stage-and-suitcase-mih/backend/routers/patients.py

import mysql.connector
from fastapi import APIRouter, HTTPException
from pydantic import BaseModel
#from ..database import dbConnection
import database
#SuperToken Auth from front end
from supertokens_python.recipe.session.framework.fastapi import verify_session
from supertokens_python.recipe.session import SessionContainer
from fastapi import Depends

router = APIRouter()

class patientInsertRequest(BaseModel):
    id_no: str
    first_name: str
    last_name: str
    email: str
    cell_no: str
    medical_aid: str
    medical_aid_main_member: str
    medical_aid_no: str
    medical_aid_code: str
    medical_aid_name: str
    medical_aid_scheme: str
    address: str
    doc_office_id: int

class patientUpdateRequest(BaseModel):
    id_no: str
    first_name: str
    last_name: str
    email: str
    cell_no: str
    medical_aid: str
    medical_aid_main_member: str
    medical_aid_no: str
    medical_aid_code: str
    medical_aid_name: str
    medical_aid_scheme: str
    address: str
    doc_office_id: int

class patientDeleteRequest(BaseModel):
    id_no: str
    doc_office_id: int

# Get Patient By ID Number
@router.get("/patients/id/{pat_id}", tags="patients")
async def read_patientByID(pat_id: str, session: SessionContainer = Depends(verify_session())):
    db = database.dbConnection.dbConnect()
    cursor = db.cursor()
    query = "SELECT * FROM patients WHERE idpatients=%s"
    cursor.execute(query, (pat_id,))
    item = cursor.fetchone()
    cursor.close()
    db.close()
    if item is None:
        raise HTTPException(status_code=404, detail="Item not found")
    return {"idpatients": item[0],
    "id_no": item[1],
    "first_name": item[2],
    "last_name": item[3],
    "email": item[4],
    "cell_no": item[5],
    "medical_aid_name": item[6],
    "medical_aid_no": item[7],
    "medical_aid_scheme": item[8],
    "address": item[9],
    "doc_office_id": item[10]}


# Get Patient By ID Number
@router.get("/patients/{id_no}", tags="patients")
async def read_patientByID(id_no: str):
    db = database.dbConnection.dbConnect()
    cursor = db.cursor()
    query = "SELECT * FROM patients WHERE id_no=%s"
    cursor.execute(query, (id_no,))
    item = cursor.fetchone()
    cursor.close()
    db.close()
    if item is None:
        raise HTTPException(status_code=404, detail="Item not found")
    return {"idpatients": item[0],
    "id_no": item[1],
    "first_name": item[2],
    "last_name": item[3],
    "email": item[4],
    "cell_no": item[5],
    "medical_aid_name": item[6],
    "medical_aid_no": item[7],
    "medical_aid_scheme": item[8],
    "address": item[9],
    "doc_office_id": item[10]}

# Get List of all patients
@router.get("/patients/user/{email}", tags="patients")
async def read_all_patientsByUser(email: str, session: SessionContainer = Depends(verify_session())):
    db = database.dbConnection.dbConnect()
    cursor = db.cursor()
    #query = "SELECT * FROM patients"
    query = "Select * from patients " 
    query += "inner join users " 
    query += "on doc_office_id = docOffice_id "
    query += "where lower(users.email)= %s"
    cursor.execute(query, (email.lower(),))
    items = [
        {
            "idpatients": item[0],
            "id_no": item[1],
            "first_name": item[2],
            "last_name": item[3],
            "email": item[4],
            "cell_no": item[5],
            "medical_aid": item[11],
            "medical_aid_name": item[6],
            "medical_aid_no": item[7],
            "medical_aid_main_member": item[12],
            "medical_aid_code": item[13],  
            "medical_aid_scheme": item[8],
            "address": item[9],
            "doc_office_id": item[10]
        }
        for item in cursor.fetchall()
    ]
    cursor.close()
    db.close()
    return items

# Get List of all patients
@router.get("/patients/", tags="patients")
async def read_all_patients(session: SessionContainer = Depends(verify_session())):
    db = database.dbConnection.dbConnect()
    cursor = db.cursor()
    query = "SELECT * FROM patients"
    cursor.execute(query)
    items = [
        {
            "idpatients": item[0],
            "id_no": item[1],
            "first_name": item[2],
            "last_name": item[3],
            "email": item[4],
            "cell_no": item[5],
            "medical_aid_name": item[6],
            "medical_aid_no": item[7],
            "medical_aid_scheme": item[8],
            "address": item[9],
            "doc_office_id": item[10]
        }
        for item in cursor.fetchall()
    ]
    cursor.close()
    db.close()
    return items

