added get memebers for org

ROUTES.md

@@ -130,6 +130,43 @@ http://localhost:8000/creatOrganisation
     }
     ```
 
+**GET**
+
+getOrganisationMembers
+
+```
+http://localhost:8000/getOrganisationMembers/<id>
+```
+
+### Header
+
+```json
+{
+    "authorization": "---"
+}
+```
+
+### Response
+
+-   404: Organisation **not found**:
+    ```json
+    {
+        "error": "Organisation not found."
+    }
+    ```
+-   401: User **not authorized**:
+    ```json
+    {
+        "error": "User not authorized."
+    }
+    ```
+-   200: **success**:
+    ```json
+    {
+        "members": ["username1", "username2", "username3"]
+    }
+    ```
+
 **POST**
 
 leaveOrganisation

flask_app/user.py

@@ -2,7 +2,7 @@
 from flask import Blueprint, request, make_response
 
 from config import Token, tokenEncode, tokenDecode
-from postgres.queries import (checkPassword,
+from postgres.queries import (checkPassword, getMembersOfOrganisation,
 							  getOrganisationIDsFromUserId, getOrganisationName, getOrganisationFromUserId)
 from postgres.transactions import addUser, addOrganisation, addUserToOrganisation, deleteUser, leaveOrganisation
 
@@ -159,3 +159,20 @@ def add_user_to_organisation():
 	if error:
 		return make_response({"error": error}, 409)
 	return make_response({'organisation_id': organisation_id}, 200)
+
+@user_management.route('/getOrganisationMembers/<_id>', methods=['GET'])
+def get_organisation_members(_id):
+	authorization = request.headers.get("authorization")
+	token = tokenDecode(authorization)
+	if token is None:
+		return make_response({'error': 'no authorization'}, 401)
+
+	members_raw = getMembersOfOrganisation(_id)
+	if members_raw is None:
+		return make_response({'error':'organisation '+_id+' not found'}, 404)
+
+	members = []
+	for member in members_raw:
+		members.append(member[0])
+
+	return make_response({"members": members}, 200)

postgres/queries.py

@@ -24,6 +24,9 @@ def getOrganisationName(organisation_id: int):
 		return -1
 	return str(response[0])
 
+def getMembersOfOrganisation(organisation_id: int):
+	select_query = sql.SQL("SELECT username FROM users WHERE id IN (SELECT userid FROM membership WHERE organisationid = %s);")
+	return execute_query(select_query, (organisation_id,))
 
 def getMemberIDsFromOrganisationID(organisationID: int):
 	select_query = sql.SQL("SELECT userid FROM membership WHERE organisationid = %s;")