xmrauctions/items/views.py

from django.db.models import Q
from django.shortcuts import render, HttpResponseRedirect, reverse
from django.contrib.auth.decorators import login_required
from django.contrib.auth.models import User
from django.contrib import messages
from django.core.paginator import Paginator, EmptyPage, PageNotAnInteger
from django.forms import inlineformset_factory
from items.forms import CreateItemForm, SearchItemForm
from items.models import Item, ItemImage
from bids.models import ItemBid
from sales.models import ItemSale


def list_items(request):
    page_query = request.GET.get('page', 1)
    mine_query = request.GET.get('mine')
    search_form = SearchItemForm(request.GET or None)

    # If the 'mine_query' query string is present, show the user's items
    if mine_query and request.user.is_authenticated:
        item_list = Item.objects.filter(owner=request.user).order_by('-list_date')
    # If 'search_form' query string is present, retrieve matches containing it's data
    elif search_form.is_valid():
        search_form.process()
        item_list = Item.objects.filter(
            Q(name__icontains=search_form.cleaned_data.get('search')) |
            Q(whereabouts__icontains=search_form.cleaned_data.get('search')) |
            Q(description__icontains=search_form.cleaned_data.get('search'))
        )
    else:
        item_list = Item.objects.all().order_by('-list_date')

    paginator = Paginator(item_list, 20)

    try:
        items = paginator.page(page_query)
    except PageNotAnInteger:
        items = paginator.page(1)
    except EmptyPage:
        items = paginator.page(paginator.num_pages)

    context = {
        'items': items,
        'search_form': search_form
    }

    return render(request, 'items/list_items.html', context)

def get_item(request, item_id):
    item = Item.objects.get(id=item_id)
    item_images = item.images.all()
    item_bids = item.bids.all().order_by('-bid_price_xmr')
    sale = ItemSale.objects.filter(bid__in=item_bids, sale_cancelled=False).first()

    context = {
        'item': item,
        'item_images': item_images,
        'item_bids': item_bids,
        'sale': sale
    }

    return render(request, 'items/get_item.html', context)

@login_required
def create_item(request):
    ItemImageFormSet = inlineformset_factory(Item, ItemImage, fields=('image',))

    if request.method == 'POST':
        form = CreateItemForm(request.POST)
        if form.is_valid():
            new_item = form.save(commit=False)
            new_item.owner = request.user
            formset = ItemImageFormSet(request.POST, request.FILES, instance=new_item)
            if formset.is_valid():
                new_item.save()
                formset.save()
                return HttpResponseRedirect(reverse('get_item', args=[new_item.id]))
            else:
                messages.error(request, "Unable to save images.")
                for err in formset.errors:
                    messages.error(request, err)
                return HttpResponseRedirect(reverse('create_item'))
        else:
            form_errors = form.errors.get_json_data()
            for err in form_errors:
                err_data = form_errors[err][0]
                messages.error(request, f'{err}: {err_data["message"]}')

    context = {
        'form': CreateItemForm(request.POST or None),
        'formset': ItemImageFormSet()
    }

    return render(request, 'items/create_item.html', context)

@login_required
def edit_item(request, item_id):
    item = Item.objects.get(id=item_id)
    ItemImageFormSet = inlineformset_factory(Item, ItemImage, fields=('image',))

    # Do not allow editing if current user is not the owner
    if request.user != item.owner:
        messages.error(request, "You can't edit an item you didn't post.")
        return HttpResponseRedirect(reverse('get_item', args=[item_id]))

    # Do not allow editing if item is not available
    if item.available is False:
        messages.error(request, "You can't edit an item that is pending sale.")
        return HttpResponseRedirect(reverse('get_item', args=[item_id]))

    if request.method == 'POST':
        form = CreateItemForm(request.POST, instance=item)
        if form.is_valid():
            saved_item = form.save(commit=False)
            formset = ItemImageFormSet(request.POST, request.FILES, instance=saved_item)
            if formset.is_valid():
                saved_item.save()
                formset.save()
                return HttpResponseRedirect(reverse('get_item', args=[item_id]))
            else:
                messages.error(request, "Unable to save images.")
                for err in formset.errors:
                    messages.error(request, err)
                return HttpResponseRedirect(reverse('get_item', args=[item_id]))
        else:
            form_errors = form.errors.get_json_data()
            for err in form_errors:
                err_data = form_errors[err][0]
                messages.error(request, f'{err}: {err_data["message"]}')

    context = {
        'form': CreateItemForm(instance=item),
        'formset': ItemImageFormSet(instance=item)
    }

    return render(request, 'items/edit_item.html', context)

@login_required
def delete_item(request, item_id):
    item = Item.objects.get(id=item_id)

    # Do not allow deleting if current user is not the owner
    if request.user != item.owner:
        messages.error(request, "You can't delete an item you didn't post.")
        return HttpResponseRedirect(reverse('get_item', args=[item_id]))

    # Do not allow deleting if item is not available
    if item.available is False:
        messages.error(request, "You can't delete an item that is pending sale.")
        return HttpResponseRedirect(reverse('get_item', args=[item_id]))

    item.delete()
    messages.success(request, f"Item #{item_id}, \"{item.name}\", deleted!")
    return HttpResponseRedirect(reverse('list_items'))