/opt/canhelp/apps/mobile/lib/services
Edit: /opt/canhelp/apps/mobile/lib/services/api_client.dart (59021B)
import 'dart:convert';
import 'dart:io' show Platform;
import 'dart:typed_data';
import 'package:flutter/foundation.dart' show kReleaseMode;
import 'package:http/http.dart' as http;
import 'package:http_parser/http_parser.dart' as http_parser;
import '../models/app_notification.dart';
import '../models/availability.dart';
import '../models/category.dart';
import '../models/chat_room.dart';
import '../models/dashboard_data.dart';
import '../models/location.dart';
import '../models/offer.dart';
import '../models/portfolio_item.dart';
import '../models/price_list.dart';
import '../models/review.dart';
import '../models/specialist_card.dart';
import '../models/task.dart';
import '../models/user.dart';
import 'storage_service.dart';
class ApiException implements Exception {
final int statusCode;
final String message;
final Map
? body;
ApiException(this.statusCode, this.message, [this.body]);
@override
String toString() => 'ApiException($statusCode): $message';
}
class ApiClient {
static final ApiClient _instance = ApiClient._internal();
factory ApiClient() => _instance;
ApiClient._internal();
final StorageService _storage = StorageService();
final http.Client _http = http.Client();
/// Base URL without any path suffix.
/// Prefer the build-time API_URL define, then fall back to production,
/// then platform-specific localhost for local dev.
String get origin {
const env = String.fromEnvironment('API_URL');
if (env.isNotEmpty) return env;
if (kReleaseMode) return 'https://api.canhelp.gr';
try {
if (Platform.isAndroid) return 'http://10.0.2.2:4000';
} catch (_) {}
return 'http://localhost:4000';
}
String get _origin => origin;
/// REST API base: /api
String get baseUrl => '$_origin/api';
/// Better Auth base: /api/auth
String get _authUrl => '$_origin/api/auth';
String? _webVerificationCallback() {
const webUrl = String.fromEnvironment('WEB_URL');
if (webUrl.isEmpty) return null;
return '${webUrl.replaceAll(RegExp(r'/$'), '')}/dashboard';
}
// ── helpers ──────────────────────────────────────────────
Map _jsonHeaders([String? token]) => {
'Content-Type': 'application/json',
'Accept': 'application/json',
if (token != null) 'Authorization': 'Bearer $token',
};
Future _handleResponse(http.Response res) async {
if (res.statusCode >= 200 && res.statusCode < 300) {
if (res.body.isEmpty) return {};
return jsonDecode(res.body);
}
final Map body = res.body.isNotEmpty
? jsonDecode(res.body) as Map
: {};
final message =
(body['message'] ?? body['error'] ?? 'Request failed') as String;
throw ApiException(res.statusCode, message, body);
}
Future _request(
String method,
String path, {
Map? body,
Map? queryParams,
bool auth = false,
}) async {
final uri = Uri.parse(
'$baseUrl$path',
).replace(queryParameters: queryParams);
final token = auth ? await _storage.getAccessToken() : null;
final headers = _jsonHeaders(token);
http.Response res;
switch (method) {
case 'GET':
res = await _http.get(uri, headers: headers);
case 'POST':
res = await _http.post(uri, headers: headers, body: jsonEncode(body));
case 'PATCH':
res = await _http.patch(uri, headers: headers, body: jsonEncode(body));
case 'DELETE':
res = await _http.delete(uri, headers: headers);
default:
throw UnsupportedError('HTTP method $method');
}
return _handleResponse(res);
}
// ── Auth (Better Auth endpoints) ─────────────────────────
/// Extracts the Bearer token from a Better Auth response.
String? _extractToken(http.Response res, Map data) {
final bodyToken = data['token'] as String?;
if (bodyToken != null && bodyToken.isNotEmpty) return bodyToken;
return res.headers['set-auth-token'];
}
/// Sign in with email + password.
Future> login({
required String email,
required String password,
}) async {
final res = await _http.post(
Uri.parse('$_authUrl/sign-in/email'),
headers: _jsonHeaders(),
body: jsonEncode({'email': email, 'password': password}),
);
final data = await _handleResponse(res) as Map;
final token = _extractToken(res, data);
if (token == null) throw ApiException(500, 'No token in response');
final userId = (data['user'] as Map?)?['id'] as String?;
await _storage.saveTokens(accessToken: token, userId: userId);
return data;
}
/// Sign in with Google ID token (native mobile flow).
