Emil_Shanaty/CU_Points
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add partner interface, admin dashboard, and unit tests

Browse Source 
Partner flow: QR scanner component (html5-qrcode) with camera
permission/not-found handling, 3-step spend flow (scan → amount
entry with auto-filled max → success/error result).

Admin dashboard: stats overview, grant points with debounced
student search, paginated transactions table with type filters,
paginated students table.

Tests: comprehensive unit tests for points and auth packages —
service (all paths including error branches, RS256 wrong-method),
handler (all HTTP status codes via httptest), JWT round-trip,
repository constructors. Auth coverage: 72.9%, points service
coverage: 100%.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
emil
2026-05-01 16:41:17 +03:00
co-authored by Claude Sonnet 4.6
parent 50b3c4198a
commit be2260d259
21 changed files with 2259 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/internal/admin/handler.go
+27 -6
View File
@@ -33,6 +33,12 @@ type transactionsResponse struct {
Total int `json:"total"`
}
// usersResponse is the JSON body returned by GET /api/v1/admin/users.
type usersResponse struct {
Users []Student `json:"users"`
Total int `json:"total"`
}
// GrantPoints handles POST /api/v1/admin/points/grant.
// Accepts {user_id, amount, description}; credits the student's balance.
// Requires role=admin.
@@ -62,8 +68,7 @@ func (h *Handler) GrantPoints(w http.ResponseWriter, r *http.Request) {
// ListTransactions handles GET /api/v1/admin/transactions.
// Returns all transactions in the system (paginated), newest first.
// Query params: limit (default 50, max 200), offset (default 0).
// Response: { "transactions": [...], "total": N }
// Query params: limit (default 50, max 200), offset (default 0), type (optional filter).
func (h *Handler) ListTransactions(w http.ResponseWriter, r *http.Request) {
limit := 50
offset := 0
@@ -77,8 +82,9 @@ func (h *Handler) ListTransactions(w http.ResponseWriter, r *http.Request) {
offset = n
}
}
txType := r.URL.Query().Get("type")
txs, total, err := h.service.ListTransactions(r.Context(), limit, offset)
txs, total, err := h.service.ListTransactions(r.Context(), limit, offset, txType)
if err != nil {
slog.Error("handler.ListTransactions", "err", err)
response.Error(w, http.StatusInternalServerError, "internal server error")
@@ -94,9 +100,24 @@ func (h *Handler) ListTransactions(w http.ResponseWriter, r *http.Request) {
}
// ListUsers handles GET /api/v1/admin/users.
// Returns all students with their current balances.
// Returns all students with balances, sorted by balance desc.
// Query params: search (optional, filters by email/name), limit (default 50), offset (default 0).
func (h *Handler) ListUsers(w http.ResponseWriter, r *http.Request) {
students, err := h.service.ListStudents(r.Context())
search := r.URL.Query().Get("search")
limit := 50
offset := 0
if v := r.URL.Query().Get("limit"); v != "" {
if n, err := strconv.Atoi(v); err == nil && n > 0 && n <= 200 {
limit = n
}
}
if v := r.URL.Query().Get("offset"); v != "" {
if n, err := strconv.Atoi(v); err == nil && n >= 0 {
offset = n
}
}
students, total, err := h.service.ListStudents(r.Context(), search, limit, offset)
if err != nil {
slog.Error("handler.ListUsers", "err", err)
response.Error(w, http.StatusInternalServerError, "internal server error")
@@ -105,7 +126,7 @@ func (h *Handler) ListUsers(w http.ResponseWriter, r *http.Request) {
if students == nil {
students = []Student{}
}
response.JSON(w, http.StatusOK, students)
response.JSON(w, http.StatusOK, usersResponse{Users: students, Total: total})
}
// Stats handles GET /api/v1/admin/stats.
backend/internal/admin/service.go
+98 -32
View File
@@ -22,7 +22,6 @@ func NewService(db *pgxpool.Pool, pointsSvc *points.Service) *Service {
}
// AdminTransaction is a transaction record as seen by an administrator.
// It includes the associated user email for quick identification.
type AdminTransaction struct {
ID string `json:"id"`
UserID string `json:"user_id"`
@@ -41,6 +40,7 @@ type Student struct {
Name string `json:"name"`
StudentID string `json:"student_id,omitempty"`
Balance int `json:"balance"`
CreatedAt string `json:"created_at"`
}
// Stats holds aggregated system metrics shown on the admin dashboard.
@@ -64,29 +64,57 @@ func (s *Service) GrantPoints(ctx context.Context, userID string, amount int, de
}
