feat: Add public album routes and enhance authorization checks for media and albums

libertas_core/src/services.rs

@@ -2,17 +2,28 @@ use async_trait::async_trait;
 use uuid::Uuid;
 
 use crate::{
-    authz::Permission, error::CoreResult, models::{Album, FaceRegion, Media, MediaBundle, Person, PersonPermission, Tag, User}, schema::{
-        AddMediaToAlbumData, CreateAlbumData, CreateUserData, ListMediaOptions, LoginUserData, ShareAlbumData, UpdateAlbumData, UploadMediaData
-    }
+    authz::Permission,
+    error::CoreResult,
+    models::{
+        Album, FaceRegion, Media, MediaBundle, Person, PersonPermission, PublicAlbumBundle, Tag,
+        User,
+    },
+    schema::{
+        AddMediaToAlbumData, CreateAlbumData, CreateUserData, ListMediaOptions, LoginUserData,
+        ShareAlbumData, UpdateAlbumData, UploadMediaData,
+    },
 };
 
 #[async_trait]
 pub trait MediaService: Send + Sync {
     async fn upload_media(&self, data: UploadMediaData<'_>) -> CoreResult<Media>;
-    async fn get_media_details(&self, id: Uuid, user_id: Uuid) -> CoreResult<MediaBundle>;
-    async fn list_user_media(&self, user_id: Uuid, options: ListMediaOptions) -> CoreResult<Vec<Media>>;
-    async fn get_media_filepath(&self, id: Uuid, user_id: Uuid) -> CoreResult<String>;
+    async fn get_media_details(&self, id: Uuid, user_id: Option<Uuid>) -> CoreResult<MediaBundle>;
+    async fn list_user_media(
+        &self,
+        user_id: Uuid,
+        options: ListMediaOptions,
+    ) -> CoreResult<Vec<Media>>;
+    async fn get_media_filepath(&self, id: Uuid, user_id: Option<Uuid>) -> CoreResult<String>;
     async fn delete_media(&self, id: Uuid, user_id: Uuid) -> CoreResult<()>;
 }
 
@@ -37,12 +48,23 @@ pub trait AlbumService: Send + Sync {
         data: UpdateAlbumData<'_>,
     ) -> CoreResult<Album>;
     async fn delete_album(&self, album_id: Uuid, user_id: Uuid) -> CoreResult<()>;
+    async fn get_public_album_bundle(&self, album_id: Uuid) -> CoreResult<PublicAlbumBundle>;
 }
 
 #[async_trait]
 pub trait TagService: Send + Sync {
-    async fn add_tags_to_media(&self, media_id: Uuid, tag_names: &[String], user_id: Uuid) -> CoreResult<Vec<Tag>>;
-    async fn remove_tags_from_media(&self, media_id: Uuid, tag_names: &[String], user_id: Uuid) -> CoreResult<()>;
+    async fn add_tags_to_media(
+        &self,
+        media_id: Uuid,
+        tag_names: &[String],
+        user_id: Uuid,
+    ) -> CoreResult<Vec<Tag>>;
+    async fn remove_tags_from_media(
+        &self,
+        media_id: Uuid,
+        tag_names: &[String],
+        user_id: Uuid,
+    ) -> CoreResult<()>;
     async fn list_tags_for_media(&self, media_id: Uuid, user_id: Uuid) -> CoreResult<Vec<Tag>>;
 }
 
@@ -51,22 +73,22 @@ pub trait PersonService: Send + Sync {
     async fn create_person(&self, name: &str, owner_id: Uuid) -> CoreResult<Person>;
     async fn get_person(&self, person_id: Uuid, user_id: Uuid) -> CoreResult<Person>;
     async fn list_people(&self, user_id: Uuid) -> CoreResult<Vec<Person>>;
-    async fn update_person(
-        &self,
-        person_id: Uuid,
-        name: &str,
-        user_id: Uuid,
-    ) -> CoreResult<Person>;
+    async fn update_person(&self, person_id: Uuid, name: &str, user_id: Uuid)
+    -> CoreResult<Person>;
     async fn delete_person(&self, person_id: Uuid, user_id: Uuid) -> CoreResult<()>;
-    
+
     async fn assign_face_to_person(
         &self,
         face_region_id: Uuid,
         person_id: Uuid,
         user_id: Uuid,
     ) -> CoreResult<FaceRegion>;
-    
-    async fn list_faces_for_media(&self, media_id: Uuid, user_id: Uuid) -> CoreResult<Vec<FaceRegion>>;
+
+    async fn list_faces_for_media(
+        &self,
+        media_id: Uuid,
+        user_id: Uuid,
+    ) -> CoreResult<Vec<FaceRegion>>;
 
     async fn share_person(
         &self,
@@ -86,5 +108,9 @@ pub trait PersonService: Send + Sync {
 
 #[async_trait]
 pub trait AuthorizationService: Send + Sync {
-    async fn check_permission(&self, user_id: Uuid, permission: Permission) -> CoreResult<()>;
-}
+    async fn check_permission(
+        &self,
+        user_id: Option<Uuid>,
+        permission: Permission,
+    ) -> CoreResult<()>;
+}