Port core API routes for sites and devices

Data/Engine/interfaces/http/credentials.py

@@ -0,0 +1,70 @@
+from __future__ import annotations
+
+from flask import Blueprint, Flask, current_app, jsonify, request, session
+
+from Data.Engine.services.container import EngineServiceContainer
+
+blueprint = Blueprint("engine_credentials", __name__)
+
+
+def register(app: Flask, _services: EngineServiceContainer) -> None:
+    if "engine_credentials" not in app.blueprints:
+        app.register_blueprint(blueprint)
+
+
+def _services() -> EngineServiceContainer:
+    services = current_app.extensions.get("engine_services")
+    if services is None:  # pragma: no cover - defensive
+        raise RuntimeError("engine services not initialized")
+    return services
+
+
+def _credentials_service():
+    return _services().credential_service
+
+
+def _require_admin():
+    username = session.get("username")
+    role = (session.get("role") or "").strip().lower()
+    if not isinstance(username, str) or not username:
+        return jsonify({"error": "not_authenticated"}), 401
+    if role != "admin":
+        return jsonify({"error": "forbidden"}), 403
+    return None
+
+
+@blueprint.route("/api/credentials", methods=["GET"])
+def list_credentials() -> object:
+    guard = _require_admin()
+    if guard:
+        return guard
+
+    site_id_param = request.args.get("site_id")
+    connection_type = (request.args.get("connection_type") or "").strip() or None
+    try:
+        site_id = int(site_id_param) if site_id_param not in (None, "") else None
+    except (TypeError, ValueError):
+        site_id = None
+
+    records = _credentials_service().list_credentials(
+        site_id=site_id,
+        connection_type=connection_type,
+    )
+    return jsonify({"credentials": records})
+
+
+@blueprint.route("/api/credentials", methods=["POST"])
+def create_credential() -> object:  # pragma: no cover - placeholder
+    return jsonify({"error": "not implemented"}), 501
+
+
+@blueprint.route("/api/credentials/<int:credential_id>", methods=["GET", "PUT", "DELETE"])
+def credential_detail(credential_id: int) -> object:  # pragma: no cover - placeholder
+    if request.method == "GET":
+        return jsonify({"error": "not implemented"}), 501
+    if request.method == "DELETE":
+        return jsonify({"error": "not implemented"}), 501
+    return jsonify({"error": "not implemented"}), 501
+
+
+__all__ = ["register", "blueprint"]