Create courses.py

routes/courses.py

@@ -0,0 +1,45 @@
+# routes/courses.py
+from flask import Blueprint, request, jsonify, g
+from bson.objectid import ObjectId
+from db import db
+from utils.auth import token_required, admin_required
+
+courses_bp = Blueprint("courses", __name__)
+
+@courses_bp.route("/", methods=["GET"])
+def list_courses():
+    docs = list(db.courses.find({}))
+    for d in docs:
+        d["_id"] = str(d["_id"])
+    return jsonify(docs)
+
+@courses_bp.route("/", methods=["POST"])
+@token_required
+@admin_required
+def create_course():
+    data = request.json or {}
+    title = data.get("title")
+    code = data.get("code")
+    if not title:
+        return jsonify({"error":"Title required"}), 400
+    course = {"title": title, "code": code, "created_at": None}
+    res = db.courses.insert_one(course)
+    return jsonify({"message":"Course created", "id": str(res.inserted_id)}), 201
+
+@courses_bp.route("/<course_id>", methods=["PUT"])
+@token_required
+@admin_required
+def update_course(course_id):
+    data = request.json or {}
+    update = {}
+    if "title" in data: update["title"] = data["title"]
+    if "code" in data: update["code"] = data["code"]
+    db.courses.update_one({"_id": ObjectId(course_id)}, {"$set": update})
+    return jsonify({"message":"Updated"})
+
+@courses_bp.route("/<course_id>", methods=["DELETE"])
+@token_required
+@admin_required
+def delete_course(course_id):
+    db.courses.delete_one({"_id": ObjectId(course_id)})
+    return jsonify({"message":"Deleted"})