# Get List of all patients by Doctors Office
@router.get("/patients/docOffice/{docoff_id}", tags="patients")
async def read_all_patientsby(docoff_id: str, session: SessionContainer = Depends(verify_session())):
    db = database.dbConnection.dbConnect()
    cursor = db.cursor()
    query = "SELECT * FROM patients where doc_office_id=%s"
    cursor.execute(query, (docoff_id,))
    items = [
        {
            "idpatients": item[0],
            "id_no": item[1],
            "first_name": item[2],
            "last_name": item[3],
            "email": item[4],
            "cell_no": item[5],
            "medical_aid_name": item[6],
            "medical_aid_no": item[7],
            "medical_aid_scheme": item[8],
            "address": item[9],
            "doc_office_id": item[10]
        }
        for item in cursor.fetchall()
    ]
    cursor.close()
    db.close()
    return items

# Insert Patient into table
@router.post("/patients/insert/", tags="patients", status_code=201)
async def insertPatient(itemRequest : patientInsertRequest, session: SessionContainer = Depends(verify_session())):
    db = database.dbConnection.dbConnect()
    cursor = db.cursor()
    query = "insert into patients "
    query += "(id_no, first_name, last_name, email, cell_no, medical_aid, "
    query += "medical_aid_main_member, medical_aid_no, medical_aid_code, medical_aid_name, "
    query += "medical_aid_scheme, address, doc_office_id) "
    query += "values (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)"
    patientData = (itemRequest.id_no, 
                   itemRequest.first_name,
                   itemRequest.last_name,
                   itemRequest.email,
                   itemRequest.cell_no,
                   itemRequest.medical_aid,
                   itemRequest.medical_aid_main_member,
                   itemRequest.medical_aid_no,
                   itemRequest.medical_aid_code,
                   itemRequest.medical_aid_name,
                   itemRequest.medical_aid_scheme,
                   itemRequest.address,
                   itemRequest.doc_office_id)
    try:
       cursor.execute(query, patientData) 
    except Exception as error:
        raise HTTPException(status_code=404, detail="Failed to Create Record")
        #return {"message": "Failed to Create Record"}
    db.commit()
    cursor.close()
    db.close()
    return {"message": "Successfully Created Record"}

# Update Patient on table
@router.put("/patients/update/", tags="patients")
async def UpdatePatient(itemRequest : patientUpdateRequest, session: SessionContainer = Depends(verify_session())):
    db = database.dbConnection.dbConnect()
    cursor = db.cursor()
    query = "update patients "
    query += "set id_no=%s, first_name=%s, last_name=%s, email=%s, cell_no=%s, medical_aid=%s, "
    query += "medical_aid_main_member=%s, medical_aid_no=%s, medical_aid_code=%s, medical_aid_name=%s, "
    query += "medical_aid_scheme=%s, address=%s, doc_office_id=%s "
    query += "where id_no=%s and doc_office_id=%s"
    patientData = (itemRequest.id_no, 
                   itemRequest.first_name,
                   itemRequest.last_name,
                   itemRequest.email,
                   itemRequest.cell_no,
                   itemRequest.medical_aid,
                   itemRequest.medical_aid_main_member,
                   itemRequest.medical_aid_no,
                   itemRequest.medical_aid_code,
                   itemRequest.medical_aid_name,
                   itemRequest.medical_aid_scheme,
                   itemRequest.address,
                   itemRequest.doc_office_id,
                   itemRequest.id_no,
                   itemRequest.doc_office_id)
    try:
       cursor.execute(query, patientData) 
    except Exception as error:
        raise HTTPException(status_code=404, detail="Failed to Update Record")
        #return {"query": query, "message": error}
    db.commit()
    cursor.close()
    db.close()
    return {"message": "Successfully Updated Record"}

# delete Patient on table
@router.delete("/patients/delete/", tags="patients")
async def DeletePatient(itemRequest : patientDeleteRequest, session: SessionContainer = Depends(verify_session())):
    db = database.dbConnection.dbConnect()
    cursor = db.cursor()
    query = "delete from patients "
    query += "where id_no=%s and doc_office_id=%s"
    patientData = (itemRequest.id_no,
                   itemRequest.doc_office_id)
    try:
       cursor.execute(query, patientData) 
    except Exception as error:
        raise HTTPException(status_code=404, detail="Failed to delete Record")
        #return {"query": query, "message": error}
    db.commit()
    cursor.close()
    db.close()
    return {"message": "Successfully delete Record"}