/// Exchanges the Google [idToken] for a Better Auth session token.
Future> signInWithGoogle({
required String idToken,
String? accessToken,
}) async {
final res = await _http.post(
Uri.parse('$_authUrl/sign-in/social'),
headers: _jsonHeaders(),
body: jsonEncode({
'provider': 'google',
'idToken': {
'token': idToken,
if (accessToken != null) 'accessToken': accessToken,
},
}),
);
final data = await _handleResponse(res) as Map;
final token = _extractToken(res, data);
if (token == null) throw ApiException(500, 'No token in response');
final userId = (data['user'] as Map?)?['id'] as String?;
await _storage.saveTokens(accessToken: token, userId: userId);
return data;
}
/// Sign in with Apple identity token (native iOS flow).
Future> signInWithApple({
required String idToken,
String? authorizationCode,
}) async {
final res = await _http.post(
Uri.parse('$_authUrl/sign-in/social'),
headers: _jsonHeaders(),
body: jsonEncode({
'provider': 'apple',
'idToken': {
'token': idToken,
if (authorizationCode != null) 'accessToken': authorizationCode,
},
}),
);
final data = await _handleResponse(res) as Map;
final token = _extractToken(res, data);
if (token == null) throw ApiException(500, 'No token in response');
final userId = (data['user'] as Map?)?['id'] as String?;
await _storage.saveTokens(accessToken: token, userId: userId);
return data;
}
/// Register with email + password + profile fields.
Future> register({
required String email,
required String password,
required String firstName,
required String lastName,
String? locale,
}) async {
final callbackUrl = _webVerificationCallback();
final res = await _http.post(
Uri.parse('$_authUrl/sign-up/email'),
headers: _jsonHeaders(),
body: jsonEncode({
'email': email,
'password': password,
'name': '$firstName $lastName',
'firstName': firstName,
'lastName': lastName,
'role': 'user',
if (locale != null && locale.isNotEmpty) 'locale': locale,
if (callbackUrl != null) 'callbackURL': callbackUrl,
}),
);
final data = await _handleResponse(res) as Map;
final token = _extractToken(res, data);
if (token != null && token.isNotEmpty) {
final userId = (data['user'] as Map?)?['id'] as String?;
await _storage.saveTokens(accessToken: token, userId: userId);
}
return data;
}
/// Confirm password reset with [token] from the email link.
Future resetPassword(String token, String newPassword) async {
final res = await _http.post(
Uri.parse('$_authUrl/reset-password'),
headers: _jsonHeaders(),
body: jsonEncode({'token': token, 'newPassword': newPassword}),
);
if (res.statusCode >= 400) {
final raw = res.body.trim();
if (raw.isNotEmpty) {
try {
final body = jsonDecode(raw);
throw ApiException(
res.statusCode,
body['message'] ?? body['error'] ?? 'Error',
);
} catch (e) {
if (e is ApiException) rethrow;
}
}
throw ApiException(res.statusCode, 'Error ${res.statusCode}');
}
}
/// Send a password reset email.
Future forgotPassword(String email) async {
final res = await _http.post(
Uri.parse('$_authUrl/request-password-reset'),
headers: _jsonHeaders(),
body: jsonEncode({
'email': email,
'redirectTo': 'canhelp://reset-password',
}),
);
if (res.statusCode >= 400) {
final raw = res.body.trim();
if (raw.isNotEmpty) {
try {
final body = jsonDecode(raw);
throw ApiException(
res.statusCode,
body['message'] ?? body['error'] ?? 'Error',
);
} catch (e) {
if (e is ApiException) rethrow;
}
}
throw ApiException(res.statusCode, 'Error ${res.statusCode}');
}
}
/// Resend the email-verification link to [email].
/// Used after a sign-in attempt fails with EMAIL_NOT_VERIFIED.
