Add RemoveTeamMemberAPIView

django/thunderstore/api/cyberstorm/views/__init__.py

@@ -14,6 +14,7 @@
     TeamMemberAddAPIView,
     TeamMemberListAPIView,
     TeamServiceAccountListAPIView,
+    RemoveTeamMemberAPIView,
 )
 
 __all__ = [
@@ -31,4 +32,5 @@
     "TeamMemberAddAPIView",
     "TeamMemberListAPIView",
     "TeamServiceAccountListAPIView",
+    "RemoveTeamMemberAPIView",
 ]

django/thunderstore/api/cyberstorm/views/team.py

@@ -1,5 +1,6 @@
 from django.contrib.auth import get_user_model
 from django.db.models import Q, QuerySet
+from django.http import HttpRequest
 from rest_framework import serializers
 from rest_framework.exceptions import PermissionDenied, ValidationError
 from rest_framework.generics import ListAPIView, RetrieveAPIView, get_object_or_404
@@ -19,7 +20,7 @@
     CyberstormAutoSchemaMixin,
     conditional_swagger_auto_schema,
 )
-from thunderstore.repository.forms import AddTeamMemberForm
+from thunderstore.repository.forms import AddTeamMemberForm, RemoveTeamMemberForm
 from thunderstore.repository.models.team import Team, TeamMember
 
 User = get_user_model()
@@ -107,6 +108,57 @@ def post(self, request, team_name, format=None):
             raise ValidationError(form.errors)
 
 
+class CyberstormRemoveTeamMemberRequestSerialiazer(serializers.Serializer):
+    username = serializers.CharField()
+
+
+class CyberstormRemoveTeamMemberResponseSerialiazer(serializers.Serializer):
+    username = serializers.CharField()
+    team_name = serializers.CharField()
+
+
+class RemoveTeamMemberAPIView(APIView):
+    permission_classes = [IsAuthenticated]
+
+    @conditional_swagger_auto_schema(
+        request_body=CyberstormRemoveTeamMemberRequestSerialiazer,
+        responses={200: CyberstormRemoveTeamMemberResponseSerialiazer},
+        operation_id="cyberstorm.team.members.remove",
+        tags=["cyberstorm"],
+    )
+    def post(self, request: HttpRequest, team_name: str):
+        team = get_object_or_404(Team, name__iexact=team_name)
+
+        serializer = CyberstormRemoveTeamMemberRequestSerialiazer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+
+        team_member = get_object_or_404(
+            TeamMember,
+            user__username__iexact=serializer.validated_data["username"],
+            team=team,
+        )
+
+        membership = team.get_membership_for_user(team_member.user)
+
+        form = RemoveTeamMemberForm(
+            user=request.user,
+            data={"membership": membership},
+        )
+
+        if form.is_valid():
+            form.save()
+            return Response(
+                CyberstormRemoveTeamMemberResponseSerialiazer(
+                    {
+                        "username": serializer.validated_data["username"],
+                        "team_name": team_name,
+                    }
+                ).data
+            )
+        else:
+            raise ValidationError(form.errors)
+
+
 class TeamServiceAccountListAPIView(CyberstormAutoSchemaMixin, TeamRestrictedAPIView):
     serializer_class = CyberstormServiceAccountSerializer
     filter_backends = [StrictOrderingFilter]

django/thunderstore/api/urls.py

@@ -15,6 +15,7 @@
     TeamMemberAddAPIView,
     TeamMemberListAPIView,
     TeamServiceAccountListAPIView,
+    RemoveTeamMemberAPIView,
 )
 
 cyberstorm_urls = [
@@ -98,4 +99,9 @@
         TeamServiceAccountListAPIView.as_view(),
         name="cyberstorm.team.service-account",
     ),
+    path(
+        "team/<str:team_name>/members/remove/",
+        RemoveTeamMemberAPIView.as_view(),
+        name="cyberstorm.team.members.remove",
+    ),
 ]