feat(purchase): 新增采购申请模块后端（模型+Service+API路由）
This commit is contained in:
202
inventory-backend/app/api/v1/purchase.py
Normal file
202
inventory-backend/app/api/v1/purchase.py
Normal file
@ -0,0 +1,202 @@
|
||||
import traceback
|
||||
from flask import Blueprint, request, jsonify, current_app
|
||||
from flask_jwt_extended import jwt_required, get_jwt_identity
|
||||
from app.services.purchase_service import PurchaseService
|
||||
from app.utils.decorators import permission_required
|
||||
|
||||
purchase_bp = Blueprint('purchase', __name__, url_prefix='/api/v1/purchase')
|
||||
|
||||
|
||||
def get_current_user_id():
|
||||
"""获取当前登录用户ID"""
|
||||
identity = get_jwt_identity()
|
||||
return identity
|
||||
|
||||
|
||||
def get_current_user_role():
|
||||
"""获取当前用户角色"""
|
||||
from flask_jwt_extended import get_jwt
|
||||
claims = get_jwt()
|
||||
return claims.get('role')
|
||||
|
||||
|
||||
# --------------------------------------------------------
|
||||
# 1. 采购申请列表
|
||||
# GET /api/v1/purchase
|
||||
# --------------------------------------------------------
|
||||
@purchase_bp.route('', methods=['GET'])
|
||||
@jwt_required()
|
||||
def get_purchase_list():
|
||||
"""获取采购申请列表"""
|
||||
try:
|
||||
page = int(request.args.get('page', 1))
|
||||
per_page = int(request.args.get('limit', 20))
|
||||
status = request.args.get('status')
|
||||
status = int(status) if status is not None else None
|
||||
|
||||
user_id = get_current_user_id()
|
||||
role = get_current_user_role()
|
||||
|
||||
# 普通用户（SUPERVISOR 和 SUPER_ADMIN 除外）只看自己提交的
|
||||
is_admin = role in ('SUPERVISOR', 'SUPER_ADMIN')
|
||||
|
||||
result = PurchaseService.get_purchase_list(
|
||||
page=page,
|
||||
per_page=per_page,
|
||||
requester_id=None if is_admin else user_id,
|
||||
status=status
|
||||
)
|
||||
|
||||
return jsonify({'code': 200, 'msg': '获取成功', 'data': result})
|
||||
except Exception as e:
|
||||
traceback.print_exc()
|
||||
return jsonify({'code': 500, 'msg': f'获取失败: {str(e)}'}), 500
|
||||
|
||||
|
||||
# --------------------------------------------------------
|
||||
# 2. 创建采购申请
|
||||
# POST /api/v1/purchase
|
||||
# --------------------------------------------------------
|
||||
@purchase_bp.route('', methods=['POST'])
|
||||
@jwt_required()
|
||||
def create_purchase_request():
|
||||
"""创建采购申请"""
|
||||
try:
|
||||
data = request.get_json()
|
||||
if not data:
|
||||
return jsonify({'code': 400, 'msg': '无有效数据'}), 400
|
||||
|
||||
user_id = get_current_user_id()
|
||||
|
||||
# 必填校验
|
||||
required = ['name', 'quantity', 'purchase_date', 'approver_id']
|
||||
for field in required:
|
||||
if field not in data or str(data.get(field, '')).strip() == '':
|
||||
return jsonify({'code': 400, 'msg': f'缺少必填字段: {field}'}), 400
|
||||
|
||||
purchase = PurchaseService.create_purchase_request(data, requester_id=user_id)
|
||||
|
||||
return jsonify({
|
||||
'code': 200,
|
||||
'msg': '创建成功',
|
||||
'data': purchase.to_dict()
|
||||
}), 200
|
||||
|
||||
except ValueError as e:
|
||||
return jsonify({'code': 400, 'msg': str(e)}), 400
|
||||
except Exception as e:
|
||||
traceback.print_exc()
|
||||
return jsonify({'code': 500, 'msg': f'服务器内部错误: {str(e)}'}), 500
|
||||
|
||||
|
||||
# --------------------------------------------------------
|
||||
# 3. 获取采购申请详情
|
||||
# GET /api/v1/purchase/<id>
|
||||
# --------------------------------------------------------
|
||||
@purchase_bp.route('/<int:purchase_id>', methods=['GET'])
|
||||
@jwt_required()
|
||||
def get_purchase_detail(purchase_id):
|
||||
"""获取采购申请详情"""
|
||||
try:
|
||||
purchase = PurchaseService.get_purchase_by_id(purchase_id)
|
||||
if not purchase:
|
||||
