Update api/routes.py

api/routes.py

@@ -3,7 +3,9 @@ from fastapi.security import OAuth2PasswordRequestForm
 from models.schemas import SignupForm, TokenResponse, PatientCreate
 from db.mongo import users_collection, patients_collection
 from core.security import hash_password, verify_password, create_access_token, get_current_user
-from datetime import datetime, date
+from datetime import datetime
+from bson import ObjectId
+from bson.errors import InvalidId
 
 router = APIRouter()
 
@@ -53,12 +55,53 @@ async def get_me(current_user: dict = Depends(get_current_user)):
 async def add_patient(data: PatientCreate, current_user: dict = Depends(get_current_user)):
     patient_doc = {
         "full_name": data.full_name,
-        "date_of_birth": datetime.combine(data.date_of_birth, datetime.min.time()),  # ✅ fix date type
+        "date_of_birth": datetime.combine(data.date_of_birth, datetime.min.time()),
         "gender": data.gender,
         "notes": data.notes,
         "contact": data.contact.dict() if data.contact else {},
         "created_by": current_user["email"],
-        "created_at": datetime.utcnow()  # ✅ use datetime instead of date
+        "created_at": datetime.utcnow()
     }
     result = await patients_collection.insert_one(patient_doc)
     return { "id": str(result.inserted_id), "message": "Patient created successfully" }
+
+
+# --- GET ALL PATIENTS CREATED BY CURRENT USER ---
+@router.get("/patients")
+async def list_patients(current_user: dict = Depends(get_current_user)):
+    patients_cursor = patients_collection.find({"created_by": current_user["email"]})
+    patients = []
+    async for patient in patients_cursor:
+        patients.append({
+            "id": str(patient["_id"]),
+            "full_name": patient.get("full_name", ""),
+            "date_of_birth": patient.get("date_of_birth"),
+            "gender": patient.get("gender", ""),
+            "notes": patient.get("notes", ""),
+        })
+    return patients
+
+
+# --- GET PATIENT BY ID ---
+@router.get("/patients/{patient_id}")
+async def get_patient_by_id(patient_id: str, current_user: dict = Depends(get_current_user)):
+    try:
+        patient = await patients_collection.find_one({
+            "_id": ObjectId(patient_id),
+            "created_by": current_user["email"]
+        })
+    except InvalidId:
+        raise HTTPException(status_code=400, detail="Invalid patient ID")
+
+    if not patient:
+        raise HTTPException(status_code=404, detail="Patient not found")
+
+    return {
+        "id": str(patient["_id"]),
+        "full_name": patient.get("full_name", ""),
+        "date_of_birth": patient.get("date_of_birth"),
+        "gender": patient.get("gender", ""),
+        "notes": patient.get("notes", ""),
+        "contact": patient.get("contact", {}),
+        "created_at": patient.get("created_at"),
+    }