BalajiChaughule

@router.get("/api/v1/users/{user_id}/orders", response_model=Page[OrderResponse])
@requires_auth(scopes=["orders:read"])
@rate_limit(calls=100, period=60)
async def get_user_orders(
    user_id: UUID,
    current_user: User = Depends(get_current_active_user),
    db: AsyncSession = Depends(get_db),
    status: Optional[OrderStatus] = Query(None),
    sort_by: str = Query("created_at", regex="^(created_at|amount)$"),
    page_params: PaginationParams = Depends()
):
    """
    Retrieve paginated orders for a specific user.
    Uses Redis cache if no filters applied.
    """
    # 1. Authorization check
    if current_user.id != user_id and not current_user.is_superuser:
        raise HTTPException(status_code=403, detail="Not authorized")

    # 2. Check Cache
    cache_key = f"orders:{user_id}:{page_params.page}:{status}"
    if cached := await redis.get(cache_key):
        return json.loads(cached)

    # 3. Database Query (Optimized)
    query = select(Order).where(Order.user_id == user_id)
    if status:
        query = query.where(Order.status == status)
        
    orders = await paginate(db, query.order_by(desc(sort_by)), page_params)
    
    # 4. Set Cache (TTL: 5 mins)
    await redis.setex(cache_key, 300, orders.json())
    
    return orders