return jsonify({'code': 404, 'msg': '采购申请不存在'}), 404
|
||||
|
||||
# 普通用户只能看自己的
|
||||
user_id = get_current_user_id()
|
||||
role = get_current_user_role()
|
||||
is_admin = role in ('SUPERVISOR', 'SUPER_ADMIN')
|
||||
if not is_admin and purchase['requester_id'] != user_id:
|
||||
return jsonify({'code': 403, 'msg': '无权查看此申请'}), 403
|
||||
|
||||
return jsonify({'code': 200, 'msg': '获取成功', 'data': purchase}), 200
|
||||
except Exception as e:
|
||||
return jsonify({'code': 500, 'msg': str(e)}), 500
|
||||
|
||||
|
||||
# --------------------------------------------------------
|
||||
# 4. 审批采购申请
|
||||
# PATCH /api/v1/purchase/<id>/approve
|
||||
# --------------------------------------------------------
|
||||
@purchase_bp.route('/<int:purchase_id>/approve', methods=['PATCH'])
|
||||
@jwt_required()
|
||||
def approve_purchase_request(purchase_id):
|
||||
"""审批采购申请"""
|
||||
try:
|
||||
user_id = get_current_user_id()
|
||||
role = get_current_user_role()
|
||||
|
||||
if role not in ('SUPERVISOR', 'SUPER_ADMIN'):
|
||||
return jsonify({'code': 403, 'msg': '只有主管或超级管理员可以审批'}), 403
|
||||
|
||||
data = request.get_json() or {}
|
||||
action = data.get('action', 'approve')
|
||||
reject_reason = data.get('reject_reason')
|
||||
|
||||
if action not in ('approve', 'reject'):
|
||||
return jsonify({'code': 400, 'msg': '无效的审批操作'}), 400
|
||||
|
||||
if action == 'reject' and not reject_reason:
|
||||
return jsonify({'code': 400, 'msg': '驳回时必须提供原因'}), 400
|
||||
|
||||
purchase = PurchaseService.approve_purchase_request(
|
||||
purchase_id=purchase_id,
|
||||
user_id=user_id,
|
||||
action=action,
|
||||
reject_reason=reject_reason
|
||||
)
|
||||
|
||||
msg = '审批通过' if action == 'approve' else '已驳回'
|
||||
return jsonify({'code': 200, 'msg': msg, 'data': purchase.to_dict()}), 200
|
||||
|
||||
except ValueError as e:
|
||||
return jsonify({'code': 400, 'msg': str(e)}), 400
|
||||
except Exception as e:
|
||||
traceback.print_exc()
|
||||
return jsonify({'code': 500, 'msg': f'服务器内部错误: {str(e)}'}), 500
|
||||
|
||||
|
||||
# --------------------------------------------------------
|
||||
# 5. 获取可选审批人列表
|
||||
# GET /api/v1/purchase/approvers
|
||||
# --------------------------------------------------------
|
||||
@purchase_bp.route('/approvers', methods=['GET'])
|
||||
@jwt_required()
|
||||
def get_purchase_approvers():
|
||||
"""获取可选审批人列表（主管+超管）"""
|
||||
try:
|
||||
from app.models.system import SysUser
|
||||
users = SysUser.query.filter(
|
||||
SysUser.role.in_(['SUPER_ADMIN', 'SUPERVISOR']),
|
||||
SysUser.status == 'active'
|
||||
).all()
|
||||
|
||||
return jsonify({
|
||||
'code': 200,
|
||||
'msg': '获取成功',
|
||||
'data': [
|
||||
{'id': u.id, 'username': u.username, 'email': u.email or '', 'role': u.role}
|
||||
for u in users
|
||||
]
|
||||
}), 200
|
||||
except Exception as e:
|
||||
return jsonify({'code': 500, 'msg': str(e)}), 500
|
||||
|
||||
|
||||
# --------------------------------------------------------
|
||||
# 6. 根据名称/规格自动补全
|
||||
# GET /api/v1/purchase/auto-fill?keyword=xxx
|
||||
# --------------------------------------------------------
|
||||
@purchase_bp.route('/auto-fill', methods=['GET'])
|
||||
@jwt_required()
|
||||
def auto_fill_purchase():
|
||||
"""根据名称或规格自动补全另一个字段"""
|
||||
try:
|
||||
keyword = request.args.get('keyword', '').strip()
|
||||
if not keyword:
|
||||
return jsonify({'code': 200, 'msg': 'ok', 'data': None}), 200
|
||||
|
||||
result = PurchaseService.auto_fill_from_material(keyword)
|
||||
return jsonify({'code': 200, 'msg': 'ok', 'data': result}), 200
|
||||
except Exception as e:
|
||||
return jsonify({'code': 500, 'msg': str(e)}), 500
|
||||
Reference in New Issue
Block a user