No way to fetch a single budget by id

Nobody has started this yet — be first.

Business impact

Budgets currently support List (all of the caller's budgets) and Delete (by id), but not fetching one specific budget by id -- so a client that wants to show or confirm a single budget's details (e.g. before editing it) has to fetch the entire list and search client-side.

Problem

internal/budgets/repo.go has Upsert, List, Delete, GetLimit (which returns just the numeric limit, not a full Budget, and is keyed by user+category rather than by budget id) -- no Get-by-id. No GET /budgets/{id} route exists; today it 404s from ServeMux's default.

Current behavior

GET /budgets/{id} has no route and no repo method backing it at all -- there is simply no way to fetch a single budget's full details by id.

Expected behavior

GET /budgets/{id} (auth required) returns the full budget if owned by the caller, 404 otherwise -- the same ownership pattern Delete already uses (WHERE id = $1 AND user_id = $2).

Steps to reproduce

As an authenticated user with an existing budget, GET /budgets/{id}.

Expected: 200 with the full budget (including category_name).

Actual: no route/handler exists yet.

Why this matters

This is the simplest of this project's "add a missing single-resource GET" tickets -- Repo.Delete right above it in the same file is the direct template: same two-argument shape, same WHERE clause pattern, just a SELECT instead of a DELETE.

Suggested approach

Add a Repo.Get(ctx, id, userID) (*Budget, error) mirroring Repo.Delete's ownership-scoped WHERE clause and List's row-scanning shape (including the joined category name); wire a handler and GET /budgets/{id} route the same way DELETE /budgets/{id} is wired.

Acceptance criteria

Fetching your own budget by id returns it (including category_name, matching List's shape).
Fetching another user's budget by id returns 404.
Fetching a nonexistent id returns 404.

Verification

go test ./practicetickets/... -run TestTicket08 -v

Hints (0/2)

Try it without hints first — the reading is the exercise.

Working on this ticket

Work on a branch named for the ticket — that's what you'll submit.

Branch off your fork

$git checkout -b feat/budget-get-by-id

Fix it and commit

Meet every acceptance criterion, and add a test that would have caught this.

Push the branch

$git push -u origin feat/budget-get-by-id

Submit it below

Paste your fork URL and the branch name, with a short write-up of the root cause.

Submit your fix

Questions

Stuck on something?

Ask about anything unclear in the ticket — the maintainer and anyone who has solved it can answer. Please don't post full solutions.

No questions yet. If something in this ticket reads ambiguously, you are probably not the only one — ask.

The project

Expense Tracker — SQL-Enforced Multi-User Isolation

A production-style multi-user expense tracker in Go where the authorization boundary between one user's financial data and everyone else's is a literal SQL `WHERE id = $1 AND user_id = $2` clause -- not an application-layer check -- so a single flipped operator or dropped predicate is a real, silent cross-account data breach, not a cosmetic bug.

Fork on GitHub

Download

Setup

Expense Tracker — SQL-Enforced Multi-User Isolation

git clone <your-fork>
cd expense_tracker
docker compose up --build   # postgres (host port 5434) + app (host port 8082)

auto-applies on first boot via Postgres's mechanism, seeding the seven global default categories (ids 1-7). The compose project is named , so it won't collide with sibling projects on the same machine. Health-check on gates 's startup so the API never starts before the schema exists.