Future sendVerificationEmail(String email, {String? locale}) async {
final callbackUrl = _webVerificationCallback();
final res = await _http.post(
Uri.parse('$_authUrl/send-verification-email'),
headers: _jsonHeaders(),
body: jsonEncode({
'email': email,
if (locale != null && locale.isNotEmpty) 'locale': locale,
if (callbackUrl != null) 'callbackURL': callbackUrl,
}),
);
if (res.statusCode >= 400) {
final raw = res.body.trim();
if (raw.isNotEmpty) {
try {
final body = jsonDecode(raw);
throw ApiException(
res.statusCode,
body['message'] ?? body['error'] ?? 'Error',
);
} catch (e) {
if (e is ApiException) rethrow;
}
}
throw ApiException(res.statusCode, 'Error ${res.statusCode}');
}
}
/// Sign out — revokes the session on the server, then clears local storage.
Future logout() async {
final token = await _storage.getAccessToken();
if (token != null) {
try {
await _http.post(
Uri.parse('$_authUrl/sign-out'),
headers: _jsonHeaders(token),
body: jsonEncode({}),
);
} catch (_) {
// Ignore errors — always clear locally
}
}
await _storage.deleteTokens();
}
// ── Users ────────────────────────────────────────────────
Future getProfile() async {
final data = await _request('GET', '/users/me', auth: true);
return User.fromJson(data as Map);
}
/// Returns the raw /users/me JSON (includes fields like siteSettings).
Future> getRawProfile() async {
return await _request('GET', '/users/me', auth: true)
as Map;
}
Future updateProfile(Map fields) async {
final data = await _request('PATCH', '/users/me', body: fields, auth: true);
return User.fromJson(data as Map);
}
Future becomeSpecialist() async {
final data = await _request(
'POST',
'/users/me/become-specialist',
auth: true,
);
return User.fromJson(data as Map);
}
// ── Specialist Cards ─────────────────────────────────────
Future<({List cards, int? maxCards})> getMySpecialistCards({
String? locale,
}) async {
final data =
await _request(
'GET',
'/specialist-cards/my',
queryParams: {
if (locale != null && locale.isNotEmpty) 'locale': locale,
},
auth: true,
)
as Map;
final cards = (data['cards'] as List)
.map((e) => SpecialistCard.fromJson(e as Map))
.toList();
return (cards: cards, maxCards: data['maxCards'] as int?);
}
Future createSpecialistCard({
required String title,
String? descriptionLocale,
}) async {
final data = await _request(
'POST',
'/specialist-cards',
body: {
'title': title,
if (descriptionLocale != null && descriptionLocale.isNotEmpty)
'descriptionLocale': descriptionLocale,
},
auth: true,
);
return SpecialistCard.fromJson(data as Map);
}
Future updateSpecialistCard(
String id,
Map fields,
) async {
final data = await _request(
'PATCH',
'/specialist-cards/$id',
body: fields,
auth: true,
);
return SpecialistCard.fromJson(data as Map);
}
Future> suggestCategory(
String cardId, {
required String name,
required String locale,
}) async {
final data = await _request(
'POST',
'/specialist-cards/$cardId/category-suggestions',
body: {'name': name, 'locale': locale},
auth: true,
);
return Map.from(data as Map);
}
Future generateSpecialistDescription({
required List categories,
required String locale,
}) async {
final data =
await _request(
'POST',
'/specialist-cards/generate-description',
body: {'categories': categories, 'locale': locale},
auth: true,
)
as Map;
return data['description'] as String? ?? '';
}
Future deleteSpecialistCard(String id) async {
await _request('DELETE', '/specialist-cards/$id', auth: true);
}
// ── My Reviews ───────────────────────────────────────────
Future> getMyReviews() async {
final data =
await _request('GET', '/reviews/my', auth: true) as List;
return data.map((e) {
final m = e as Map;
final reviewJson = m['review'] as Map;
final authorJson = m['author'] as Map?;
return Review.fromJson({
...reviewJson,
if (authorJson != null) 'author': authorJson,
});
}).toList();
}
// ── Tasks ────────────────────────────────────────────────
/// GET /tasks — paginated. Returns the paginated wrapper.
