Feature/snapshot subscription graphql

backend/apps/owasp/admin/__init__.py

@@ -16,6 +16,7 @@
 from .project import ProjectAdmin
 from .project_health_metrics import ProjectHealthMetricsAdmin
 from .snapshot import SnapshotAdmin
+from .snapshot_subscription import SnapshotSubscriptionAdmin
 from .sponsor import SponsorAdmin
 
 admin.site.register(ProjectHealthRequirements)

backend/apps/owasp/admin/snapshot_subscription.py

@@ -0,0 +1,44 @@
+"""Admin registration for SnapshotSubscription model."""
+
+from django.contrib import admin
+
+from apps.owasp.models.snapshot_subscription import SnapshotSubscription
+
+
+class SnapshotSubscriptionAdmin(admin.ModelAdmin):
+    """Admin for SnapshotSubscription model."""
+
+    list_display = ("user", "frequency", "is_active", "created_at", "updated_at")
+    list_filter = ("frequency", "is_active", "created_at")
+    search_fields = ("user__email", "user__username")
+    raw_id_fields = ("user",)
+    readonly_fields = ("unsubscribe_token", "created_at", "updated_at")
+
+    fieldsets = (
+        (None, {"fields": ("user", "frequency", "is_active")}),
+        (
+            "Content Preferences",
+            {
+                "fields": (
+                    "include_chapters",
+                    "include_events",
+                    "include_issues",
+                    "include_posts",
+                    "include_projects",
+                    "include_pull_requests",
+                    "include_releases",
+                    "include_users",
+                ),
+            },
+        ),
+        (
+            "System",
+            {
+                "fields": ("unsubscribe_token", "created_at", "updated_at"),
+                "classes": ("collapse",),
+            },
+        ),
+    )
+
+
+admin.site.register(SnapshotSubscription, SnapshotSubscriptionAdmin)

backend/apps/owasp/api/internal/mutations/__init__.py

@@ -0,0 +1,10 @@
+"""OWASP app mutations."""
+
+import strawberry
+
+from .snapshot_subscription import SnapshotSubscriptionMutations
+
+
+@strawberry.type
+class OwaspMutations(SnapshotSubscriptionMutations):
+    """OWASP mutations."""

