7th Assignment Submission

comment/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

comment/apps.py

@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class CommentConfig(AppConfig):
+    default_auto_field = 'django.db.models.BigAutoField'
+    name = 'comment'

comment/migrations/0001_initial.py

@@ -0,0 +1,29 @@
+# Generated by Django 4.1.7 on 2023-05-05 12:16
+
+from django.conf import settings
+from django.db import migrations, models
+import django.db.models.deletion
+import django.utils.timezone
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('post', '0004_post_tags'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Comment',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('content', models.TextField()),
+                ('created_at', models.DateTimeField(default=django.utils.timezone.now)),
+                ('author', models.ForeignKey(null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)),
+                ('post', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='post.post')),
+            ],
+        ),
+    ]

comment/models.py

@@ -0,0 +1,11 @@
+from django.db import models
+from django.utils import timezone
+from django.contrib.auth.models import User
+from post.models import Post
+
+# Create your models here.
+class Comment(models.Model):
+    post = models.ForeignKey(Post, on_delete=models.CASCADE)
+    content = models.TextField()
+    author = models.ForeignKey(User, null=True, on_delete=models.CASCADE)
+    created_at = models.DateTimeField(default=timezone.now)

comment/serializers.py

@@ -0,0 +1,8 @@
+from rest_framework.serializers import ModelSerializer
+from .models import Comment
+
+
+class CommentSerializer(ModelSerializer):
+    class Meta:
+        model = Comment
+        fields = "__all__"

comment/tests.py

@@ -0,0 +1,3 @@
+from django.test import TestCase
+
+# Create your tests here.

comment/urls.py

@@ -0,0 +1,9 @@
+from django.urls import path
+from .views import CommentListView
+from .views import CommentDetailView
+
+app_name = 'comment'
+urlpatterns = [
+    path("", CommentListView.as_view()),
+    path("<int:comment_id>/", CommentDetailView.as_view()),
+    ]

comment/views.py

@@ -0,0 +1,97 @@
+from django.shortcuts import render
+from rest_framework import status
+from rest_framework.response import Response
+from rest_framework.decorators import api_view
+from rest_framework.views import APIView
+
+from post.models import Post
+from .models import Comment
+from .serializers import CommentSerializer
+
+
+# Create your views here.
+class CommentListView(APIView):
+# get, post
+    def get(self, request): 
+
+        if not 'post' in request.GET:
+            return Response({"detail": "missing fields ['post']"}, status=status.HTTP_400_BAD_REQUEST)
+
+        post_id = request.GET.get('post')
+
+        try:
+            post = Post.objects.get(id=post_id)
+        except:
+            return Response({"detail": "Not found."}, status=status.HTTP_404_NOT_FOUND)
+
+        comments = Comment.objects.filter(post=post_id)
+        serializer = CommentSerializer(comments, many=True)
+        return Response(serializer.data, status=status.HTTP_200_OK)
+
+    def post(self, request):
+        post_id = request.data.get('post')
+        content = request.data.get('content')
+        author = request.user
+
+        if not author.is_authenticated:
+            return Response({"detail": "Authentication credentials not provided"}, status=status.HTTP_401_UNAUTHORIZED)
+
+        if not post_id or not content:
+            return Response({"detail": "missing fields ['post', 'content']"}, status=status.HTTP_400_BAD_REQUEST)
+
+        try:
+            post = Post.objects.get(id=post_id)
+        except:
+            return Response({"detail": "Not found."}, status=status.HTTP_404_NOT_FOUND)
+
+        comment = Comment.objects.create(post=post, content=content, author=author)
+        serializer = CommentSerializer(comment)
+        return Response(serializer.data, status=status.HTTP_201_CREATED)
+
+
+#delete, put
+class CommentDetailView(APIView):
+
+    def delete(self, request, comment_id):
+
+        author = request.user
+
+        if not author.is_authenticated:
+            return Response({"detail": "Authentication credentials not provided"}, status=status.HTTP_401_UNAUTHORIZED)	
+
+        try:
+            comment = Comment.objects.get(id=comment_id)
+        except:
+            return Response({"detail": "Not found."}, status=status.HTTP_404_NOT_FOUND)
+
+        if request.user != comment.author:
+            return Response({"detail": "Permission denied"}, status=status.HTTP_401_UNAUTHORIZED)
+
+        comment.delete()
+        return Response(status=status.HTTP_204_NO_CONTENT)
+
+
+    def put(self, request, comment_id):
+
+        content = request.data.get('content')
+        author = request.user
+
+        try:
+            comment = Comment.objects.get(id=comment_id)
+        except:
+            return Response({"detail": "Not found."}, status=status.HTTP_404_NOT_FOUND)
+
+        if not author.is_authenticated:
+            return Response({"detail": "Authentication credentials not provided"}, status=status.HTTP_401_UNAUTHORIZED)	
+
+        if request.user != comment.author:
+            return Response({"detail": "Permission denied"}, status=status.HTTP_401_UNAUTHORIZED)
+
+        if not content:
+            return Response({"detail": "missing fields ['content']"}, status=status.HTTP_400_BAD_REQUEST)
+
+        serializer = CommentSerializer(comment, data=request.data, partial=True)
+        if not serializer.is_valid():
+            return Response({"detail": "data validation error"}, status=status.HTTP_400_BAD_REQUEST)
+        serializer.save()
+        return Response(serializer.data, status=status.HTTP_200_OK)

seminar/settings.py

@@ -51,6 +51,7 @@
     'post',
     'account',
     'tag',
+    'comment',
     'rest_framework_simplejwt',
     "rest_framework_simplejwt.token_blacklist",
 ]

seminar/urls.py

@@ -20,5 +20,6 @@
     path('admin/', admin.site.urls),
     path('api/post/', include('post.urls')),
     path('api/tag/', include('tag.urls')),
-    path('api/account/', include('account.urls'))
+    path('api/account/', include('account.urls')),
+    path('api/comment/', include('comment.urls'))
 ]