add api update author

Author: kiinp9

constant/config.message.dart

@@ -94,4 +94,5 @@ class ErrorMessage {
   static const String MISSING_QUERY_PARAM = 'query không được rỗng';
   static const String INVALID_AVATAR_AUTHOR =
       'Ảnh đại diện tác giả không hợp lệ';
+  static const String INVALID_AUTHOR_ID = 'authorId không tồn tại ';
 }

controllers/author_controller.dart

@@ -20,9 +20,17 @@ class AuthorController {
         await _authorRepository.showAuthorPaging(offset: offset, limit: limit);
     return author;
   }
+
   Future<int?> createAuthor(Author author, String avatarPath) async {
-    final authorId =
-        await _authorRepository.createAuthor(author, avatarPath);
+    final authorId = await _authorRepository.createAuthor(author, avatarPath);
     return authorId;
   }
+
+  Future<Author?> updateAuthor(
+    int authorId,
+    Map<String, dynamic> updateFields,
+  ) async {
+    final author = await _authorRepository.updateAuthor(authorId, updateFields);
+    return author;
+  }
 }

repository/author_repository.dart

@@ -15,6 +15,10 @@ abstract class IAuthorRepo {
   Future<Author?> findAuthorByName(String name);
   Future<List<Author>> showAuthorPaging({int offset = 0, int limit = 8});
   Future<int?> createAuthor(Author author, String avatarPath);
+  Future<Author?> updateAuthor(
+    int authorId,
+    Map<String, dynamic> updateFields,
+  );
 }
 
 class AuthorRepository implements IAuthorRepo {
@@ -37,7 +41,9 @@ class AuthorRepository implements IAuthorRepo {
 
       if (authorResult.isEmpty || authorResult.first.isEmpty) {
         throw const CustomHttpException(
-            ErrorMessage.AUTHOR_NOT_FOUND, HttpStatus.notFound,);
+          ErrorMessage.AUTHOR_NOT_FOUND,
+          HttpStatus.notFound,
+        );
       }
 
       final authorRow = authorResult.first;
@@ -212,16 +218,19 @@ SELECT al.id,
   @override
   Future<List<Author>> showAuthorPaging({int offset = 0, int limit = 8}) async {
     try {
-      final authorResult = await _db.executor.execute(Sql.named('''
+      final authorResult = await _db.executor.execute(
+        Sql.named('''
 SELECT id, name,avatarUrl
 FROM author
 ORDER BY RANDOM()
 LIMIT @limit
 OFFSET @offset
-'''), parameters: {
-        'limit': limit,
-        'offset': offset,
-      },);
+'''),
+        parameters: {
+          'limit': limit,
+          'offset': offset,
+        },
+      );
 
       if (authorResult.isEmpty) {
         return [];
@@ -288,6 +297,67 @@ OFFSET @offset
     }
   }
 
+  @override
+  Future<Author?> updateAuthor(
+    int authorId,
+    Map<String, dynamic> updateFields,
+  ) async {
+    try {
+      final setClauseParts = <String>[];
+      final parameters = <String, dynamic>{
+        'id': authorId,
+        'updatedAt': DateTime.now(),
+      };
+
+      if (updateFields.containsKey('name')) {
+        setClauseParts.add('name = @name');
+        parameters['name'] = updateFields['name'];
+      }
+      if (updateFields.containsKey('description')) {
+        setClauseParts.add('description = @description');
+        parameters['description'] = updateFields['description'];
+      }
+      setClauseParts.add('updatedAt = @updatedAt');
+      final setClause = setClauseParts.join(', ');
+      final query = '''
+UPDATE author
+SET $setClause
+WHERE id = @id
+RETURNING id,name,description,avatarUrl,createdAt,updatedAt,followingCount
+''';
+
+      final result = await _db.executor.execute(
+        Sql.named(query),
+        parameters: parameters,
+      );
+      if (result.isEmpty || result.first.isEmpty) {
+        throw const CustomHttpException(
+          ErrorMessageSQL.SQL_QUERY_ERROR,
+          HttpStatus.internalServerError,
+        );
+      }
+
+      final row = result.first;
+      return Author(
+        id: row[0]! as int,
+        name: row[1]! as String,
+        description: row[2]! as String,
+        avatarUrl: row[3] as String?,
+        followingCount: row[4]! as int,
+        createdAt: _parseDate(row[5]),
+        updatedAt: _parseDate(row[6]),
+      );
+    } catch (e) {
+      if (e is CustomHttpException) {
+        rethrow;
+      }
+      throw const CustomHttpException(
+        ErrorMessageSQL.SQL_QUERY_ERROR,
+        HttpStatus.internalServerError,
+      );
+    }
+  }
+
   DateTime? _parseDate(dynamic date) {
     if (date == null) {
       return null;

routes/admin/author/update-author/[id].dart

@@ -0,0 +1,52 @@
+import 'dart:io';
+
+import 'package:dart_frog/dart_frog.dart';
+
+import '../../../../constant/config.message.dart';
+import '../../../../controllers/author_controller.dart';
+import '../../../../exception/config.exception.dart';
+import '../../../../model/response.dart';
+import '../../../../model/users.dart';
+
+Future<Response> onRequest(RequestContext context, String id) async {
+  if (context.request.method.value != 'POST') {
+    return AppResponse()
+        .error(HttpStatus.methodNotAllowed, ErrorMessage.MSG_METHOD_NOT_ALLOW);
+  }
+
+
+  final authorController = context.read<AuthorController>();
+    final user = context.read<User?>();
+    if (user == null || user.role?.name != 'admin') {
+    return AppResponse().error(HttpStatus.forbidden, ErrorMessage.FORBIDDEN);
+  }
+
+  final authorId = int.tryParse(context.request.uri.pathSegments.last);
+  if (authorId == null) {
+    return AppResponse()
+        .error(HttpStatus.badRequest, ErrorMessage.INVALID_AUTHOR_ID);
+  }
+ try{
+  final body = await context.request.json() as Map<String,dynamic>;
+  final updateFields = <String,dynamic>{};
+
+     if (body.containsKey('name')) {
+      updateFields['name'] = body['name'].toString();
+    }
+
+    if (body.containsKey('description')) {
+      updateFields['description'] = body['description'].toString();
+    }
+ if (updateFields.isEmpty) {
+      return AppResponse()
+          .error(HttpStatus.badRequest, ErrorMessage.EMPTY_FIELD);
+    }
+final result = await authorController.updateAuthor(authorId, updateFields);
+ return AppResponse().ok(HttpStatus.ok, result?.toJson());
+  } catch (e) {
+    if (e is CustomHttpException) {
+      return AppResponse().error(e.statusCode, e.message);
+    }
+    return AppResponse().error(HttpStatus.internalServerError, e.toString());
+  }
+}

security/reset-password-token.security.dart

@@ -38,7 +38,7 @@ Map<String, dynamic>? decodeResetToken(String token) {
     throw const CustomHttpException(
         ErrorMessage.TOKEN_INVALID, HttpStatus.internalServerError,);
   }
-}
+} 
 
 AppException? verifyResetToken(String token) {
   try {