Update api/routes.py

api/routes.py

@@ -1,7 +1,7 @@
 from fastapi import APIRouter, HTTPException, Depends, Body
 from fastapi.security import OAuth2PasswordRequestForm
-from models.schemas import SignupForm, TokenResponse, PatientCreate, DoctorCreate
-from db.mongo import users_collection, patients_collection
+from models.schemas import SignupForm, TokenResponse, PatientCreate, DoctorCreate, AppointmentCreate
+from db.mongo import users_collection, patients_collection, appointments_collection
 from core.security import hash_password, verify_password, create_access_token, get_current_user
 from datetime import datetime
 from bson import ObjectId
@@ -11,7 +11,7 @@ from pydantic import BaseModel
 
 router = APIRouter()
 
-# --- SIGNUP (for patients only) ---
+# --- SIGNUP ---
 @router.post("/signup")
 async def signup(data: SignupForm):
     if data.role != "patient":
@@ -107,11 +107,55 @@ async def list_patients(current_user: dict = Depends(get_current_user)):
         })
     return patients
 
-# --- COUNT PATIENTS BY DOCTOR ---
+# --- COUNT PATIENTS ---
 @router.get("/patients-count")
 async def count_patients(current_user: dict = Depends(get_current_user)):
     if current_user.get("role") != "doctor":
         raise HTTPException(status_code=403, detail="Only doctors can count patients")
-
     count = await patients_collection.count_documents({"created_by": current_user["email"]})
     return {"count": count}
+
+# =========================
+#    APPOINTMENT ROUTES
+# =========================
+
+# --- CREATE APPOINTMENT (doctor only) ---
+@router.post("/appointments")
+async def create_appointment(data: AppointmentCreate, current_user: dict = Depends(get_current_user)):
+    if current_user.get("role") != "doctor":
+        raise HTTPException(status_code=403, detail="Only doctors can create appointments")
+
+    appointment_doc = {
+        "patient_id": ObjectId(data.patient_id),
+        "doctor_id": ObjectId(data.doctor_id),
+        "date": data.date,
+        "time": data.time,
+        "reason": data.reason,
+        "created_by": current_user["email"],
+        "created_at": datetime.utcnow()
+    }
+    await appointments_collection.insert_one(appointment_doc)
+    return {"message": "Appointment created successfully"}
+
+# --- LIST DOCTOR'S APPOINTMENTS ---
+@router.get("/appointments/doctor")
+async def list_doctor_appointments(current_user: dict = Depends(get_current_user)):
+    if current_user.get("role") != "doctor":
+        raise HTTPException(status_code=403, detail="Only doctors can view this")
+
+    cursor = appointments_collection.find({"doctor_id": {"$exists": True}})
+    return [{**a, "_id": str(a["_id"]), "patient_id": str(a["patient_id"]), "doctor_id": str(a["doctor_id"])} async for a in cursor]
+
+# --- LIST PATIENT'S APPOINTMENTS ---
+@router.get("/appointments/patient")
+async def list_my_appointments(current_user: dict = Depends(get_current_user)):
+    if current_user.get("role") != "patient":
+        raise HTTPException(status_code=403, detail="Only patients can view their appointments")
+
+    user = await users_collection.find_one({"email": current_user["email"]})
+    if not user:
+        raise HTTPException(status_code=404, detail="User not found")
+
+    patient_id = user.get("_id")
+    cursor = appointments_collection.find({"patient_id": patient_id})
+    return [{**a, "_id": str(a["_id"]), "patient_id": str(a["patient_id"]), "doctor_id": str(a["doctor_id"])} async for a in cursor]