UserController.cs

Go to the documentation of this file.

using System;
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
 
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Logging;
 
using Tgstation.Server.Api;
using Tgstation.Server.Api.Models;
using Tgstation.Server.Api.Models.Request;
using Tgstation.Server.Api.Models.Response;
using Tgstation.Server.Api.Rights;
using Tgstation.Server.Host.Authority;
using Tgstation.Server.Host.Controllers.Results;
using Tgstation.Server.Host.Database;
using Tgstation.Server.Host.Models;
using Tgstation.Server.Host.Security;
using Tgstation.Server.Host.Utils;
 
namespace Tgstation.Server.Host.Controllers
{
    [Route(Routes.User)]
    [Authorize]
    public sealed class UserController : ApiController
    {
        readonly IRestAuthorityInvoker<IUserAuthority> userAuthority;
 
        public UserController(
            IDatabaseContext databaseContext,
            IAuthenticationContext authenticationContext,
            IRestAuthorityInvoker<IUserAuthority> userAuthority,
            ILogger<UserController> logger,
            IApiHeadersProvider apiHeaders)
            : base(
                  databaseContext,
                  authenticationContext,
                  apiHeaders,
                  logger,
                  true)
        {
            this.userAuthority = userAuthority ?? throw new ArgumentNullException(nameof(userAuthority));
        }
 
        [HttpPut]
        [ProducesResponseType(typeof(UserResponse), 201)]
        public ValueTask<IActionResult> Create([FromBody] UserCreateRequest model, CancellationToken cancellationToken)
            => userAuthority.InvokeTransformable<UpdatedUser, UserResponse>(this, authority => authority.Create(model, null, cancellationToken));
 
        [HttpPost]
        [ProducesResponseType(typeof(UserResponse), 200)]
        [ProducesResponseType(204)]
        [ProducesResponseType(typeof(ErrorMessageResponse), 404)]
        [ProducesResponseType(typeof(ErrorMessageResponse), 410)]
        public ValueTask<IActionResult> Update([FromBody] UserUpdateRequest model, CancellationToken cancellationToken)
            => userAuthority.InvokeTransformable<UpdatedUser, UserResponse>(this, authority => authority.Update(model, cancellationToken));
 
        [HttpGet]
        [Authorize]
        [ProducesResponseType(typeof(UserResponse), 200)]
        public ValueTask<IActionResult> Read(CancellationToken cancellationToken)
            => userAuthority.InvokeTransformable<User, UserResponse>(this, authority => authority.Read(cancellationToken));
 
        [HttpGet(Routes.List)]
        [ProducesResponseType(typeof(PaginatedResponse<UserResponse>), 200)]
        public ValueTask<IActionResult> List([FromQuery] int? page, [FromQuery] int? pageSize, CancellationToken cancellationToken)
            => Paginated<User, UserResponse>(
                async () =>
                {
                    var queryable = await userAuthority.InvokeQueryable(
                        authority => authority.Queryable(true));
                    if (queryable == null)
                        return null;
 
                    return new PaginatableResult<User>(queryable.OrderBy(x => x.Id));
                },
                null,
                page,
                pageSize,
                cancellationToken);
 
        [HttpGet("{id}")]
        [ProducesResponseType(typeof(UserResponse), 200)]
        [ProducesResponseType(typeof(ErrorMessageResponse), 404)]
        public async ValueTask<IActionResult> GetId(long id, CancellationToken cancellationToken)
        {
            if (id == AuthenticationContext.User.Id)
                return await Read(cancellationToken);
 
            if (!((AdministrationRights)AuthenticationContext.GetRight(RightsType.Administration)).HasFlag(AdministrationRights.ReadUsers))
                return Forbid();
 
            return await userAuthority.InvokeTransformable<User, UserResponse>(
                this,
                authority => authority.GetId(id, true, false, cancellationToken));
        }
    }
}