consultoria-as
a236187f3a
- Add MercadoLibre OAuth, listings, orders, webhooks and category search - New marketplace_external_bp.py, meli_service.py, marketplace_external_service.py - New marketplace_external.html/js with ML management UI - Inventory: bulk publish to ML with category autocomplete, listing type and shipping selectors - Inventory: new .btn--meli styles, select/label CSS fixes - WhatsApp bridge: rate limiting, 440/515/408 error handling, stale watchdog - DB migration v3.4_meli_integration.sql for marketplace_listings, orders, sync_queue - Add Celery tasks for ML sync and webhook processing - Sidebar: MercadoLibre navigation link
405 lines
13 KiB
Python
405 lines
13 KiB
Python
"""MercadoLibre external marketplace REST endpoints.
|
|
|
|
Routes:
|
|
Config
|
|
GET /pos/api/marketplace-ext/config
|
|
POST /pos/api/marketplace-ext/connect
|
|
DELETE /pos/api/marketplace-ext/connect
|
|
GET /pos/api/marketplace-ext/categories
|
|
|
|
Listings
|
|
GET /pos/api/marketplace-ext/listings
|
|
POST /pos/api/marketplace-ext/listings
|
|
POST /pos/api/marketplace-ext/listings/<id>/sync
|
|
POST /pos/api/marketplace-ext/listings/<id>/pause
|
|
POST /pos/api/marketplace-ext/listings/<id>/activate
|
|
DELETE /pos/api/marketplace-ext/listings/<id>
|
|
|
|
Orders
|
|
GET /pos/api/marketplace-ext/orders
|
|
GET /pos/api/marketplace-ext/orders/<id>
|
|
POST /pos/api/marketplace-ext/orders/<id>/convert
|
|
|
|
Webhook (public)
|
|
POST /pos/api/marketplace-ext/webhook/meli
|
|
"""
|
|
|
|
from flask import Blueprint, request, jsonify, g
|
|
from middleware import require_auth, has_permission
|
|
from tenant_db import get_tenant_conn, get_master_conn
|
|
from services import marketplace_external_service as meli_svc
|
|
from services.meli_service import MeliService, MeliAuthError
|
|
|
|
marketplace_ext_bp = Blueprint(
|
|
"marketplace_ext", __name__, url_prefix="/pos/api/marketplace-ext"
|
|
)
|
|
|
|
|
|
# ─── Helpers ───────────────────────────────────────────────────────────────
|
|
|
|
def _require_meli_manage():
|
|
if not has_permission("marketplace.manage"):
|
|
return jsonify({"error": "Missing permission: marketplace.manage"}), 403
|
|
return None
|
|
|
|
|
|
# ═══════════════════════════════════════════════════════════════════════════
|
|
# CONFIG
|
|
# ═══════════════════════════════════════════════════════════════════════════
|
|
|
|
@marketplace_ext_bp.route("/config", methods=["GET"])
|
|
@require_auth()
|
|
def get_config():
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
cfg = meli_svc.get_meli_config(conn)
|
|
# Never return tokens to frontend
|
|
safe = {
|
|
k: v for k, v in cfg.items()
|
|
if k not in ("meli_access_token", "meli_refresh_token", "meli_client_secret")
|
|
}
|
|
safe["connected"] = bool(cfg.get("meli_access_token"))
|
|
return jsonify(safe)
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@marketplace_ext_bp.route("/connect", methods=["POST"])
|
|
@require_auth()
|
|
def connect_meli():
|
|
err = _require_meli_manage()
|
|
if err:
|
|
return err
|
|
|
|
data = request.get_json() or {}
|
|
code = data.get("code")
|
|
client_id = data.get("client_id")
|
|
client_secret = data.get("client_secret")
|
|
redirect_uri = data.get("redirect_uri", "")
|
|
|
|
if not code or not client_id or not client_secret:
|
|
return jsonify({"error": "code, client_id and client_secret required"}), 400
|
|
|
|
try:
|
|
token_data = MeliService.exchange_code(code, client_id, client_secret, redirect_uri)
|
|
except MeliAuthError as e:
|
|
return jsonify({"error": str(e)}), 400
|
|
|
|
access_token = token_data.get("access_token")
|
|
refresh_token = token_data.get("refresh_token")
|
|
user_id = token_data.get("user_id")
|
|
|
|
# Validate token by fetching user
|
|
svc = MeliService(access_token)
|
|
try:
|
|
user = svc.get_user()
|
|
except MeliAuthError as e:
|
|
return jsonify({"error": f"Invalid token: {e}"}), 400
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
meli_svc.save_meli_config(conn, {
|
|
"meli_access_token": access_token,
|
|
"meli_refresh_token": refresh_token,
|
|
"meli_user_id": str(user_id or user.get("id")),
|
|
"meli_site_id": user.get("site_id", "MLM"),
|
|
"meli_enabled": "true",
|
|
"meli_client_id": client_id,
|
|
"meli_client_secret": client_secret,
|
|
})
|
|
