Update backend/api/views.py

backend/api/views.py

@@ -6,8 +6,10 @@ import json
 import os
 from rest_framework.response import Response
 
-from .models import UserProfile, TestResult
-from .serializers import UserProfileSerializer, TestResultSerializer
+# Added Appointment to imports
+from .models import UserProfile, TestResult, Appointment
+# Added AppointmentSerializer to imports
+from .serializers import UserProfileSerializer, TestResultSerializer, AppointmentSerializer
 from .ml_engine import predict_xray
 from .storage import upload_to_supabase
 from .pdf_generator import generate_medical_pdf 
@@ -29,7 +31,7 @@ class UserProfileView(views.APIView):
         else:
             if requested_role == 'doctor':
                 provided_code = data.get('access_code')
-                secure_code = "e63ecb7857b348c5a79645c92578f5260defd2bde982bf823b8f66f5133fea52" # <--- CHANGED TO STRING
+                secure_code = "e63ecb7857b348c5a79645c92578f5260defd2bde982bf823b8f66f5133fea52"
                 
                 # Check if provided_code exists, convert to string, strip whitespace, and compare
                 if provided_code and str(provided_code).strip() == secure_code:
@@ -84,7 +86,6 @@ class PredictionView(views.APIView):
         image_file.seek(0)
         result, confidence, risk_level = predict_xray(image_file)
         
-        # --- REVERTED: Just create the record, no email logic here ---
         test_record = TestResult.objects.create(
             patient=user_profile,
             xray_image_url=image_url,
@@ -198,7 +199,6 @@ class DownloadReportView(views.APIView):
             return response
             
         except Exception as e:
-                print(f"Error generating PDF: {e}") 
                 print(f"Error generating PDF: {e}") 
                 return Response({"error": "Failed to generate report"}, status=500)
 
@@ -207,4 +207,78 @@ class PublicStatsView(views.APIView):
 
     def get(self, request):
         total_count = TestResult.objects.count()
-        return response.Response({"total_tests": total_count})
+        return response.Response({"total_tests": total_count})
+
+# --- NEW APPOINTMENT SYSTEM VIEWS ---
+
+class DoctorListView(views.APIView):
+    permission_classes = [IsAuthenticated]
+
+    def get(self, request):
+        # Filter profiles where role is 'doctor'
+        doctors = UserProfile.objects.filter(role='doctor')
+        return response.Response(UserProfileSerializer(doctors, many=True).data)
+
+class AppointmentView(views.APIView):
+    permission_classes = [IsAuthenticated]
+
+    def get(self, request):
+        try:
+            profile = request.user.profile
+            # If Doctor, show appointments assigned to them
+            if profile.role == 'doctor':
+                appointments = Appointment.objects.filter(doctor=profile).order_by('date_time')
+            # If Patient, show their own bookings
+            else:
+                appointments = Appointment.objects.filter(patient=profile).order_by('date_time')
+            
+            return response.Response(AppointmentSerializer(appointments, many=True).data)
+        except UserProfile.DoesNotExist:
+            return response.Response({"error": "Profile not found"}, status=404)
+
+    def post(self, request):
+        try:
+            patient_profile = request.user.profile
+            doctor_id = request.data.get('doctor_id')
+            date_time = request.data.get('date_time')
+            reason = request.data.get('reason', '')
+
+            if not doctor_id or not date_time:
+                return response.Response({"error": "Doctor and Date are required"}, status=400)
+
+            try:
+                doctor_profile = UserProfile.objects.get(id=doctor_id, role='doctor')
+            except UserProfile.DoesNotExist:
+                return response.Response({"error": "Selected doctor not found or invalid"}, status=404)
+
+            appointment = Appointment.objects.create(
+                patient=patient_profile,
+                doctor=doctor_profile,
+                date_time=date_time,
+                reason=reason,
+                status='pending'
+            )
+            return response.Response(AppointmentSerializer(appointment).data, status=status.HTTP_201_CREATED)
+            
+        except Exception as e:
+            return response.Response({"error": str(e)}, status=400)
+
+class AppointmentStatusView(views.APIView):
+    permission_classes = [IsAuthenticated]
+
+    def patch(self, request, pk):
+        try:
+            appointment = Appointment.objects.get(pk=pk)
+            # Permission check: User must be either the doctor or patient involved
+            if request.user.profile != appointment.doctor and request.user.profile != appointment.patient:
+                return response.Response({"error": "Unauthorized"}, status=403)
+
+            new_status = request.data.get('status')
+            if new_status in dict(Appointment.STATUS_CHOICES):
+                appointment.status = new_status
+                appointment.save()
+                return response.Response(AppointmentSerializer(appointment).data)
+            return response.Response({"error": "Invalid status"}, status=400)
+            
+        except Appointment.DoesNotExist:
+            return response.Response({"error": "Appointment not found"}, status=404)