backend/apps/owasp/api/internal/mutations/snapshot_subscription.py

@@ -0,0 +1,188 @@
+"""OWASP snapshot subscription GraphQL mutations."""
+
+import strawberry
+from strawberry.types import Info
+
+from apps.nest.api.internal.permissions import IsAuthenticated
+from apps.owasp.api.internal.nodes.snapshot_subscription import SnapshotSubscriptionNode
+from apps.owasp.models.snapshot_subscription import SnapshotSubscription
+
+
+@strawberry.input
+class CreateSnapshotSubscriptionInput:
+    """Input for creating a snapshot subscription."""
+
+    frequency: str = "weekly"
+    include_chapters: bool = True
+    include_events: bool = True
+    include_issues: bool = True
+    include_posts: bool = True
+    include_projects: bool = True
+    include_pull_requests: bool = True
+    include_releases: bool = True
+    include_users: bool = True
+
+
+@strawberry.input
+class UpdateSnapshotSubscriptionInput:
+    """Input for updating a snapshot subscription."""
+
+    frequency: str | None = None
+    include_chapters: bool | None = None
+    include_events: bool | None = None
+    include_issues: bool | None = None
+    include_posts: bool | None = None
+    include_projects: bool | None = None
+    include_pull_requests: bool | None = None
+    include_releases: bool | None = None
+    include_users: bool | None = None
+
+
+@strawberry.type
+class SnapshotSubscriptionResult:
+    """Result payload for snapshot subscription mutations."""
+
+    ok: bool
+    message: str
+    subscription: SnapshotSubscriptionNode | None = None
+
+
+@strawberry.type
+class SnapshotSubscriptionMutations:
+    """GraphQL mutations for snapshot subscription management."""
+
+    @strawberry.mutation(permission_classes=[IsAuthenticated])
+    def create_snapshot_subscription(
+        self,
+        info: Info,
+        input_data: CreateSnapshotSubscriptionInput,
+    ) -> SnapshotSubscriptionResult:
+        """Create a new snapshot subscription for the logged-in user."""
+        user = info.context.request.user
+
+        if SnapshotSubscription.objects.filter(user=user).exists():
+            return SnapshotSubscriptionResult(
+                ok=False,
+                message="Subscription already exists.",
+            )
+
+        if input_data.frequency not in dict(SnapshotSubscription.Frequency.choices):
+            return SnapshotSubscriptionResult(
+                ok=False,
+                message="Invalid frequency. Must be 'weekly' or 'monthly'.",
+            )
+
+        subscription = SnapshotSubscription.objects.create(
+            user=user,
+            frequency=input_data.frequency,
+            include_chapters=input_data.include_chapters,
+            include_events=input_data.include_events,
+            include_issues=input_data.include_issues,
+            include_posts=input_data.include_posts,
+            include_projects=input_data.include_projects,
+            include_pull_requests=input_data.include_pull_requests,
+            include_releases=input_data.include_releases,
+            include_users=input_data.include_users,
+        )
+
+        return SnapshotSubscriptionResult(
+            ok=True,
+            message="Subscription created successfully.",
+            subscription=subscription,
+        )
+
+    @strawberry.mutation(permission_classes=[IsAuthenticated])
+    def update_snapshot_subscription(
+        self,
+        info: Info,
+        input_data: UpdateSnapshotSubscriptionInput,
+    ) -> SnapshotSubscriptionResult:
+        """Update the logged-in user's snapshot subscription."""
+        user = info.context.request.user
+
+        try:
+            subscription = SnapshotSubscription.objects.get(user=user)
+        except SnapshotSubscription.DoesNotExist:
+            return SnapshotSubscriptionResult(
+                ok=False,
+                message="Subscription not found.",
+            )
+
+        if input_data.frequency is not None:
+            if input_data.frequency not in dict(SnapshotSubscription.Frequency.choices):
+                return SnapshotSubscriptionResult(
+                    ok=False,
+                    message="Invalid frequency. Must be 'weekly' or 'monthly'.",
+                )
+            subscription.frequency = input_data.frequency
+
+        fields = {
+            "include_chapters": input_data.include_chapters,
+            "include_events": input_data.include_events,
+            "include_issues": input_data.include_issues,
+            "include_posts": input_data.include_posts,
+            "include_projects": input_data.include_projects,
+            "include_pull_requests": input_data.include_pull_requests,
+            "include_releases": input_data.include_releases,
+            "include_users": input_data.include_users,
+        }
+
+        for field_name, value in fields.items():
+            if value is not None:
+                setattr(subscription, field_name, value)
+
+        subscription.save()
+
+        return SnapshotSubscriptionResult(
+            ok=True,
+            message="Subscription updated successfully.",
+            subscription=subscription,
+        )
+
+    @strawberry.mutation(permission_classes=[IsAuthenticated])
+    def cancel_snapshot_subscription(self, info: Info) -> SnapshotSubscriptionResult:
+        """Cancel the logged-in user's snapshot subscription."""
+        user = info.context.request.user
+
+        try:
+            subscription = SnapshotSubscription.objects.get(user=user)
+        except SnapshotSubscription.DoesNotExist:
+            return SnapshotSubscriptionResult(
+                ok=False,
+                message="Subscription not found.",
+            )
+
+        subscription.is_active = False
+        subscription.save()
+
+        return SnapshotSubscriptionResult(
+            ok=True,
+            message="Subscription cancelled successfully.",
+            subscription=subscription,
+        )
+
+    @strawberry.mutation
+    def unsubscribe_by_token(self, token: str) -> SnapshotSubscriptionResult:
+        """Unsubscribe using a token from an email link. No auth required."""
+        try:
+            subscription = SnapshotSubscription.objects.get(unsubscribe_token=token)
+        except (SnapshotSubscription.DoesNotExist, ValueError):
+            return SnapshotSubscriptionResult(
+                ok=False,
+                message="Invalid unsubscribe token.",
+            )
+
+        if not subscription.is_active:
+            return SnapshotSubscriptionResult(
+                ok=False,
+                message="Subscription is already inactive.",
+            )
+
+        subscription.is_active = False
+        subscription.save()
+
+        return SnapshotSubscriptionResult(
+            ok=True,
+            message="Successfully unsubscribed.",
+            subscription=subscription,
+        )

backend/apps/owasp/api/internal/nodes/snapshot_subscription.py

@@ -0,0 +1,27 @@
+"""OWASP snapshot subscription GraphQL node."""
+
+import strawberry
+import strawberry_django
+
+from apps.owasp.models.snapshot_subscription import SnapshotSubscription
+
+
+@strawberry_django.type(
+    SnapshotSubscription,
+    fields=[
+        "frequency",
+        "is_active",
+        "include_chapters",
+        "include_events",
+        "include_issues",
+        "include_posts",
+        "include_projects",
+        "include_pull_requests",
+        "include_releases",
+        "include_users",
+        "created_at",
+        "updated_at",
+    ],
+)
+class SnapshotSubscriptionNode(strawberry.relay.Node):
+    """Snapshot subscription node."""

