Add /auth/specialists/ endpoint

Author: yakser

users/urls.py

@@ -1,9 +1,9 @@
 from django.urls import path, re_path
 
-
 from users.views import (
     EmailResetPassword,
     ResetPassword,
+    SpecialistsList,
     UserDetail,
     UserList,
     VerifyEmail,
@@ -13,6 +13,9 @@
 
 urlpatterns = [
     path("users/", UserList.as_view()),
+    path(
+        "specialists/", SpecialistsList.as_view()
+    ),  # this url actually returns  mentors, experts and investors
     path("users/<int:pk>/", UserDetail.as_view()),
     path("users/reset-password/", EmailResetPassword.as_view()),
     re_path(

users/views.py

@@ -1,17 +1,17 @@
 from datetime import datetime
 
 import jwt
-from core.permissions import IsOwnerOrReadOnly
-from core.utils import Email
 from django.conf import settings
 from django.contrib.auth import get_user_model
 from django.contrib.sites.shortcuts import get_current_site
+from django.db.models import Q
 from django.shortcuts import redirect
 from django.urls import reverse
 from django_filters import rest_framework as filters
 from rest_framework import status
 from rest_framework.generics import (
     GenericAPIView,
+    ListAPIView,
     ListCreateAPIView,
     RetrieveUpdateDestroyAPIView,
     UpdateAPIView,
@@ -20,6 +20,8 @@
 from rest_framework.response import Response
 from rest_framework_simplejwt.tokens import RefreshToken
 
+from core.permissions import IsOwnerOrReadOnly
+from core.utils import Email
 from users.serializers import (
     EmailSerializer,
     PasswordSerializer,
@@ -69,6 +71,18 @@ def post(self, request, *args, **kwargs):
         return Response(serializer.data, status=status.HTTP_201_CREATED, headers=headers)
 
 
+class SpecialistsList(ListAPIView):
+    """
+    This view returns a list of specialists: investors, experts and mentors.
+    """
+
+    queryset = User.objects.filter(
+        Q(user_type=User.EXPERT) | Q(user_type=User.MENTOR) | Q(user_type=User.INVESTOR)
+    )
+    permission_classes = [IsAuthenticated]
+    serializer_class = UserListSerializer
+
+
 class UserDetail(RetrieveUpdateDestroyAPIView):
     queryset = User.objects.all()
     permission_classes = [IsOwnerOrReadOnly, IsAuthenticated]