Future<({List data, int total, int page, int limit})> getTasks({
int page = 1,
int limit = 20,
String? status,
String? category,
String? location,
}) async {
final qp = {
'page': page.toString(),
'limit': limit.toString(),
if (status != null) 'status': status,
if (category != null) 'category': category,
if (location != null) 'location': location,
};
final data =
await _request('GET', '/tasks', queryParams: qp)
as Map;
final items = (data['data'] as List).map((e) {
final item = e as Map;
// API returns { task: {...}, customer: {...} }
return Task.fromJson(item['task'] as Map? ?? item);
}).toList();
return (
data: items,
total: data['total'] as int? ?? items.length,
page: data['page'] as int? ?? page,
limit: data['limit'] as int? ?? limit,
);
}
Future<({List data, int total, int page, int limit})> searchTasks({
String? query,
String? category,
String? location,
String? status,
double? budgetMin,
double? budgetMax,
bool forMe = false,
int page = 1,
int limit = 20,
}) async {
final endpoint = forMe ? '/tasks/for-me' : '/tasks';
final qp = {
'page': page.toString(),
'limit': limit.toString(),
if (query != null && query.isNotEmpty) 'q': query,
if (category != null) 'category': category,
if (location != null) 'location': location,
if (status != null) 'status': status,
if (budgetMin != null) 'budgetMin': budgetMin.toStringAsFixed(0),
if (budgetMax != null) 'budgetMax': budgetMax.toStringAsFixed(0),
};
final data =
await _request('GET', endpoint, queryParams: qp, auth: forMe)
as Map;
final items = (data['data'] as List).map((e) {
final item = e as Map;
// /tasks returns { task: {...}, customer: {...} }, unwrap if needed
final taskJson = item.containsKey('task')
? item['task'] as Map
: item;
return Task.fromJson(taskJson);
}).toList();
return (
data: items,
total: data['total'] as int? ?? items.length,
page: data['page'] as int? ?? page,
limit: data['limit'] as int? ?? limit,
);
}
/// GET /tasks/my — returns tasks owned by the current user.
Future> getMyTasks() async {
final data =
await _request('GET', '/tasks/my', auth: true) as List;
return data.map((e) => Task.fromJson(e as Map)).toList();
}
/// GET /tasks/:id — returns { task, customer }.
Future getTask(String id) async {
final data = await _request('GET', '/tasks/$id') as Map;
// API returns { task: {...}, customer: {...} }
final taskJson = data['task'] as Map? ?? data;
final customerJson = data['customer'] as Map?;
return Task.fromJson(taskJson, customer: customerJson);
}
Future createTask({
required String title,
required String description,
double? budget,
bool budgetNegotiable = false,
String? category,
String? location,
String locale = 'en',
DateTime? deadline,
DateTime? expiresAt,
String? timeSlot,
String? district,
String? street,
String? houseNumber,
List? images,
String? confidentialNote,
}) async {
final data = await _request(
'POST',
'/tasks',
auth: true,
body: {
'title': title,
'description': description,
if (budget != null) 'budget': budget,
'budgetNegotiable': budgetNegotiable,
if (category != null) 'category': category,
if (location != null) 'location': location,
'locale': locale,
if (deadline != null) 'deadline': deadline.toUtc().toIso8601String(),
if (expiresAt != null) 'expiresAt': expiresAt.toUtc().toIso8601String(),
if (timeSlot != null && timeSlot.isNotEmpty) 'timeSlot': timeSlot,
if (district != null && district.isNotEmpty) 'district': district,
if (street != null && street.isNotEmpty) 'street': street,
if (houseNumber != null && houseNumber.isNotEmpty)
'houseNumber': houseNumber,
if (images != null && images.isNotEmpty) 'images': images,
if (confidentialNote != null && confidentialNote.isNotEmpty)
'confidentialNote': confidentialNote,
'status': 'open',
},
);
return Task.fromJson(data as Map);
}
/// PATCH /tasks/:id — update an existing task (owner only, draft/open status).
Future updateTask(
String id, {
String? title,
String? description,
double? budget,
bool? budgetNegotiable,
String? category,
String? location,
DateTime? deadline,
DateTime? expiresAt,
String? timeSlot,
String? district,
String? street,
String? houseNumber,
String? confidentialNote,
String? status,
}) async {
final body = {
if (title != null) 'title': title,
if (description != null) 'description': description,
if (budget != null) 'budget': budget,
if (budgetNegotiable != null) 'budgetNegotiable': budgetNegotiable,
if (category != null) 'category': category,
if (location != null) 'location': location,
if (deadline != null) 'deadline': deadline.toUtc().toIso8601String(),
if (expiresAt != null) 'expiresAt': expiresAt.toUtc().toIso8601String(),
if (timeSlot != null) 'timeSlot': timeSlot,
if (district != null) 'district': district,
if (street != null) 'street': street,
if (houseNumber != null) 'houseNumber': houseNumber,
if (confidentialNote != null) 'confidentialNote': confidentialNote,
if (status != null) 'status': status,
};
final data = await _request('PATCH', '/tasks/$id', body: body, auth: true);
return Task.fromJson(data as Map);
}
Future uploadFile(List bytes, String filename) async {
final token = await _storage.getAccessToken();
if (token == null) throw ApiException(401, 'Not authenticated');
final ext = filename.contains('.')
