feat: Adds employee form and table view, begins user form and table view.

Sources/App/Controllers/ApiController.swift

@@ -30,6 +30,7 @@ struct ApiController: RouteCollection {
     purchaseOrders.get(use: purchaseOrdersIndex(req:))
     purchaseOrders.post(use: createPurchaseOrder(req:))
 
+    users.get(use: usersIndex(req:))
     users.post(use: createUser(req:))
     users.group("login") {
       $0.get(use: self.login(req:))
@@ -168,6 +169,11 @@ struct ApiController: RouteCollection {
     return token
   }
 
+  @Sendable
+  func usersIndex(req: Request) async throws -> [User.DTO] {
+    try await User.query(on: req.db).all().map { $0.toDTO() }
+  }
+
   // MARK: - Vendors
 
   @Sendable

Sources/App/Controllers/ViewController.swift

@@ -0,0 +1,126 @@
+import Fluent
+import Leaf
+import Vapor
+
+struct ViewController: RouteCollection {
+
+  private let api = ApiController()
+
+  func boot(routes: any RoutesBuilder) throws {
+    let protected = routes.grouped(User.credentialsAuthenticator(), User.redirectMiddleware(path: "login"))
+    let login = routes.grouped("login")
+    let employees = protected.grouped("employees")
+
+    // MARK: - Non-protected routes.
+
+    routes.get(use: index(req:))
+    login.get(use: getLogin(req:))
+    login.post(use: postLogin(req:))
+    routes.post("logout", use: logout(req:))
+
+    // MARK: Protected routes.
+
+    protected.get("home", use: home(req:))
+    protected.get("users", use: users(req:))
+
+    employees.get(use: employees(req:))
+    employees.post(use: postEmployeeForm(req:))
+    employees.group(":employeeID") {
+      $0.delete(use: deleteEmployee(req:))
+      $0.post("toggle-active", use: toggleActiveEmployee(req:))
+    }
+  }
+
+  @Sendable
+  func index(req: Request) async throws -> View {
+    try await req.view.render("index")
+  }
+
+  @Sendable
+  func getLogin(req: Request) async throws -> View {
+    try await req.view.render("login")
+  }
+
+  @Sendable
+  func postLogin(req: Request) async throws -> View {
+    let content = try req.content.decode(UserForm.self)
+    guard let user = try await User.query(on: req.db)
+      .filter(\.$username == content.username)
+      .first()
+    else {
+      throw Abort(.badRequest, reason: "User not found.")
+    }
+
+    guard try user.verify(password: content.password) else {
+      throw Abort(.unauthorized, reason: "Invalid password.")
+    }
+    req.auth.login(user)
+
+    req.logger.debug("User logged in: \(user.toDTO())")
+    return try await req.view.render("home")
+  }
+
+  @Sendable
+  func logout(req: Request) async throws -> View {
+    req.auth.logout(User.self)
+    return try await req.view.render("login")
+  }
+
+  @Sendable
+  func home(req: Request) async throws -> View {
+    try await req.view.render("home")
+  }
+
+  @Sendable
+  func users(req: Request) async throws -> View {
+    let users = try await api.usersIndex(req: req)
+    return try await req.view.render("users", ["users": users])
+  }
+
+  @Sendable
+  func employees(req: Request) async throws -> View {
+    let employees = try await api.getSortedEmployees(req: req)
+    return try await req.view.render("employees", ["employees": employees])
+  }
+
+  @Sendable
+  func postEmployeeForm(req: Request) async throws -> View {
+    _ = try await api.createEmployee(req: req)
+    let employees = try await api.getSortedEmployees(req: req)
+    return try await req.view.render("employee-table", ["employees": employees])
+  }
+
+  @Sendable
+  func toggleActiveEmployee(req: Request) async throws -> View {
+    guard let employee = try await Employee.find(req.parameters.get("employeeID"), on: req.db) else {
+      throw Abort(.notFound)
+    }
+    employee.active.toggle()
+    try await employee.save(on: req.db)
+    let employees = try await api.getSortedEmployees(req: req)
+    return try await req.view.render("employee-table", ["employees": employees])
+  }
+
+  @Sendable
+  func deleteEmployee(req: Request) async throws -> View {
+    _ = try await api.deleteEmployee(req: req)
+    let employees = try await api.getSortedEmployees(req: req)
+    return try await req.view.render("employee-table", ["employees": employees])
+  }
+
+}
+
+private struct UserForm: Content {
+  let username: String
+  let password: String
+}
+
+private extension ApiController {
+
+  func getSortedEmployees(req: Request) async throws -> [Employee.DTO] {
+    var employees = try await employeesIndex(req: req)
+    employees.sort { ($0.active ?? false) && !($1.active ?? false) }
+    employees.sort { ($0.lastName ?? "") < ($1.lastName ?? "") }
+    return employees
+  }
+}