api layer v0.2.6 - /events work

server/api_server/api_server_start.py

@@ -4,7 +4,7 @@ from flask_cors import CORS
 from .graphql_endpoint import devicesSchema
 from .device_endpoint import get_device_data, set_device_data, delete_device, delete_device_events, reset_device_props, copy_device, update_device_column
 from .devices_endpoint import get_all_devices, delete_unknown_devices, delete_all_with_empty_macs, delete_devices, export_devices, import_csv, devices_totals, devices_by_status
-from .events_endpoint import delete_events, delete_events_30, get_events, create_event
+from .events_endpoint import delete_events, delete_events_older_than, get_events, create_event
 from .history_endpoint import delete_online_history
 from .prometheus_endpoint import get_metric_stats
 from .sessions_endpoint import get_sessions, delete_session, create_session, get_sessions_calendar
@@ -315,11 +315,16 @@ def api_get_events():
     mac = request.args.get("mac")
     return get_events(mac)
 
-@app.route("/events/30days", methods=["DELETE"])
-def api_delete_old_events():
+@app.route("/events/<int:days>", methods=["DELETE"])
+def api_delete_old_events(days: int):
+    """
+    Delete events older than <days> days.
+    Example: DELETE /events/30
+    """
     if not is_authorized():
         return jsonify({"error": "Forbidden"}), 403
-    return delete_events_30()
+    
+    return delete_events_older_than(days)
 
 # --------------------------
 # Sessions

server/api_server/events_endpoint.py

@@ -75,18 +75,23 @@ def get_events(mac=None):
     conn.close()
     return jsonify({"success": True, "events": events})
 
-def delete_events_30():
-    """Delete all events older than 30 days"""
+def delete_events_older_than(days):
+    """Delete all events older than a specified number of days"""
 
     conn = get_temp_db_connection()
     cur = conn.cursor()
 
-    sql = "DELETE FROM Events WHERE eve_DateTime <= date('now', '-30 days')"
-    cur.execute(sql)
+    # Use a parameterized query with sqlite date function
+    sql = "DELETE FROM Events WHERE eve_DateTime <= date('now', ?)"
+    cur.execute(sql, [f'-{days} days'])
+    
     conn.commit()
     conn.close()
 
-    return jsonify({"success": True, "message": "Deleted events older than 30 days"})
+    return jsonify({
+        "success": True, 
+        "message": f"Deleted events older than {days} days"
+    })
 
 def delete_events():
     """Delete all events"""