- Create-, Update- und Delete-Methoden verfeinert, um eine bessere Validierung der Benutzeridentität zu gewährleisten - Autorisierungsprüfungen für benutzerbezogene Operationen basierend auf Claims hinzugefügt - Verbesserte Fehlerbehandlung und Protokollierung für detaillierteres Feedback - Fehlerbehandlungs-Basisklasse entfernt, Übergang zu direkten CRUD-Methoden
117 lines
5.1 KiB
C#
117 lines
5.1 KiB
C#
using DigitalData.Core.API;
|
|
using DigitalData.Core.DTO;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using WorkFlow.Application.Contracts;
|
|
using WorkFlow.Application.DTO.ProfileControlsTF;
|
|
using WorkFlow.Domain.Entities;
|
|
|
|
namespace WorkFlow.API.Controllers
|
|
{
|
|
[Route("api/[controller]")]
|
|
[ApiController]
|
|
[Authorize]
|
|
public class ProfileControlsTFController(ILogger<ProfileControlsTFController> logger, IProfileControlsTFService service) : CRUDControllerBase<IProfileControlsTFService, ProfileControlsTFCreateDto, ProfileControlsTFDto, ProfileControlsTFUpdateDto, ProfileControlsTF, int>(logger, service)
|
|
{
|
|
[NonAction]
|
|
public override Task<IActionResult> GetAll() => base.GetAll();
|
|
|
|
[NonAction]
|
|
public override Task<IActionResult> Update(ProfileControlsTFUpdateDto updateDto) => base.Update(updateDto);
|
|
|
|
[HttpGet]
|
|
public async Task<IActionResult> GetAsync(
|
|
bool withProfile = true, bool withUser = false,
|
|
int? profileId = null, int? objId = null, bool? profileActive = null)
|
|
{
|
|
try
|
|
{
|
|
if (!this.TryGetUserId(out int? id))
|
|
{
|
|
logger.LogError("Authorization failed: User ID claim not found.");
|
|
return StatusCode(StatusCodes.Status500InternalServerError, "Failed to retrieve user identity.");
|
|
}
|
|
else if (id is null)
|
|
{
|
|
logger.LogError("Invalid user ID: Retrieved ID is null or not an integer.");
|
|
return StatusCode(StatusCodes.Status500InternalServerError, "Invalid user ID.");
|
|
}
|
|
|
|
return await _service.ReadAsync(
|
|
withProfile: withProfile, withUser: withUser,
|
|
userId: id,
|
|
profileId: profileId, objId: objId, profileActive: profileActive)
|
|
.ThenAsync(
|
|
Success: pctf => pctf.Any() ? Ok(pctf) : NotFound(),
|
|
Fail: IActionResult (msg, ntc) =>
|
|
{
|
|
logger.LogNotice(ntc);
|
|
return NotFound();
|
|
});
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
logger.LogError(ex, "An unexpected error occurred while processing the request: {Message}", ex.Message);
|
|
return StatusCode(StatusCodes.Status500InternalServerError, "An internal server error occurred.");
|
|
}
|
|
}
|
|
|
|
[HttpPost]
|
|
public override async Task<IActionResult> Create([FromBody] ProfileControlsTFCreateDto createDto)
|
|
{
|
|
try
|
|
{
|
|
if (!this.TryGetUserId(out int? id))
|
|
{
|
|
logger.LogError("Authorization failed: User ID claim not found.");
|
|
return StatusCode(StatusCodes.Status500InternalServerError, "Failed to retrieve user identity.");
|
|
}
|
|
else if (id is null)
|
|
{
|
|
logger.LogError("Invalid user ID: Retrieved ID is null or not an integer.");
|
|
return StatusCode(StatusCodes.Status500InternalServerError, "Invalid user ID.");
|
|
}
|
|
|
|
if (createDto.UserId != id)
|
|
return Unauthorized();
|
|
|
|
return await base.Create(createDto);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
logger.LogError(ex, "An unexpected error occurred while processing the request: {Message}", ex.Message);
|
|
return StatusCode(StatusCodes.Status500InternalServerError, "An internal server error occurred.");
|
|
}
|
|
}
|
|
|
|
public override async Task<IActionResult> Delete([FromRoute] int id)
|
|
{
|
|
try
|
|
{
|
|
if (!this.TryGetUserId(out int? userId))
|
|
{
|
|
logger.LogError("Authorization failed: User ID claim not found.");
|
|
return StatusCode(StatusCodes.Status500InternalServerError, "Failed to retrieve user identity.");
|
|
}
|
|
else if (userId is null)
|
|
{
|
|
logger.LogError("Invalid user ID: Retrieved ID is null or not an integer.");
|
|
return StatusCode(StatusCodes.Status500InternalServerError, "Invalid user ID.");
|
|
}
|
|
|
|
return await _service.ReadByIdAsync(id).ThenAsync(
|
|
SuccessAsync: async pctf => pctf.UserId == userId ? await base.Delete(id) : Unauthorized(),
|
|
Fail: IActionResult (msg, ntc) =>
|
|
{
|
|
_logger.LogNotice(ntc);
|
|
return ntc.HasFlag(Flag.NotFound) ? NotFound() : StatusCode(StatusCodes.Status500InternalServerError);
|
|
});
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
logger.LogError(ex, "An unexpected error occurred while processing the request: {Message}", ex.Message);
|
|
return StatusCode(StatusCodes.Status500InternalServerError, "An internal server error occurred.");
|
|
}
|
|
}
|
|
}
|
|
} |