import uuid from fastapi import APIRouter, Depends, HTTPException, status from sqlalchemy.orm import Session from app.core.database import get_db from app.core.deps import get_current_user from app.models.user import Student, User from app.schemas import StudentCreate, StudentOut, StudentUpdate from app.services.student_access import get_student_for_user router = APIRouter(prefix="/students", tags=["students"]) @router.get("", response_model=list[StudentOut]) def list_students( db: Session = Depends(get_db), current_user: User = Depends(get_current_user), ): return ( db.query(Student) .filter(Student.user_id == current_user.id) .order_by(Student.created_at.desc()) .all() ) @router.post("", response_model=StudentOut, status_code=status.HTTP_201_CREATED) def create_student( data: StudentCreate, db: Session = Depends(get_db), current_user: User = Depends(get_current_user), ): student = Student(user_id=current_user.id, **data.model_dump()) db.add(student) db.commit() db.refresh(student) return student @router.get("/{student_id}", response_model=StudentOut) def get_student( student_id: uuid.UUID, db: Session = Depends(get_db), current_user: User = Depends(get_current_user), ): return get_student_for_user(db, student_id, current_user.id) @router.patch("/{student_id}", response_model=StudentOut) def update_student( student_id: uuid.UUID, data: StudentUpdate, db: Session = Depends(get_db), current_user: User = Depends(get_current_user), ): student = get_student_for_user(db, student_id, current_user.id) for key, value in data.model_dump(exclude_unset=True).items(): setattr(student, key, value) db.commit() db.refresh(student) return student @router.delete("/{student_id}", status_code=status.HTTP_204_NO_CONTENT) def delete_student( student_id: uuid.UUID, db: Session = Depends(get_db), current_user: User = Depends(get_current_user), ): student = get_student_for_user(db, student_id, current_user.id) db.delete(student) db.commit()