1
from odoo import http
2
from odoo.http import request
3
import json
4

5
class APIController(http.Controller):
6

7
    def _json_response(self, data, status=200):
8
        """統一 JSON 回應格式"""
9
        return request.make_response(
10
            json.dumps({
11
                'success': status == 200,
12
                'data': data,
13
                'timestamp': fields.Datetime.now().isoformat()
14
            }),
15
            headers=[('Content-Type', 'application/json')],
16
            status=status
17
        )
18

19
    def _authenticate(self):
20
        """API 認證"""
21
        token = request.httprequest.headers.get('Authorization')
22
        if not token:
23
            return None
24

25
        api_key = request.env['api.key'].sudo().search([
26
            ('token', '=', token.replace('Bearer ', '')),
27
            ('active', '=', True)
28
        ], limit=1)
29

30
        return api_key.user_id if api_key else None

1
class ProductAPI(APIController):
2

3
    @http.route('/api/v1/products', type='http', auth='public',
4
                methods=['GET'], csrf=False)
5
    def get_products(self, **kwargs):
6
        """取得產品列表"""
7
        user = self._authenticate()
8
        if not user:
9
            return self._json_response({'error': 'Unauthorized'}, 401)
10

11
        # 查詢參數
12
        limit = int(kwargs.get('limit', 20))
13
        offset = int(kwargs.get('offset', 0))
14
        category = kwargs.get('category')
15

16
        domain = [('sale_ok', '=', True)]
17
        if category:
18
            domain.append(('categ_id.name', 'ilike', category))
19

20
        products = request.env['product.product'].sudo().search(
21
            domain, limit=limit, offset=offset
22
        )
23

24
        data = [{
25
            'id': p.id,
26
            'name': p.name,
27
            'sku': p.default_code,
28
            'price': p.list_price,
29
            'qty_available': p.qty_available,
30
            'category': p.categ_id.name,
31
            'image_url': f'/web/image/product.product/{p.id}/image_128'
32
        } for p in products]
33

34
        return self._json_response({
35
            'items': data,
36
            'total': request.env['product.product'].sudo().search_count(domain),
37
            'limit': limit,
38
            'offset': offset
39
        })
40

41
    @http.route('/api/v1/products/<int:product_id>', type='http',
42
                auth='public', methods=['GET'], csrf=False)
43
    def get_product(self, product_id, **kwargs):
44
        """取得單一產品詳情"""
45
        user = self._authenticate()
46
        if not user:
47
            return self._json_response({'error': 'Unauthorized'}, 401)
48

49
        product = request.env['product.product'].sudo().browse(product_id)
50
        if not product.exists():
51
            return self._json_response({'error': 'Product not found'}, 404)
52

53
        data = {
54
            'id': product.id,
55
            'name': product.name,
56
            'sku': product.default_code,
57
            'description': product.description_sale,
58
            'price': product.list_price,
59
            'qty_available': product.qty_available,
60
            'category': {
61
                'id': product.categ_id.id,
62
                'name': product.categ_id.name
63
            },
64
            'attributes': [{
65
                'name': attr.attribute_id.name,
66
                'value': attr.name
67
            } for attr in product.product_template_attribute_value_ids]
68
        }
69

70
        return self._json_response(data)

1
class OrderAPI(APIController):
2

3
    @http.route('/api/v1/orders', type='json', auth='public',
4
                methods=['POST'], csrf=False)
5
    def create_order(self, **kwargs):
6
        """建立訂單"""
7
        user = self._authenticate()
8
        if not user:
9
            return {'success': False, 'error': 'Unauthorized'}
10

11
        data = request.jsonrequest
12

13
        # 驗證必填欄位
14
        required = ['partner_id', 'lines']
15
        for field in required:
16
            if field not in data:
17
                return {'success': False, 'error': f'Missing {field}'}
18

19
        # 建立訂單
20
        order_lines = []
21
        for line in data['lines']:
22
            order_lines.append((0, 0, {
23
                'product_id': line['product_id'],
24
                'product_uom_qty': line['quantity'],
25
                'price_unit': line.get('price_unit', 0)
26
            }))
27

28
        order = request.env['sale.order'].sudo().create({
29
            'partner_id': data['partner_id'],
30
            'order_line': order_lines,
31
            'note': data.get('note', '')
32
        })
33

34
        return {
35
            'success': True,
36
            'order_id': order.id,
37
            'order_name': order.name
38
        }
39

40
    @http.route('/api/v1/orders/<string:order_name>', type='http',
41
                auth='public', methods=['GET'], csrf=False)
42
    def get_order(self, order_name, **kwargs):
43
        """查詢訂單"""
44
        user = self._authenticate()
45
        if not user:
46
            return self._json_response({'error': 'Unauthorized'}, 401)
47

48
        order = request.env['sale.order'].sudo().search([
49
            ('name', '=', order_name)
50
        ], limit=1)
51

52
        if not order:
53
            return self._json_response({'error': 'Order not found'}, 404)
54

55
        data = {
56
            'name': order.name,
57
            'date': order.date_order.isoformat(),
58
            'state': order.state,
59
            'total': order.amount_total,
60
            'partner': {
61
                'id': order.partner_id.id,
62
                'name': order.partner_id.name
63
            },
64
            'lines': [{
65
                'product': line.product_id.name,
66
                'quantity': line.product_uom_qty,
67
                'price': line.price_unit,
68
                'subtotal': line.price_subtotal
69
            } for line in order.order_line]
70
        }
71

72
        return self._json_response(data)