1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
|
using System;
using System.Threading.Tasks;
using AutoMapper;
using DevHive.Services.Models.User;
using DevHive.Web.Models.User;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using DevHive.Common.Models.Identity;
using DevHive.Services.Interfaces;
using DevHive.Common.Jwt.Interfaces;
using NSwag.Annotations;
namespace DevHive.Web.Controllers
{
/// <summary>
/// All endpoints for integration with the User
/// </summary>
[ApiController]
[Route("/api/[controller]")]
[OpenApiController("User Controller")]
public class UserController : ControllerBase
{
private readonly IUserService _userService;
private readonly IMapper _userMapper;
private readonly IJwtService _jwtService;
public UserController(IUserService userService, IMapper mapper, IJwtService jwtService)
{
this._userService = userService;
this._userMapper = mapper;
this._jwtService = jwtService;
}
#region Authentication
/// <summary>
/// Login endpoint for the DevHive Social Platform
/// </summary>
/// <param name="loginModel">Login model with username and password</param>
/// <returns>A JWT Token for further validation</returns>
[HttpPost]
[AllowAnonymous]
[Route("Login")]
[OpenApiTags("Authorization")]
public async Task<IActionResult> Login([FromBody] LoginWebModel loginModel)
{
LoginServiceModel loginServiceModel = this._userMapper.Map<LoginServiceModel>(loginModel);
TokenModel tokenModel = await this._userService.LoginUser(loginServiceModel);
TokenWebModel tokenWebModel = this._userMapper.Map<TokenWebModel>(tokenModel);
return new OkObjectResult(tokenWebModel);
}
/// <summary>
/// Register a new User in the DevHive Social Platform
/// </summary>
/// <param name="registerModel">Register model with the new data to provide</param>
/// <returns>A JWT Token for further validation</returns>
[HttpPost]
[AllowAnonymous]
[Route("Register")]
[OpenApiTag("Authorization")]
public async Task<IActionResult> Register([FromBody] RegisterWebModel registerModel)
{
RegisterServiceModel registerServiceModel = this._userMapper.Map<RegisterServiceModel>(registerModel);
TokenModel tokenModel = await this._userService.RegisterUser(registerServiceModel);
TokenWebModel tokenWebModel = this._userMapper.Map<TokenWebModel>(tokenModel);
return new CreatedResult("Register", tokenWebModel);
}
#endregion
#region Read
/// <summary>
/// Get a User's information using the Guid
/// </summary>
/// <param name="id">User's Id</param>
/// <param name="authorization">The JWT Token, contained in the header and used for validation</param>
/// <returns>A full User's read model</returns>
[HttpGet]
[Authorize(Roles = "User,Admin")]
public async Task<IActionResult> GetById(Guid id, [FromHeader] string authorization)
{
if (!this._jwtService.ValidateToken(id, authorization))
return new UnauthorizedResult();
UserServiceModel userServiceModel = await this._userService.GetUserById(id);
UserWebModel userWebModel = this._userMapper.Map<UserWebModel>(userServiceModel);
return new OkObjectResult(userWebModel);
}
/// <summary>
/// Get a User's profile using his username. Does NOT require authorization
/// </summary>
/// <param name="username">User's username</param>
/// <returns>A trimmed version of the full User's read model</returns>
[HttpGet]
[Route("GetUser")]
[AllowAnonymous]
public async Task<IActionResult> GetUser(string username)
{
UserServiceModel friendServiceModel = await this._userService.GetUserByUsername(username);
UserWebModel friend = this._userMapper.Map<UserWebModel>(friendServiceModel);
return new OkObjectResult(friend);
}
#endregion
#region Update
/// <summary>
/// Full update on User's data. A PUSTINQK can only edit his account
/// </summary>
/// <param name="id">The User's Id</param>
/// <param name="updateUserWebModel">A full User update model</param>
/// <param name="authorization">The JWT Token, contained in the header and used for validation</param>
/// <returns>A full User's read model</returns>
[HttpPut]
[Authorize(Roles = "User,Admin")]
public async Task<IActionResult> Update(Guid id, [FromBody] UpdateUserWebModel updateUserWebModel, [FromHeader] string authorization)
{
if (!this._jwtService.ValidateToken(id, authorization))
return new UnauthorizedResult();
UpdateUserServiceModel updateUserServiceModel = this._userMapper.Map<UpdateUserServiceModel>(updateUserWebModel);
updateUserServiceModel.Id = id;
UserServiceModel userServiceModel = await this._userService.UpdateUser(updateUserServiceModel);
UserWebModel userWebModel = this._userMapper.Map<UserWebModel>(userServiceModel);
return new AcceptedResult("UpdateUser", userWebModel);
}
#endregion
#region Delete
/// <summary>
/// Delete a User with his Id. A PUSTINQK can only delete his account. An Admin can delete all accounts
/// </summary>
/// <param name="id">The User's Id</param>
/// <param name="authorization">The JWT Token, contained in the header and used for validation</param>
/// <returns>Ok, BadRequest or Unauthorized</returns>
[HttpDelete]
[Authorize(Roles = "User,Admin")]
public async Task<IActionResult> Delete(Guid id, [FromHeader] string authorization)
{
if (!this._jwtService.ValidateToken(id, authorization))
return new UnauthorizedResult();
bool result = await this._userService.DeleteUser(id);
if (!result)
return new BadRequestObjectResult("Could not delete User");
return new OkResult();
}
#endregion
/// <summary>
/// We don't talk about that, NIGGA!
/// </summary>
/// <param name="userId"></param>
/// <returns></returns>
[HttpPost]
[OpenApiIgnore]
[Authorize(Roles = "User,Admin")]
[Route("SuperSecretPromotionToAdmin")]
public async Task<IActionResult> SuperSecretPromotionToAdmin(Guid userId)
{
return new OkObjectResult(await this._userService.SuperSecretPromotionToAdmin(userId));
}
}
}
|