return jsonify({
|
|
"ok": True,
|
|
"user_id": user_id or user.get("id"),
|
|
"nickname": user.get("nickname"),
|
|
"site_id": user.get("site_id"),
|
|
})
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@marketplace_ext_bp.route("/connect", methods=["DELETE"])
|
|
@require_auth()
|
|
def disconnect_meli():
|
|
err = _require_meli_manage()
|
|
if err:
|
|
return err
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
meli_svc.delete_meli_config(conn)
|
|
return jsonify({"ok": True})
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@marketplace_ext_bp.route("/categories", methods=["GET"])
|
|
@require_auth()
|
|
def search_categories():
|
|
q = request.args.get("q", "")
|
|
site_id = request.args.get("site_id", "MLM")
|
|
if not q or len(q) < 2:
|
|
return jsonify({"categories": []})
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
cfg = meli_svc.get_meli_config(conn)
|
|
svc = meli_svc._get_meli_service(cfg)
|
|
if not svc:
|
|
return jsonify({"error": "MercadoLibre not connected"}), 400
|
|
result = svc.search_categories(site_id, q)
|
|
return jsonify({"categories": result})
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
# ═══════════════════════════════════════════════════════════════════════════
|
|
# LISTINGS
|
|
# ═══════════════════════════════════════════════════════════════════════════
|
|
|
|
@marketplace_ext_bp.route("/listings", methods=["GET"])
|
|
@require_auth()
|
|
def list_listings():
|
|
page = int(request.args.get("page", 1))
|
|
per_page = min(int(request.args.get("per_page", 50)), 200)
|
|
status = request.args.get("status")
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
result = meli_svc.get_listings(conn, page=page, per_page=per_page, status=status)
|
|
return jsonify(result)
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@marketplace_ext_bp.route("/listings", methods=["POST"])
|
|
@require_auth()
|
|
def create_listings():
|
|
err = _require_meli_manage()
|
|
if err:
|
|
return err
|
|
|
|
data = request.get_json() or {}
|
|
inventory_ids = data.get("inventory_ids", [])
|
|
category_id = data.get("category_id")
|
|
listing_type = data.get("listing_type", "gold_special")
|
|
shipping_mode = data.get("shipping_mode", "me2")
|
|
|
|
if not inventory_ids:
|
|
return jsonify({"error": "inventory_ids required"}), 400
|
|
if not category_id:
|
|
return jsonify({"error": "category_id required"}), 400
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
result = meli_svc.publish_items(
|
|
conn,
|
|
inventory_ids=inventory_ids,
|
|
meli_category_id=category_id,
|
|
listing_type_id=listing_type,
|
|
shipping_mode=shipping_mode,
|
|
)
|
|
return jsonify(result), 201
|
|
except ValueError as e:
|
|
return jsonify({"error": str(e)}), 400
|
|
except Exception as e:
|
|
return jsonify({"error": str(e)}), 500
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@marketplace_ext_bp.route("/listings/<int:listing_id>/sync", methods=["POST"])
|
|
@require_auth()
|
|
def sync_listing(listing_id):
|
|
err = _require_meli_manage()
|
|
if err:
|
|
return err
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
result = meli_svc.sync_listing(conn, listing_id)
|
|
return jsonify(result)
|
|
except ValueError as e:
|
|
return jsonify({"error": str(e)}), 400
|
|
except Exception as e:
|
|
return jsonify({"error": str(e)}), 500
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@marketplace_ext_bp.route("/listings/<int:listing_id>/pause", methods=["POST"])
|
|
@require_auth()
|
|
def pause_listing(listing_id):
|
|
err = _require_meli_manage()
|
|
if err:
|
|
return err
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
result = meli_svc.pause_listing(conn, listing_id)
|
|
return jsonify(result)
|
|
except ValueError as e:
|
|
return jsonify({"error": str(e)}), 400
|
|
except Exception as e:
|
|
return jsonify({"error": str(e)}), 500
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@marketplace_ext_bp.route("/listings/<int:listing_id>/activate", methods=["POST"])
|
|
@require_auth()
|
|
def activate_listing(listing_id):
|
|
err = _require_meli_manage()
|
|
if err:
|
|
return err
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
result = meli_svc.activate_listing(conn, listing_id)
|
|
return jsonify(result)
|
|
except ValueError as e:
|
|
return jsonify({"error": str(e)}), 400