// ListTransactions returns a paginated slice of all transactions in the system
// (newest first) and the total row count for pagination metadata.
func (s *Service) ListTransactions(ctx context.Context, limit, offset int) ([]AdminTransaction, int, error) {
// (newest first) and the total row count. txType filters by transaction type when non-empty.
func (s *Service) ListTransactions(ctx context.Context, limit, offset int, txType string) ([]AdminTransaction, int, error) {
var total int
err := s.db.QueryRow(ctx, `SELECT COUNT(*) FROM transactions`).Scan(&total)
var err error
if txType != "" {
err = s.db.QueryRow(ctx, `SELECT COUNT(*) FROM transactions WHERE type = $1`, txType).Scan(&total)
} else {
err = s.db.QueryRow(ctx, `SELECT COUNT(*) FROM transactions`).Scan(&total)
}
if err != nil {
return nil, 0, fmt.Errorf("service.ListTransactions: count: %w", err)
}
rows, err := s.db.Query(ctx, `
SELECT t.id,
t.user_id,
u.email,
COALESCE(t.partner_id::text, ''),
t.amount,
t.type,
COALESCE(t.description, ''),
t.created_at
FROM transactions t
JOIN users u ON u.id = t.user_id
ORDER BY t.created_at DESC
LIMIT $1 OFFSET $2`,
limit, offset,
)
var query string
var args []any
if txType != "" {
query = `
SELECT t.id,
t.user_id,
u.email,
COALESCE(t.partner_id::text, ''),
t.amount,
t.type,
COALESCE(t.description, ''),
t.created_at
FROM transactions t
JOIN users u ON u.id = t.user_id
WHERE t.type = $3
ORDER BY t.created_at DESC
LIMIT $1 OFFSET $2`
args = []any{limit, offset, txType}
} else {
query = `
SELECT t.id,
t.user_id,
u.email,
COALESCE(t.partner_id::text, ''),
t.amount,
t.type,
COALESCE(t.description, ''),
t.created_at
FROM transactions t
JOIN users u ON u.id = t.user_id
ORDER BY t.created_at DESC
LIMIT $1 OFFSET $2`
args = []any{limit, offset}
}
rows, err := s.db.Query(ctx, query, args...)
if err != nil {
return nil, 0, fmt.Errorf("service.ListTransactions: query: %w", err)
}
@@ -107,31 +135,69 @@ func (s *Service) ListTransactions(ctx context.Context, limit, offset int) ([]Ad
return txs, total, nil
}
// ListStudents returns all users with role=student, ordered by name.
func (s *Service) ListStudents(ctx context.Context) ([]Student, error) {
rows, err := s.db.Query(ctx,
`SELECT id, email, name, COALESCE(student_id, ''), balance
FROM users
WHERE role = 'student'
ORDER BY name`,
)
// ListStudents returns students with optional search and pagination.
// search filters by email or name (case-insensitive); empty string returns all.
// Results are sorted by balance DESC when no search term, by name when searching.
func (s *Service) ListStudents(ctx context.Context, search string, limit, offset int) ([]Student, int, error) {
var total int
var err error
if search != "" {
err = s.db.QueryRow(ctx,
`SELECT COUNT(*) FROM users
WHERE role = 'student'
AND (email ILIKE '%' || $1 || '%' OR name ILIKE '%' || $1 || '%')`,
search,
).Scan(&total)
} else {
err = s.db.QueryRow(ctx,
`SELECT COUNT(*) FROM users WHERE role = 'student'`,
).Scan(&total)
}
if err != nil {
return nil, fmt.Errorf("service.ListStudents: %w", err)
return nil, 0, fmt.Errorf("service.ListStudents: count: %w", err)
}
var query string
var args []any
if search != "" {
query = `
SELECT id, email, name, COALESCE(student_id, ''), balance, created_at
FROM users
WHERE role = 'student'
AND (email ILIKE '%' || $1 || '%' OR name ILIKE '%' || $1 || '%')
ORDER BY name
LIMIT $2 OFFSET $3`
args = []any{search, limit, offset}
} else {
query = `
SELECT id, email, name, COALESCE(student_id, ''), balance, created_at
FROM users
WHERE role = 'student'
ORDER BY balance DESC
LIMIT $1 OFFSET $2`
args = []any{limit, offset}
}
rows, err := s.db.Query(ctx, query, args...)
if err != nil {
return nil, 0, fmt.Errorf("service.ListStudents: query: %w", err)
}
defer rows.Close()
var students []Student
for rows.Next() {
var st Student
if err := rows.Scan(&st.ID, &st.Email, &st.Name, &st.StudentID, &st.Balance); err != nil {
return nil, fmt.Errorf("service.ListStudents: scan: %w", err)
if err := rows.Scan(&st.ID, &st.Email, &st.Name, &st.StudentID, &st.Balance, &st.CreatedAt); err != nil {
return nil, 0, fmt.Errorf("service.ListStudents: scan: %w", err)
}
students = append(students, st)
}
if err := rows.Err(); err != nil {
return nil, fmt.Errorf("service.ListStudents: rows: %w", err)
return nil, 0, fmt.Errorf("service.ListStudents: rows: %w", err)
}
return students, nil
return students, total, nil
}
// GetStats returns aggregated system statistics for the admin dashboard.