Add endpoint for forcing participants sync

Author: spalmurray

src/firetower/incidents/tests/test_views.py

@@ -310,3 +310,83 @@ def test_retrieve_incident_does_not_fail_on_sync_error(self):
 
             assert response.status_code == 200
             assert response.data["id"] == incident.incident_number
+
+    def test_sync_participants_endpoint(self):
+        """Test POST /api/ui/incidents/{id}/sync-participants/ forces sync"""
+        incident = Incident.objects.create(
+            title="Test Incident",
+            status=IncidentStatus.ACTIVE,
+            severity=IncidentSeverity.P1,
+        )
+
+        with patch(
+            "firetower.incidents.views.sync_incident_participants_from_slack"
+        ) as mock_sync:
+            mock_sync.return_value = {
+                "added": 3,
+                "already_existed": 5,
+                "errors": [],
+                "skipped": False,
+            }
+
+            self.client.force_authenticate(user=self.user)
+            response = self.client.post(
+                f"/api/ui/incidents/{incident.incident_number}/sync-participants/"
+            )
+
+            assert response.status_code == 200
+            assert response.data["success"] is True
+            assert response.data["stats"]["added"] == 3
+            assert response.data["stats"]["already_existed"] == 5
+            mock_sync.assert_called_once_with(incident, force=True)
+
+    def test_sync_participants_endpoint_handles_errors(self):
+        """Test sync endpoint returns 500 on error"""
+        incident = Incident.objects.create(
+            title="Test Incident",
+            status=IncidentStatus.ACTIVE,
+            severity=IncidentSeverity.P1,
+        )
+
+        with patch(
+            "firetower.incidents.views.sync_incident_participants_from_slack"
+        ) as mock_sync:
+            mock_sync.side_effect = Exception("Slack API error")
+
+            self.client.force_authenticate(user=self.user)
+            response = self.client.post(
+                f"/api/ui/incidents/{incident.incident_number}/sync-participants/"
+            )
+
+            assert response.status_code == 500
+            assert response.data["success"] is False
+            assert "Slack API error" in response.data["error"]
+            assert len(response.data["stats"]["errors"]) > 0
+
+    def test_sync_participants_endpoint_respects_privacy(self):
+        """Test sync endpoint returns 404 for private incidents user can't access"""
+        other_user = User.objects.create_user(
+            username="[email protected]",
+            password="testpass123",
+        )
+        incident = Incident.objects.create(
+            title="Private Incident",
+            status=IncidentStatus.ACTIVE,
+            severity=IncidentSeverity.P1,
+            is_private=True,
+            captain=other_user,
+        )
+
+        self.client.force_authenticate(user=self.user)
+        response = self.client.post(
+            f"/api/ui/incidents/{incident.incident_number}/sync-participants/"
+        )
+
+        assert response.status_code == 404
+
+    def test_sync_participants_endpoint_invalid_format(self):
+        """Test sync endpoint returns 400 for invalid incident ID"""
+        self.client.force_authenticate(user=self.user)
+        response = self.client.post("/api/ui/incidents/INVALID-123/sync-participants/")
+
+        assert response.status_code == 400

src/firetower/incidents/urls.py

@@ -1,6 +1,6 @@
 from django.urls import path
 
-from .views import incident_detail_ui, incident_list_ui
+from .views import incident_detail_ui, incident_list_ui, sync_incident_participants
 
 urlpatterns = [
     path("ui/incidents/", incident_list_ui, name="incident-list-ui"),
@@ -9,4 +9,9 @@
         incident_detail_ui,
         name="incident-detail-ui",
     ),
+    path(
+        "ui/incidents/<str:incident_id>/sync-participants/",
+        sync_incident_participants,
+        name="sync-incident-participants",
+    ),
 ]

src/firetower/incidents/views.py

@@ -5,6 +5,7 @@
 from django.shortcuts import get_object_or_404
 from rest_framework import generics
 from rest_framework.exceptions import ValidationError
+from rest_framework.response import Response
 
 from .models import Incident, filter_visible_to_user
 from .serializers import IncidentDetailUISerializer, IncidentListUISerializer
@@ -103,6 +104,67 @@ def get_object(self):
         return incident
 
 
-# Backwards-compatible function-based view aliases (for gradual migration)
+class SyncIncidentParticipantsView(generics.GenericAPIView):
+    """
+    Force sync incident participants from Slack channel.
+
+    POST /api/ui/incidents/{incident_id}/sync-participants/
+
+    Accepts incident_id in format: INC-2000
+    Returns sync statistics.
+    Bypasses throttle (force=True).
+
+    Authentication enforced via DEFAULT_PERMISSION_CLASSES in settings.
+    """
+
+    def get_queryset(self):
+        return Incident.objects.all()
+
+    def get_incident(self):
+        incident_id = self.kwargs["incident_id"]
+        project_key = settings.PROJECT_KEY
+
+        incident_pattern = rf"^{re.escape(project_key)}-(\d+)$"
+        match = re.match(incident_pattern, incident_id)
+
+        if not match:
+            raise ValidationError(
+                f"Invalid incident ID format. Expected format: {project_key}-<number> (e.g., {project_key}-123)"
+            )
+
+        numeric_id = int(match.group(1))
+        queryset = self.get_queryset()
+        queryset = filter_visible_to_user(queryset, self.request.user)
+
+        return get_object_or_404(queryset, id=numeric_id)
+
+    def post(self, request, incident_id):
+        incident = self.get_incident()
+
+        try:
+            stats = sync_incident_participants_from_slack(incident, force=True)
+            return Response({"success": True, "stats": stats})
+        except Exception as e:
+            logger.error(
+                f"Failed to force sync participants for incident {incident.id}: {e}",
+                exc_info=True,
+            )
+            return Response(
+                {
+                    "success": False,
+                    "error": str(e),
+                    "stats": {
+                        "added": 0,
+                        "already_existed": 0,
+                        "errors": [str(e)],
+                        "skipped": False,
+                    },
+                },
+                status=500,
+            )
+
+
+# View aliases for cleaner URL imports
 incident_list_ui = IncidentListUIView.as_view()
 incident_detail_ui = IncidentDetailUIView.as_view()
+sync_incident_participants = SyncIncidentParticipantsView.as_view()