|
|
except Exception as e:
|
|
return jsonify({"error": str(e)}), 500
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@marketplace_ext_bp.route("/listings/<int:listing_id>", methods=["DELETE"])
|
|
@require_auth()
|
|
def delete_listing(listing_id):
|
|
err = _require_meli_manage()
|
|
if err:
|
|
return err
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
result = meli_svc.close_listing(conn, listing_id)
|
|
return jsonify(result)
|
|
except ValueError as e:
|
|
return jsonify({"error": str(e)}), 400
|
|
except Exception as e:
|
|
return jsonify({"error": str(e)}), 500
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
# ═══════════════════════════════════════════════════════════════════════════
|
|
# ORDERS
|
|
# ═══════════════════════════════════════════════════════════════════════════
|
|
|
|
@marketplace_ext_bp.route("/orders", methods=["GET"])
|
|
@require_auth()
|
|
def list_orders():
|
|
page = int(request.args.get("page", 1))
|
|
per_page = min(int(request.args.get("per_page", 50)), 200)
|
|
status = request.args.get("status")
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
result = meli_svc.get_orders(conn, page=page, per_page=per_page, status=status)
|
|
return jsonify(result)
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@marketplace_ext_bp.route("/orders/<int:order_id>", methods=["GET"])
|
|
@require_auth()
|
|
def get_order(order_id):
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
result = meli_svc.get_order_detail(conn, order_id)
|
|
return jsonify(result)
|
|
except ValueError as e:
|
|
return jsonify({"error": str(e)}), 404
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@marketplace_ext_bp.route("/orders/<int:order_id>/convert", methods=["POST"])
|
|
@require_auth("pos.sell")
|
|
def convert_order(order_id):
|
|
data = request.get_json() or {}
|
|
register_id = data.get("register_id")
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
result = meli_svc.convert_order_to_sale(
|
|
conn, order_id, employee_id=g.employee_id, register_id=register_id
|
|
)
|
|
return jsonify(result)
|
|
except ValueError as e:
|
|
return jsonify({"error": str(e)}), 400
|
|
except Exception as e:
|
|
return jsonify({"error": str(e)}), 500
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
@marketplace_ext_bp.route("/orders/<int:order_id>/status", methods=["POST"])
|
|
@require_auth()
|
|
def update_order_status_route(order_id):
|
|
data = request.get_json() or {}
|
|
new_status = data.get("status")
|
|
if not new_status:
|
|
return jsonify({"error": "status required"}), 400
|
|
|
|
conn = get_tenant_conn(g.tenant_id)
|
|
try:
|
|
result = meli_svc.update_order_status(conn, order_id, new_status)
|
|
return jsonify(result)
|
|
except ValueError as e:
|
|
return jsonify({"error": str(e)}), 400
|
|
except Exception as e:
|
|
return jsonify({"error": str(e)}), 500
|
|
finally:
|
|
conn.close()
|
|
|
|
|
|
# ═══════════════════════════════════════════════════════════════════════════
|
|
# WEBHOOK (public — no auth)
|
|
# ═══════════════════════════════════════════════════════════════════════════
|
|
|
|
@marketplace_ext_bp.route("/webhook/meli", methods=["POST"])
|
|
def meli_webhook():
|
|
"""Receive MercadoLibre notifications.
|
|
|
|
ML sends a lightweight payload with topic + resource URL.
|
|
We ack immediately and enqueue Celery for async processing.
|
|
"""
|
|
data = request.get_json(force=True, silent=True) or {}
|
|
topic = data.get("topic", "")
|
|
resource = data.get("resource", "")
|
|
user_id = data.get("user_id")
|
|
|
|
# Resolve tenant by meli_user_id
|
|
tenant_id = None
|
|
if user_id:
|
|
try:
|
|
mconn = get_master_conn()
|
|
mcur = mconn.cursor()
|
|
mcur.execute(
|
|
"""
|
|
SELECT t.id FROM tenants t
|
|
JOIN tenant_config c ON c.key = 'meli_user_id' AND c.value = %s
|
|
WHERE t.is_active = true
|
|
LIMIT 1
|
|
""",
|
|
(str(user_id),),
|
|
)
|
|
row = mcur.fetchone()
|
|
if row:
|
|
tenant_id = row[0]
|
|
mcur.close()
|
|
mconn.close()
|
|
except Exception:
|
|
pass
|
|
|
|
if tenant_id and topic:
|
|
try:
|
|
from tasks import process_meli_webhook_task
|
|
process_meli_webhook_task.delay(tenant_id, topic, resource)
|
|
except Exception as e:
|
|
print(f"[ML Webhook] Failed to enqueue task: {e}")
|
|
|
|
return jsonify({"ok": True})
|