From a0a090b5c0bd0644e31b86278bec9720d053f553 Mon Sep 17 00:00:00 2001
From: Davide Bongiovanni <davidebongiov@gmail.com>
Date: Sun, 11 Nov 2018 17:14:40 +0100
Subject: [PATCH] Server returns id of added/modified part. Removed
 authentication for now.

---
 parts/server.py | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/parts/server.py b/parts/server.py
index da10af1..e85688a 100644
--- a/parts/server.py
+++ b/parts/server.py
@@ -183,10 +183,11 @@ def getfile(filename):
 def alter(partID):
     partID = int(partID)
     s = ''
+    r = {}
     if partID < 0:
         # New entry
         s =  'insert into parts (partno, description, datasheet, location_id) '
-        s += 'values (:partno, :description, :datasheet, :location_id);'
+        s += 'values (:partno, :description, :datasheet, :location_id) returning id;'
         s = text(s)
         if len(request.files) != 0:
             datasheet_file = request.files['datasheet-file']
@@ -223,17 +224,20 @@ def alter(partID):
                 os.remove('/srv/datasheets/' + l[0]['datasheet'])
         else:
             datasheet_filename = l[0]['datasheet']
-        s += 'where id=:id;'
+        s += 'where id=:id returning id;'
         s = text(s)
         r = db_engine.execute(s, partno=request.form['partno'],
                                  description=request.form['description'],
                                  datasheet=datasheet_filename,
                                  location_id=request.form['location_id'],
                                  id=partID)
-    return '{"status":"ok"}'
+    
+    new_id = r.fetchone()[0]
+    r.close()
+    return '{"status":"ok", "part_id" : ' + str(new_id) + '}'
 
 @app.route('/parts/delete/<partID>')
-@requires_auth
+# @requires_auth
 def delete(partID):
     if partID < 0:
         abort(400)