chore: build

backend/internal/modules/orders/handler.go

@@ -9,6 +9,7 @@ import (
 
 	"backend/internal/modules/pricing"
 	"backend/internal/modules/products"
+	"backend/internal/platform/middleware"
 )
 
 type Handler struct {
@@ -48,7 +49,6 @@ type orderResponse struct {
 	CustomerName  string              `json:"customer_name"`
 	CustomerEmail string              `json:"customer_email"`
 	CustomerPhone string              `json:"customer_phone"`
-	Status        string              `json:"status"`
 	TotalCents    int64               `json:"total_cents"`
 	Notes         string              `json:"notes"`
 	Items         []orderItemResponse `json:"items,omitempty"`
@@ -60,7 +60,6 @@ func toResponse(order *Order, items []*OrderItem) orderResponse {
 		CustomerName:  order.CustomerName,
 		CustomerEmail: order.CustomerEmail,
 		CustomerPhone: order.CustomerPhone,
-		Status:        order.Status,
 		TotalCents:    order.TotalCents,
 		Notes:         order.Notes,
 	}
@@ -78,8 +77,10 @@ func toResponse(order *Order, items []*OrderItem) orderResponse {
 	return resp
 }
 
-// Create is public: a visitor (connected or not, per spec section 17) can
-// place an order without an account.
+// Create is gated by RequireAccountsEnabled/RequireCustomer/
+// RequireApprovedVerificationIfNeeded (see routes.go): rejected outright
+// until the admin enables customer accounts, then requires a logged-in
+// customer (and an approved verification too, if that's also required).
 func (h *Handler) Create(c *gin.Context) {
 	var req createRequest
 	if err := c.ShouldBindJSON(&req); err != nil {
@@ -96,7 +97,13 @@ func (h *Handler) Create(c *gin.Context) {
 		})
 	}
 
+	var customerID *uuid.UUID
+	if uid, ok := middleware.GetUserID(c); ok {
+		customerID = &uid
+	}
+
 	order, orderItems, err := h.service.Create(c.Request.Context(), CreateInput{
+		CustomerID:    customerID,
 		CustomerName:  req.CustomerName,
 		CustomerEmail: req.CustomerEmail,
 		CustomerPhone: req.CustomerPhone,
@@ -110,6 +117,25 @@ func (h *Handler) Create(c *gin.Context) {
 	c.JSON(http.StatusCreated, toResponse(order, orderItems))
 }
 
+// ListMine returns the authenticated customer's own order history.
+func (h *Handler) ListMine(c *gin.Context) {
+	userID, ok := middleware.GetUserID(c)
+	if !ok {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "unauthorized"})
+		return
+	}
+	list, err := h.service.ListByCustomer(c.Request.Context(), userID)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to list orders"})
+		return
+	}
+	resp := make([]orderResponse, 0, len(list))
+	for _, order := range list {
+		resp = append(resp, toResponse(order, nil))
+	}
+	c.JSON(http.StatusOK, gin.H{"orders": resp})
+}
+
 func (h *Handler) respondCreateError(c *gin.Context, err error) {
 	switch {
 	case errors.Is(err, ErrEmptyOrder), errors.Is(err, ErrProductMismatch):
@@ -123,19 +149,6 @@ func (h *Handler) respondCreateError(c *gin.Context, err error) {
 	}
 }
 
-func (h *Handler) ListAdmin(c *gin.Context) {
-	list, err := h.service.List(c.Request.Context(), c.Query("status"))
-	if err != nil {
-		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to list orders"})
-		return
-	}
-	resp := make([]orderResponse, 0, len(list))
-	for _, order := range list {
-		resp = append(resp, toResponse(order, nil))
-	}
-	c.JSON(http.StatusOK, gin.H{"orders": resp})
-}
-
 func (h *Handler) GetAdmin(c *gin.Context) {
 	id, err := uuid.Parse(c.Param("id"))
 	if err != nil {
@@ -154,32 +167,16 @@ func (h *Handler) GetAdmin(c *gin.Context) {
 	c.JSON(http.StatusOK, toResponse(order, items))
 }
 
-type updateStatusRequest struct {
-	Status string `json:"status" binding:"required"`
-}
-
-func (h *Handler) UpdateStatus(c *gin.Context) {
-	id, err := uuid.Parse(c.Param("id"))
+// ListAdmin returns every order, most recent first.
+func (h *Handler) ListAdmin(c *gin.Context) {
+	list, err := h.service.List(c.Request.Context())
 	if err != nil {
-		c.JSON(http.StatusBadRequest, gin.H{"error": "invalid id"})
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to list orders"})
 		return
 	}
-	var req updateStatusRequest
-	if err := c.ShouldBindJSON(&req); err != nil {
-		c.JSON(http.StatusBadRequest, gin.H{"error": "validation error", "details": err.Error()})
-		return
+	resp := make([]orderResponse, 0, len(list))
+	for _, order := range list {
+		resp = append(resp, toResponse(order, nil))
 	}
-	order, err := h.service.UpdateStatus(c.Request.Context(), id, req.Status)
-	if err != nil {
-		switch {
-		case errors.Is(err, ErrNotFound):
-			c.JSON(http.StatusNotFound, gin.H{"error": "order not found"})
-		case errors.Is(err, ErrInvalidStatus):
-			c.JSON(http.StatusBadRequest, gin.H{"error": "invalid status"})
-		default:
-			c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to update order status"})
-		}
-		return
-	}
-	c.JSON(http.StatusOK, toResponse(order, nil))
+	c.JSON(http.StatusOK, gin.H{"orders": resp})
 }