app.py

from flask import Flask, request
from database import (create_table, get_all_users, create_user, get_user_by_id, 
    update_user, patch_user, delete_user,search_users)
import os
from dotenv import load_dotenv

load_dotenv()

app = Flask(__name__)

API_KEY = os.getenv("API_KEY")

def check_api_key():
    api_key = request.headers.get("X-API-Key")

    if api_key != API_KEY:
        return False

    return True


create_table()

def valid_email(email):
    return "@" in email and "." in email


@app.route("/")
def home():
    return {
        "status": "success",
        "message": "User API is running",
        "version": "1.0"
    }


@app.route("/users", methods=["GET"])
def get_users():
    
    if not check_api_key():
        return {"error": "Invalid or missing API key"}, 401

    users = get_all_users()

    return {
        "users": users
    }, 200
    
@app.route("/users/search", methods=["GET"])
def search_users_api():

    if not check_api_key():
        return {"error": "Invalid or missing API key"}, 401

    query = request.args.get("q")

    if not query:
        return {"error": "Search query is required"}, 400

    query = query.strip()

    if not query:
        return {"error": "Search query cannot be empty"}, 400

    users = search_users(query)

    return {
        "query": query,
        "users": users
    }, 200
    
@app.route("/users/<int:user_id>", methods=["GET"])
def get_single_user(user_id):

    if not check_api_key():
        return {"error": "Invalid or missing API key"}, 401

    user = get_user_by_id(user_id)

    if user is None:
        return {
            "error": "User not found"
        }, 404

    return user, 200
    

@app.route("/users", methods=["POST"])
def add_user():

    if not check_api_key():
        return {"error": "Invalid or missing API key"}, 401

    data = request.get_json(silent=True)
    
    if not data:
        return {"error": "JSON data is required"}, 400
    
    name = data.get("name")
    email = data.get("email")
    
    if not name or not email:
        return {"error": "Name and email are required"}, 400
    
    name = name.strip()
    email = email.strip()
    
    if not valid_email(email):
        return {"error": "Invalid email address"}, 400

    if not name or not email:
        return {"error": "Name and email cannot be empty"}, 400
    
    user = create_user(name, email)
    
    if user is None:
        return {"error": "Email already exists"}, 409

    return user, 201


@app.route("/users/<int:user_id>", methods=["PUT"])
def update_user_api(user_id):

    if not check_api_key():
        return {"error": "Invalid or missing API key"}, 401

    data = request.get_json(silent=True)
    
    if not data:
        return {"error": "JSON data is required"}, 400
    
    name = data.get("name")
    email = data.get("email")
    
    if not name or not email:
        return {"error": "Name and email are required"}, 400
    
    name = name.strip()
    email = email.strip()
    
    if not name or not email:
        return {"error": "Name and email cannot be empty"}, 400


    user = update_user(user_id, name, email)

    if user == "not_found":
        return {"error": "User not found"}, 404

    if user == "duplicate_email":
        return {"error": "Email already exists"}, 409

    return user, 200


@app.route("/users/<int:user_id>", methods=["PATCH"])
def patch_user_api(user_id):

    if not check_api_key():
        return {"error": "Invalid or missing API key"}, 401

    data = request.get_json(silent=True)

    if not data:
        return {"error": "JSON data is required"}, 400

    name = data.get("name")
    email = data.get("email")

    if name is not None:
        name = name.strip()

    if email is not None:
        email = email.strip()

    if name == "" or email == "":
        return {"error": "Name and email cannot be empty"}, 400

    if name is None and email is None:
        return {"error": "Provide name or email"}, 400

    user = patch_user(user_id, name, email)

    if user == "not_found":
        return {"error": "User not found"}, 404

    if user == "duplicate_email":
        return {"error": "Email already exists"}, 409

    return user, 200


@app.route("/users/<int:user_id>", methods=["DELETE"])
def delete_user_api(user_id):

    if not check_api_key():
        return {"error": "Invalid or missing API key"}, 401

    user = delete_user(user_id)

    if user is None:
        return {"error": "User not found"}, 404

    return {
        "message": "User deleted successfully",
        "user": user
    }, 200
    
    
@app.errorhandler(404)
def not_found(error):

    return {
        "error": "Endpoint not found"
    }, 404
    
@app.errorhandler(405)
def method_not_allowed(error):

    return {
        "error": "Method not allowed"
    }, 405

@app.errorhandler(500)
def internal_server_error(error):

    return {
        "error": "Internal server error"
    }, 500
    
if __name__ == "__main__":
    app.run(debug=True)