1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
using System.Threading.Tasks;
using Microsoft.AspNetCore.Mvc;
using AutoMapper;
using System;
using DevHive.Web.Models.Post;
using DevHive.Services.Models.Post;
using Microsoft.AspNetCore.Authorization;
using DevHive.Services.Interfaces;
using DevHive.Common.Jwt.Interfaces;
namespace DevHive.Web.Controllers
{
/// <summary>
/// All endpoints for interacting with the post layer
/// </summary>
[ApiController]
[Route("/api/[controller]")]
[Authorize(Roles = "User,Admin")]
public class PostController
{
private readonly IPostService _postService;
private readonly IMapper _postMapper;
private readonly IJwtService _jwtService;
public PostController(IPostService postService, IMapper postMapper, IJwtService jwtService)
{
this._postService = postService;
this._postMapper = postMapper;
this._jwtService = jwtService;
}
#region Create
/// <summary>
/// Create a new post
/// </summary>
/// <param name="userId">The user's Id</param>
/// <param name="createPostWebModel">The new post's data</param>
/// <param name="authorization">JWT Bearer token</param>
/// <returns>New post's Id</returns>
[HttpPost]
public async Task<IActionResult> Create(Guid userId, [FromForm] CreatePostWebModel createPostWebModel, [FromHeader] string authorization)
{
if (!this._jwtService.ValidateToken(userId, authorization))
return new UnauthorizedResult();
CreatePostServiceModel createPostServiceModel =
this._postMapper.Map<CreatePostServiceModel>(createPostWebModel);
createPostServiceModel.CreatorId = userId;
Guid id = await this._postService.CreatePost(createPostServiceModel);
return id == Guid.Empty ?
new BadRequestObjectResult("Could not create post!") :
new OkObjectResult(new { Id = id });
}
#endregion
#region Read
/// <summary>
/// Query full post's data by it's Id
/// </summary>
/// <param name="id">The post's Id</param>
/// <returns>Full data model of the post</returns>
[HttpGet]
[AllowAnonymous]
public async Task<IActionResult> GetById(Guid id)
{
ReadPostServiceModel postServiceModel = await this._postService.GetPostById(id);
ReadPostWebModel postWebModel = this._postMapper.Map<ReadPostWebModel>(postServiceModel);
return new OkObjectResult(postWebModel);
}
#endregion
#region Update
/// <summary>
/// Update post's data. Creator only!
/// </summary>
/// <param name="userId">The post creator's Id</param>
/// <param name="updatePostWebModel">The new params of the post</param>
/// <param name="authorization">JWT Bearer token</param>
/// <returns>The post's Id</returns>
[HttpPut]
public async Task<IActionResult> Update(Guid userId, [FromForm] UpdatePostWebModel updatePostWebModel, [FromHeader] string authorization)
{
if (!this._jwtService.ValidateToken(userId, authorization))
return new UnauthorizedResult();
if (!await this._postService.ValidateJwtForPost(updatePostWebModel.PostId, authorization))
return new UnauthorizedResult();
UpdatePostServiceModel updatePostServiceModel =
this._postMapper.Map<UpdatePostServiceModel>(updatePostWebModel);
updatePostServiceModel.CreatorId = userId;
Guid id = await this._postService.UpdatePost(updatePostServiceModel);
return id == Guid.Empty ?
new BadRequestObjectResult("Could not update post!") :
new OkObjectResult(new { Id = id });
}
#endregion
#region Delete
/// <summary>
/// Delete a post. Creator only!
/// </summary>
/// <param name="postId">Post's Id</param>
/// <param name="authorization">JWT Bearer token</param>
/// <returns>Ok result</returns>
[HttpDelete]
public async Task<IActionResult> Delete(Guid postId, [FromHeader] string authorization)
{
if (!await this._postService.ValidateJwtForPost(postId, authorization))
return new UnauthorizedResult();
return await this._postService.DeletePost(postId) ?
new OkResult() :
new BadRequestObjectResult("Could not delete Post");
}
#endregion
}
}
|
