about summary refs log tree commit diff stats
path: root/crates/rocie-server/src/api/set.rs
diff options
context:
space:
mode:
authorBenedikt Peetz <benedikt.peetz@b-peetz.de>2025-09-06 18:31:40 +0200
committerBenedikt Peetz <benedikt.peetz@b-peetz.de>2025-09-06 18:31:40 +0200
commit1c09b0eb5db415985bfefb52786dbe48d757665e (patch)
treedb1cdbcff8baae9a73fca34e14b52cb8cf7ff230 /crates/rocie-server/src/api/set.rs
parentfeat: Provide basic API frame (diff)
downloadserver-1c09b0eb5db415985bfefb52786dbe48d757665e.zip
feat: Provide basic barcode handling support
Diffstat (limited to '')
-rw-r--r--crates/rocie-server/src/api/set/product.rs (renamed from crates/rocie-server/src/api/set.rs)18
1 files changed, 14 insertions, 4 deletions
diff --git a/crates/rocie-server/src/api/set.rs b/crates/rocie-server/src/api/set/product.rs
index 0a6af1b..355f09a 100644
--- a/crates/rocie-server/src/api/set.rs
+++ b/crates/rocie-server/src/api/set/product.rs
@@ -7,6 +7,7 @@ use crate::{
     storage::sql::{
         insert::Operations,
         product::{Barcode, Product, ProductId},
+        unit::Unit,
     },
 };
 
@@ -17,10 +18,6 @@ struct ProductStub {
     parent: Option<ProductId>,
 }
 
-pub(crate) fn register_paths(cfg: &mut web::ServiceConfig) {
-    cfg.service(register_product).service(associate_barcode);
-}
-
 /// Register a product
 #[utoipa::path(
     responses(
@@ -68,6 +65,11 @@ pub(crate) async fn register_product(
             description = "Product id not found in database",
         ),
         (
+            status = FORBIDDEN,
+            description = "Unit used in request has not been registered yet",
+            body = String,
+        ),
+        (
             status = INTERNAL_SERVER_ERROR,
             description = "Server encountered error",
             body = String,
@@ -86,6 +88,14 @@ pub(crate) async fn associate_barcode(
 ) -> Result<impl Responder> {
     let mut ops = Operations::new("associated barcode with product");
 
+    {
+        let units = Unit::get_all(&app).await?;
+        if !units.into_iter().any(|unit| unit.id == barcode.amount.unit) {
+            return Ok(HttpResponse::Forbidden()
+                .body("The used unit has not been registered; it cannot be used.\n"));
+        }
+    }
+
     match Product::from_id(&app, id.into_inner()).await? {
         Some(product) => {
             product.associate_barcode(barcode.into_inner(), &mut ops);