use actix_web::{HttpResponse, web}; use serde::Deserialize; use utoipa::IntoParams; use crate::api::response::{ApiErrorResponse, ApiResponse}; use crate::error::AppError; use crate::service::AppService; use crate::session::Session; #[derive(Debug, Deserialize, IntoParams)] pub struct PathParams { /// Workspace name (unique identifier) pub workspace_name: String, /// Repository name (unique within the workspace) pub repo_name: String, /// Member ID (UUID) pub member_id: uuid::Uuid, } /// Remove a member from a repository /// /// Revokes a user's access to the repository. /// Requires Admin role or higher in the repository. /// /// Restrictions: /// - Cannot remove the repository owner (use transfer_owner instead) /// - Cannot remove members with equal or higher role than your own /// /// Effects: /// - Member loses all access to the repository /// - Member is removed from all repository activities /// /// Returns success message on completion. #[utoipa::path( delete, path = "/api/v1/workspaces/{workspace_name}/repos/{repo_name}/members/{member_id}", tag = "Repos", operation_id = "repoRemoveMember", params(PathParams), responses( (status = 200, description = "Member removed successfully.", body = ApiResponse), (status = 400, description = "Cannot remove the repository owner or member with higher role", body = ApiErrorResponse), (status = 401, description = "Authentication required or session expired", body = ApiErrorResponse), (status = 403, description = "Insufficient permissions (requires Admin role or higher)", body = ApiErrorResponse), (status = 404, description = "Repository, workspace, or member not found", body = ApiErrorResponse), (status = 500, description = "Internal server error", body = ApiErrorResponse), ), security( ("session_cookie" = []) ) )] pub async fn remove_member( service: web::Data, session: Session, path: web::Path, ) -> Result { service .repo .repo_remove_member( &session, &path.workspace_name, &path.repo_name, path.member_id, ) .await?; Ok(HttpResponse::Ok().json(ApiResponse::new("Member removed successfully".to_string()))) }