UserController.cs

Go to the documentation of this file.

using System;
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
 
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Logging;
 
using Tgstation.Server.Api;
using Tgstation.Server.Api.Models;
using Tgstation.Server.Api.Models.Request;
using Tgstation.Server.Api.Models.Response;
using Tgstation.Server.Api.Rights;
using Tgstation.Server.Host.Authority;
using Tgstation.Server.Host.Controllers.Results;
using Tgstation.Server.Host.Database;
using Tgstation.Server.Host.Models;
using Tgstation.Server.Host.Security;
using Tgstation.Server.Host.Utils;
 
namespace Tgstation.Server.Host.Controllers
{
    [Route(Routes.User)]
    public sealed class UserController : ApiController
    {
        readonly IRestAuthorityInvoker<IUserAuthority> userAuthority;
 
        public UserController(
            IDatabaseContext databaseContext,
            IAuthenticationContext authenticationContext,
            IRestAuthorityInvoker<IUserAuthority> userAuthority,
            ILogger<UserController> logger,
            IApiHeadersProvider apiHeaders)
            : base(
                  databaseContext,
                  authenticationContext,
                  apiHeaders,
                  logger,
                  true)
        {
            this.userAuthority = userAuthority ?? throw new ArgumentNullException(nameof(userAuthority));
        }
 
        [HttpPut]
        [TgsRestAuthorize<IUserAuthority>(nameof(IUserAuthority.Create))]
        [ProducesResponseType(typeof(UserResponse), 201)]
        public ValueTask<IActionResult> Create([FromBody] UserCreateRequest model, CancellationToken cancellationToken)
            => userAuthority.InvokeTransformable<User, UserResponse>(this, authority => authority.Create(model, null, cancellationToken));
 
        [HttpPost]
        [TgsRestAuthorize<IUserAuthority>(nameof(IUserAuthority.Update))]
        [ProducesResponseType(typeof(UserResponse), 200)]
        [ProducesResponseType(204)]
        [ProducesResponseType(typeof(ErrorMessageResponse), 404)]
        [ProducesResponseType(typeof(ErrorMessageResponse), 410)]
        public ValueTask<IActionResult> Update([FromBody] UserUpdateRequest model, CancellationToken cancellationToken)
            => userAuthority.InvokeTransformable<User, UserResponse>(this, authority => authority.Update(model, cancellationToken));
 
        [HttpGet]
        [TgsRestAuthorize<IUserAuthority>(nameof(IUserAuthority.Read))]
        [ProducesResponseType(typeof(UserResponse), 200)]
        public ValueTask<IActionResult> Read(CancellationToken cancellationToken)
            => userAuthority.InvokeTransformable<User, UserResponse>(this, authority => authority.Read(cancellationToken));
 
        [HttpGet(Routes.List)]
        [TgsRestAuthorize<IUserAuthority>(nameof(IUserAuthority.Queryable))]
        [ProducesResponseType(typeof(PaginatedResponse<UserResponse>), 200)]
        public ValueTask<IActionResult> List([FromQuery] int? page, [FromQuery] int? pageSize, CancellationToken cancellationToken)
            => Paginated<User, UserResponse>(
                () => ValueTask.FromResult(
                    new PaginatableResult<User>(
                        userAuthority.InvokeQueryable(
                            authority => authority.Queryable(true))
                            .OrderBy(x => x.Id))),
                null,
                page,
                pageSize,
                cancellationToken);
 
        [HttpGet("{id}")]
        [TgsAuthorize]
        [ProducesResponseType(typeof(UserResponse), 200)]
        [ProducesResponseType(typeof(ErrorMessageResponse), 404)]
        public async ValueTask<IActionResult> GetId(long id, CancellationToken cancellationToken)
        {
            if (id == AuthenticationContext.User.Id)
                return await Read(cancellationToken);
 
            if (!((AdministrationRights)AuthenticationContext.GetRight(RightsType.Administration)).HasFlag(AdministrationRights.ReadUsers))
                return Forbid();
 
            return await userAuthority.InvokeTransformable<User, UserResponse>(
                this,
                authority => authority.GetId(id, true, false, cancellationToken));
        }
    }
}