2 commits

Author	SHA1	Message	Date
Joakim Mörling	ebab892e93	feat: add PATCH /api/admin/orders/{id} for manual tracking entry ... - UpdateTrackingRequest DTO: optional trackingId string (nullable — allows clearing a tracking ID entered incorrectly) - OrderService.updateTracking(orderId, trackingId): finds order, sets trackingId via setter, saves entity — @PreUpdate fires to update the updated_at timestamp automatically - AdminController.PATCH /api/admin/orders/{id}: admin-only endpoint, validates request body with @Valid, returns updated AdminOrderResponse via the existing toAdminResponse() mapper - AdminControllerTest: 5 new tests — shouldReturn403WhenPatchingTrackingWithoutAuth, shouldReturn403WhenPatchingTrackingAsNonAdmin, shouldUpdateTrackingSuccessfully (verifies response id and trackingId), shouldClearTrackingWhenNull (removes trackingId), shouldReturn404WhenOrderNotFoundForTracking	2026-05-15 19:58:33 +02:00
Joakim Mörling	76028fa94d	feat: add GET /api/admin/orders and PATCH /api/admin/orders/{id}/status ... - AdminOrderResponse DTO: extends OrderResponse with email (from User relation) and letterText fields, exposing the full order for admin review - UpdateStatusRequest DTO: single "status" field validated against all six OrderStatus values (pending_payment|paid|lookup_started|sent| delivered|failed) with Swedish error messages - OrderService.getAllOrders(): delegates to OrderRepository .findAllByOrderByCreatedAtDesc() which uses @EntityGraph to eagerly fetch the user relationship in a single query - OrderService.updateOrderStatus(orderId, statusString): looks up order, converts status string to OrderStatus enum via case-insensitive valueOf(), saves updated entity - AdminController /api/admin: GET /orders → list all orders with user email (admin only) PATCH /orders/{id}/status → update order status (admin only) - toAdminResponse() mapper safely handles null user (empty email fallback)	2026-05-15 12:14:53 +02:00