *http.Request) {

	// --------------------------------------------------
	// 1️⃣ JWT CLAIMS (TEK KAYNAK)
	// --------------------------------------------------
	claims, ok := auth.GetClaimsFromContext(r.Context())
	if !ok || claims == nil {
		http.Error(w, "unauthorized", http.StatusUnauthorized)
		return
	}

	user := utils.UserFromClaims(claims)

	if !ok || claims == nil {
		http.Error(w, "Kullanıcı doğrulanamadı", http.StatusUnauthorized)
		return
	}

	user = utils.UserFromClaims(claims)
	if user == nil {
		http.Error(w, "Kullanıcı doğrulanamadı", http.StatusUnauthorized)
		return
	}

	// --------------------------------------------------
	// 2️⃣ REQUEST BODY
	// --------------------------------------------------
	var payload struct {
		Header models.OrderHeader   `json:"header"`
		Lines  []models.OrderDetail `json:"lines"`
	}

	if err := json.NewDecoder(r.Body).Decode(&payload); err != nil {
		http.Error(w, "Geçersiz JSON", http.StatusBadRequest)
		return
	}

	// --------------------------------------------------
	// 3️⃣ UPDATE
	// --------------------------------------------------
	results, err := queries.UpdateOrder(
		payload.Header,
		payload.Lines,
		user, // ✅ *models.User
	)

	if err != nil {

		// ✅ VALIDATION ERROR
		var vErr *models.ValidationError
		if errors.As(err, &vErr) {
			w.Header().Set("Content-Type", "application/json")
			w.WriteHeader(http.StatusBadRequest)
			_ = json.NewEncoder(w).Encode(vErr)
			return
		}

		// ❌ SYSTEM ERROR
		utils.LogError("ORDER_UPDATE", err)

		w.WriteHeader(http.StatusInternalServerError)
		_ = json.NewEncoder(w).Encode(map[string]any{
			"code":    "ORDER_UPDATE_FAILED",
			"message": "Sipariş kaydedilirken beklenmeyen bir hata oluştu.",
		})
		return
	}

	// --------------------------------------------------
	// 4️⃣ RESPONSE
	// --------------------------------------------------
	w.Header().Set("Content-Type", "application/json")
	_ = json.NewEncoder(w).Encode(map[string]any{
		"success": true,
		"lines":   results,
	})
}

// -------------------------------------------------------------
// 🟩 CREATE — /api/order/create
// -------------------------------------------------------------
func CreateOrderHandler(pg *sql.DB, mssql *sql.DB) http.HandlerFunc {
	return func(w http.ResponseWriter, r *http.Request) {

		w.Header().Set("Content-Type", "application/json; charset=utf-8")

		// --------------------------------------------------
		// JWT CLAIMS
		// --------------------------------------------------
		claims, ok := auth.GetClaimsFromContext(r.Context())
		if !ok || claims == nil {
			http.Error(w, "unauthorized", http.StatusUnauthorized)
			return
		}

		user := utils.UserFromClaims(claims)

		if !ok || claims == nil {
			http.Error(w, "Yetkisiz", http.StatusUnauthorized)
			return
		}

		user = utils.UserFromClaims(claims)
		if user == nil {
			http.Error(w, "Yetkisiz", http.StatusUnauthorized)
			return
		}

		var payload struct {
			Header models.OrderHeader   `json:"header"`
			Lines  []models.OrderDetail `json:"lines"`
		}

		if err := json.NewDecoder(r.Body).Decode(&payload); err != nil {
			http.Error(w, "Geçersiz JSON", http.StatusBadRequest)
			return
		}

		// --------------------------------------------------
		// INSERT
		// --------------------------------------------------
		newID, lineResults, err := queries.InsertOrder(
			payload.Header,
			payload.Lines,
			user, // ✅ *models.User
		)

		if err != nil {

			var vErr *models.ValidationError
			if errors.As(err, &vErr) {
				w.Header().Set("Content-Type", "application/json")
				w.WriteHeader(http.StatusBadRequest)
				_ = json.NewEncoder(w).Encode(vErr)
				return
			}

			http.Error(w, err.Error(), http.StatusInternalServerError)
			return
		}

		orderNo := ""
		if payload.Header.OrderNumber.Valid {
			orderNo = payload.Header.OrderNumber.String
		}

		// --------------------------------------------------
		// RESPONSE
		// --------------------------------------------------
		_ = json.NewEncoder(w).Encode(map[string]any{
			"status":      "success",
			"orderID":     newID,
			"orderNumber": orderNo,
			"lineResults": lineResults,
		})
	}
}

// -------------------------------------------------------------
// 🟨 GET BY ID — /api/order/get/{id}
// -------------------------------------------------------------
func GetOrderByIDHandler(mssql *sql.DB) http.HandlerFunc {

	return func(w http.ResponseWriter, r *http.Request) {

		w.Header().Set("Content-Type", "application/json; charset=utf-8")

		orderID := mux.Vars(r)["id"]
		if orderID == "" {
			http.Error(w, "Eksik parametre: id", http.StatusBadRequest)
			return
		}

		fmt.Printf("📦 /api/order/get/%s çağrıldı\n", orderID)

		header, lines, err := queries.GetOrderByID(orderID)

		switch {
		case errors.Is(err, sql.ErrNoRows):
			http.Error(w, fmt.Sprintf("Sipariş bulunamadı: %s", orderID), http.StatusNotFound)
			return

		case err != nil:
			http.Error(w, fmt.Sprintf("Veritabanı hatası: %v", err), http.StatusInternalServerError)
			return

		default:
			_ = json.NewEncoder(w).Encode(map[string]any{
				"header": header,
				"lines":  lines,
			})
		}
	}
}

// -------------------------------------------------------------
// 🔎 ORDER EXISTS — /api/order/check/{id}
// -------------------------------------------------------------
func OrderExistsHandler(db *sql.DB) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {

		id := mux.Vars(r)["id"]

		var count int
		err := db.QueryRow(`
			SELECT COUNT(*)
			FROM trOrderHeader
			WHERE OrderHeaderID = @p1
		`, id).Scan(&count)

		if err != nil {
			http.Error(w, "db error", http.StatusInternalServerError)
			return
		}

		_ = json.NewEncoder(w).Encode(map[string]any{
			"exists": count > 0,
		})
	})
}