feat: add nested resource routers for zones, interfaces, policies, rules, masq

backend/app/api/rules.py

@@ -0,0 +1,64 @@
+from fastapi import APIRouter, Depends, HTTPException
+from sqlalchemy.orm import Session
+from app import models, schemas
+from app.auth import get_current_user
+from app.database import get_db
+
+router = APIRouter()
+
+
+def _owner_config(config_id: int, db: Session, user: models.User) -> models.Config:
+    config = db.query(models.Config).filter(
+        models.Config.id == config_id, models.Config.owner_id == user.id
+    ).first()
+    if not config:
+        raise HTTPException(status_code=404, detail="Config not found")
+    return config
+
+
+@router.get("/{config_id}/rules", response_model=list[schemas.RuleOut])
+def list_rules(config_id: int, db: Session = Depends(get_db), user: models.User = Depends(get_current_user)):
+    _owner_config(config_id, db, user)
+    return db.query(models.Rule).filter(models.Rule.config_id == config_id).order_by(models.Rule.position).all()
+
+
+@router.post("/{config_id}/rules", response_model=schemas.RuleOut, status_code=201)
+def create_rule(config_id: int, body: schemas.RuleCreate, db: Session = Depends(get_db), user: models.User = Depends(get_current_user)):
+    _owner_config(config_id, db, user)
+    rule = models.Rule(**body.model_dump(), config_id=config_id)
+    db.add(rule)
+    db.commit()
+    db.refresh(rule)
+    return rule
+
+
+@router.get("/{config_id}/rules/{rule_id}", response_model=schemas.RuleOut)
+def get_rule(config_id: int, rule_id: int, db: Session = Depends(get_db), user: models.User = Depends(get_current_user)):
+    _owner_config(config_id, db, user)
+    rule = db.query(models.Rule).filter(models.Rule.id == rule_id, models.Rule.config_id == config_id).first()
+    if not rule:
+        raise HTTPException(status_code=404, detail="Rule not found")
+    return rule
+
+
+@router.put("/{config_id}/rules/{rule_id}", response_model=schemas.RuleOut)
+def update_rule(config_id: int, rule_id: int, body: schemas.RuleUpdate, db: Session = Depends(get_db), user: models.User = Depends(get_current_user)):
+    _owner_config(config_id, db, user)
+    rule = db.query(models.Rule).filter(models.Rule.id == rule_id, models.Rule.config_id == config_id).first()
+    if not rule:
+        raise HTTPException(status_code=404, detail="Rule not found")
+    for field, value in body.model_dump(exclude_none=True).items():
+        setattr(rule, field, value)
+    db.commit()
+    db.refresh(rule)
+    return rule
+
+
+@router.delete("/{config_id}/rules/{rule_id}", status_code=204)
+def delete_rule(config_id: int, rule_id: int, db: Session = Depends(get_db), user: models.User = Depends(get_current_user)):
+    _owner_config(config_id, db, user)
+    rule = db.query(models.Rule).filter(models.Rule.id == rule_id, models.Rule.config_id == config_id).first()
+    if not rule:
+        raise HTTPException(status_code=404, detail="Rule not found")
+    db.delete(rule)
+    db.commit()