backend/apps/owasp/api/internal/queries/__init__.py

@@ -9,6 +9,7 @@
 from .project import ProjectQuery
 from .project_health_metrics import ProjectHealthMetricsQuery
 from .snapshot import SnapshotQuery
+from .snapshot_subscription import SnapshotSubscriptionQuery
 from .sponsor import SponsorQuery
 from .stats import StatsQuery
 
@@ -23,6 +24,7 @@ class OwaspQuery(
     ProjectHealthMetricsQuery,
     ProjectQuery,
     SnapshotQuery,
+    SnapshotSubscriptionQuery,
     SponsorQuery,
     StatsQuery,
 ):

backend/apps/owasp/api/internal/queries/snapshot_subscription.py

@@ -0,0 +1,25 @@
+"""OWASP snapshot subscription GraphQL queries."""
+
+import strawberry
+import strawberry_django
+from strawberry.types import Info
+
+from apps.owasp.api.internal.nodes.snapshot_subscription import SnapshotSubscriptionNode
+from apps.owasp.models.snapshot_subscription import SnapshotSubscription
+
+
+@strawberry.type
+class SnapshotSubscriptionQuery:
+    """Snapshot subscription queries."""
+
+    @strawberry_django.field
+    def my_subscription(self, info: Info) -> SnapshotSubscriptionNode | None:
+        """Resolve the current user's snapshot subscription."""
+        user = info.context.request.user
+        if not user.is_authenticated:
+            return None
+
+        try:
+            return SnapshotSubscription.objects.get(user=user)
+        except SnapshotSubscription.DoesNotExist:
+            return None

backend/apps/owasp/migrations/0075_snapshotsubscription.py

@@ -0,0 +1,66 @@
+# Generated by Django 6.0.6 on 2026-06-16 14:45
+
+import uuid
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("owasp", "0074_rename_snapshot_m2m_fields"),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="SnapshotSubscription",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True, primary_key=True, serialize=False, verbose_name="ID"
+                    ),
+                ),
+                (
+                    "frequency",
+                    models.CharField(
+                        choices=[("weekly", "Weekly"), ("monthly", "Monthly")],
+                        default="weekly",
+                        max_length=10,
+                    ),
+                ),
+                ("is_active", models.BooleanField(default=True)),
+                (
+                    "unsubscribe_token",
+                    models.UUIDField(default=uuid.uuid4, editable=False, unique=True),
+                ),
+                ("include_chapters", models.BooleanField(default=True)),
+                ("include_events", models.BooleanField(default=True)),
+                ("include_issues", models.BooleanField(default=True)),
+                ("include_posts", models.BooleanField(default=True)),
+                ("include_projects", models.BooleanField(default=True)),
+                ("include_pull_requests", models.BooleanField(default=True)),
+                ("include_releases", models.BooleanField(default=True)),
+                ("include_users", models.BooleanField(default=True)),
+                ("created_at", models.DateTimeField(auto_now_add=True)),
+                ("updated_at", models.DateTimeField(auto_now=True)),
+                (
+                    "user",
+                    models.OneToOneField(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="snapshot_subscription",
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
+            ],
+            options={
+                "verbose_name_plural": "Snapshot Subscriptions",
+                "db_table": "owasp_snapshot_subscriptions",
+                "indexes": [
+                    models.Index(fields=["is_active"], name="owasp_sub_active_idx"),
+                ],
+            },
+        ),
+    ]

backend/apps/owasp/models/__init__.py

@@ -11,4 +11,5 @@
 from .project_health_metrics import ProjectHealthMetrics
 from .project_health_requirements import ProjectHealthRequirements
 from .snapshot import Snapshot
+from .snapshot_subscription import SnapshotSubscription
 from .sponsor import Sponsor