replace drf by django-ninja

sas/api.py

@@ -0,0 +1,43 @@
+from ninja import Query
+from ninja_extra import ControllerBase, api_controller, route
+from ninja_extra.exceptions import PermissionDenied
+from ninja_extra.permissions import IsAuthenticated
+
+from core.models import User
+from sas.models import Picture
+from sas.schemas import PictureFilterSchema, PictureSchema
+
+
+@api_controller("/sas")
+class SasController(ControllerBase):
+    @route.get(
+        "/picture",
+        response=list[PictureSchema],
+        permissions=[IsAuthenticated],
+        url_name="pictures",
+    )
+    def fetch_pictures(self, filters: Query[PictureFilterSchema]):
+        """Find pictures viewable by the user corresponding to the given filters.
+
+        A user with an active subscription can see any picture, as long
+        as it has been moderated and not asked for removal.
+        An unsubscribed user can see the pictures he has been identified on
+        (only the moderated ones, too)
+
+        Notes:
+            Trying to fetch the pictures of another user with this route
+            while being unsubscribed will just result in an empty response.
+        """
+        user: User = self.context.request.user
+        if not user.is_subscribed and filters.users_identified != {user.id}:
+            # User can view any moderated picture if he/she is subscribed.
+            # If not, he/she can view only the one he/she has been identified on
+            raise PermissionDenied
+        pictures = filters.filter(
+            Picture.objects.filter(is_moderated=True, asked_for_removal=False)
+        )
+        for picture in pictures:
+            picture.full_size_url = picture.get_download_url()
+            picture.compressed_url = picture.get_download_compressed_url()
+            picture.thumb_url = picture.get_download_thumb_url()
+        return pictures

sas/schemas.py

@@ -0,0 +1,25 @@
+from datetime import datetime
+
+from ninja import FilterSchema, ModelSchema
+from pydantic import Field
+
+from core.schemas import SimpleUserSchema
+from sas.models import Picture
+
+
+class PictureFilterSchema(FilterSchema):
+    before_date: datetime | None = Field(None, q="date__lte")
+    after_date: datetime | None = Field(None, q="date__gte")
+    users_identified: set[int] | None = Field(None, q="people__user_id__in")
+    album_id: int | None = Field(None, q="parent_id")
+
+
+class PictureSchema(ModelSchema):
+    class Meta:
+        model = Picture
+        fields = ["id", "name", "date"]
+
+    author: SimpleUserSchema = Field(validation_alias="owner")
+    full_size_url: str
+    compressed_url: str
+    thumb_url: str