Update api/routes.py

api/routes.py

@@ -1,12 +1,13 @@
 from fastapi import APIRouter, HTTPException, Depends
 from fastapi.security import OAuth2PasswordRequestForm
-from models.schemas import SignupForm, TokenResponse
-from db.mongo import users_collection
+from models.schemas import SignupForm, TokenResponse, PatientCreate
+from db.mongo import users_collection, patients_collection
 from core.security import hash_password, verify_password, create_access_token, get_current_user
-from datetime import datetime
+from datetime import datetime, date
 
 router = APIRouter()
 
+# --- SIGNUP ---
 @router.post("/signup")
 async def signup(data: SignupForm):
     email = data.email.lower().strip()
@@ -24,6 +25,8 @@ async def signup(data: SignupForm):
     await users_collection.insert_one(user_doc)
     return {"success": True, "message": "Account created"}
 
+
+# --- LOGIN ---
 @router.post("/login", response_model=TokenResponse)
 async def login(form_data: OAuth2PasswordRequestForm = Depends()):
     email = form_data.username.lower().strip()
@@ -34,10 +37,28 @@ async def login(form_data: OAuth2PasswordRequestForm = Depends()):
     access_token = create_access_token(data={"sub": user["email"]})
     return {"access_token": access_token, "token_type": "bearer"}
 
+
+# --- GET CURRENT USER ---
 @router.get("/me")
 async def get_me(current_user: dict = Depends(get_current_user)):
     return {
         "email": current_user["email"],
-        "full_name": current_user.get("full_name", "")
+        "full_name": current_user.get("full_name", ""),
+        "created_at": current_user.get("created_at", "")
     }
 
+
+# --- ADD NEW PATIENT ---
+@router.post("/patients")
+async def add_patient(data: PatientCreate, current_user: dict = Depends(get_current_user)):
+    patient_doc = {
+        "full_name": data.full_name,
+        "date_of_birth": data.date_of_birth,
+        "gender": data.gender,
+        "notes": data.notes,
+        "contact": data.contact.dict() if data.contact else {},
+        "created_by": current_user["email"],
+        "created_at": date.today()
+    }
+    result = await patients_collection.insert_one(patient_doc)
+    return { "id": str(result.inserted_id), "message": "Patient created successfully" }