Update api/routes.py

api/routes.py

@@ -1,4 +1,4 @@
-from fastapi import APIRouter, HTTPException, Depends
+from fastapi import APIRouter, HTTPException, Depends, Body
 from fastapi.security import OAuth2PasswordRequestForm
 from models.schemas import SignupForm, TokenResponse, PatientCreate
 from db.mongo import users_collection, patients_collection
@@ -6,6 +6,8 @@ from core.security import hash_password, verify_password, create_access_token, g
 from datetime import datetime
 from bson import ObjectId
 from bson.errors import InvalidId
+from typing import Optional
+from pydantic import BaseModel
 
 router = APIRouter()
 
@@ -27,7 +29,6 @@ async def signup(data: SignupForm):
     await users_collection.insert_one(user_doc)
     return {"success": True, "message": "Account created"}
 
-
 # --- LOGIN ---
 @router.post("/login", response_model=TokenResponse)
 async def login(form_data: OAuth2PasswordRequestForm = Depends()):
@@ -39,7 +40,6 @@ async def login(form_data: OAuth2PasswordRequestForm = Depends()):
     access_token = create_access_token(data={"sub": user["email"]})
     return {"access_token": access_token, "token_type": "bearer"}
 
-
 # --- GET CURRENT USER ---
 @router.get("/me")
 async def get_me(current_user: dict = Depends(get_current_user)):
@@ -49,7 +49,6 @@ async def get_me(current_user: dict = Depends(get_current_user)):
         "created_at": current_user.get("created_at", "")
     }
 
-
 # --- ADD NEW PATIENT ---
 @router.post("/patients")
 async def add_patient(data: PatientCreate, current_user: dict = Depends(get_current_user)):
@@ -65,8 +64,7 @@ async def add_patient(data: PatientCreate, current_user: dict = Depends(get_curr
     result = await patients_collection.insert_one(patient_doc)
     return { "id": str(result.inserted_id), "message": "Patient created successfully" }
 
-
-# --- GET ALL PATIENTS CREATED BY CURRENT USER ---
+# --- GET ALL PATIENTS ---
 @router.get("/patients")
 async def list_patients(current_user: dict = Depends(get_current_user)):
     patients_cursor = patients_collection.find({"created_by": current_user["email"]})
@@ -81,7 +79,6 @@ async def list_patients(current_user: dict = Depends(get_current_user)):
         })
     return patients
 
-
 # --- GET PATIENT BY ID ---
 @router.get("/patients/{patient_id}")
 async def get_patient_by_id(patient_id: str, current_user: dict = Depends(get_current_user)):
@@ -105,3 +102,57 @@ async def get_patient_by_id(patient_id: str, current_user: dict = Depends(get_cu
         "contact": patient.get("contact", {}),
         "created_at": patient.get("created_at"),
     }
+
+# --- UPDATE PATIENT ---
+class PatientUpdate(BaseModel):
+    full_name: Optional[str]
+    date_of_birth: Optional[datetime]
+    gender: Optional[str]
+    notes: Optional[str]
+    contact: Optional[dict]
+
+@router.put("/patients/{patient_id}")
+async def update_patient(
+    patient_id: str,
+    data: PatientUpdate = Body(...),
+    current_user: dict = Depends(get_current_user)
+):
+    try:
+        oid = ObjectId(patient_id)
+    except InvalidId:
+        raise HTTPException(status_code=400, detail="Invalid patient ID")
+
+    update_data = {}
+    for key, value in data.dict(exclude_unset=True).items():
+        if key == "date_of_birth" and value:
+            update_data[key] = datetime.combine(value, datetime.min.time())
+        else:
+            update_data[key] = value
+
+    result = await patients_collection.update_one(
+        {"_id": oid, "created_by": current_user["email"]},
+        {"$set": update_data}
+    )
+
+    if result.matched_count == 0:
+        raise HTTPException(status_code=404, detail="Patient not found")
+
+    return {"message": "Patient updated successfully"}
+
+# --- DELETE PATIENT ---
+@router.delete("/patients/{patient_id}")
+async def delete_patient(patient_id: str, current_user: dict = Depends(get_current_user)):
+    try:
+        oid = ObjectId(patient_id)
+    except InvalidId:
+        raise HTTPException(status_code=400, detail="Invalid patient ID")
+
+    result = await patients_collection.delete_one({
+        "_id": oid,
+        "created_by": current_user["email"]
+    })
+
+    if result.deleted_count == 0:
+        raise HTTPException(status_code=404, detail="Patient not found or unauthorized")
+
+    return {"message": "Patient deleted successfully"}