? filename.split('.').last.toLowerCase()
: 'jpg';
final mimeType = switch (ext) {
'png' => 'image/png',
'gif' => 'image/gif',
'webp' => 'image/webp',
_ => 'image/jpeg',
};
final uri = Uri.parse('$baseUrl/uploads');
final req = http.MultipartRequest('POST', uri);
req.headers['Authorization'] = 'Bearer $token';
req.files.add(
http.MultipartFile.fromBytes(
'file',
bytes,
filename: filename,
contentType: http_parser.MediaType.parse(mimeType),
),
);
final streamed = await _http.send(req);
final resp = await http.Response.fromStream(streamed);
if (resp.statusCode >= 400) {
final body = resp.body.isNotEmpty
? (jsonDecode(resp.body) as Map)
: {};
final msg =
body['error'] as String? ??
body['message'] as String? ??
'Upload failed';
throw ApiException(resp.statusCode, msg);
}
final body = jsonDecode(resp.body) as Map;
final url = body['url'] as String? ?? body['path'] as String? ?? '';
return url.startsWith('http') ? url : '$_origin$url';
}
// ── Offers ───────────────────────────────────────────────
/// GET /offers?taskId — returns [{ offer, specialist }].
/// Only the task owner can call this.
Future> getOffers({required String taskId}) async {
final data =
await _request(
'GET',
'/offers',
queryParams: {'taskId': taskId},
auth: true,
)
as List;
return data
.map(
(e) => Offer.fromJson(
(e as Map)['offer'] as Map,
),
)
.toList();
}
/// GET /offers?taskId — returns raw [{ offer, specialist }] including specialist info.
Future>> getTaskOffersRaw({
required String taskId,
}) async {
final data =
await _request(
'GET',
'/offers',
queryParams: {'taskId': taskId},
auth: true,
)
as List;
return data.map((e) => e as Map).toList();
}
/// GET /offers/my — returns [{ offer, task }].
Future> getMyOffers() async {
final data =
await _request('GET', '/offers/my', auth: true) as List;
return data
.map(
(e) => Offer.fromJson(
(e as Map)['offer'] as Map,
),
)
.toList();
}
/// GET /offers/my — returns [OfferWithTask] including task info.
Future> getMyOffersWithTask() async {
final data =
await _request('GET', '/offers/my', auth: true) as List;
return data
.map((e) => OfferWithTask.fromJson(e as Map))
.toList();
}
Future createOffer({
required String taskId,
required double price,
String? message,
}) async {
final data = await _request(
'POST',
'/offers',
auth: true,
body: {
'taskId': taskId,
'price': price,
if (message != null && message.isNotEmpty) 'message': message,
},
);
return Offer.fromJson(data as Map);
}
Future acceptOffer(String id) async {
final data = await _request('PATCH', '/offers/$id/accept', auth: true);
return Offer.fromJson(data as Map);
}
Future declineOffer(String id) async {
final data = await _request('PATCH', '/offers/$id/decline', auth: true);
return Offer.fromJson(data as Map);
}
// ── Categories ───────────────────────────────────────────
Future> getCategories() async {
final data = await _request('GET', '/categories') as List;
return data
.map((e) => Category.fromJson(e as Map))
.toList();
}
// ── Locations ────────────────────────────────────────────
Future> getLocations() async {
final data = await _request('GET', '/locations') as List;
return data
.map((e) => Location.fromJson(e as Map))
.toList();
}
Future>> getSkillSuggestions([
List categorySlugs = const [],
]) async {
final query = categorySlugs
.map((slug) => 'category=${Uri.encodeQueryComponent(slug)}')
.join('&');
final data =
await _request(
'GET',
'/skill-suggestions${query.isEmpty ? '' : '?$query'}',
)
as List;
return data
.whereType