ifritechnologies/pfm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added user management endpoints

Browse Source
This commit is contained in:
hermes
2026-10-10 10:12:13 +02:00
parent 1ebd83a2f4
commit 2ee7a49122
19 changed files with 688 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
PostFundManagement.Api/Endpoints/Governance/GetTenantOrganisationsEndpoint.cs
+1 -1
View File
@@ -1,9 +1,9 @@
using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Entities;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;
using PostFundManagement.Domain.Models;
namespace PostFundManagement.Api.Endpoints.Governance;
PostFundManagement.Api/Endpoints/Users/AddUserClaimEndpoint.cs
+33 -2
View File
@@ -1,5 +1,36 @@
namespace PostFundManagement.Api.Endpoints.Users;
using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;
using PostFundManagement.Domain.Models.Security;
public class AddUserClaimEndpoint
namespace PostFundManagement.Api.Endpoints.Users;
[ApiVersionTarget(1)]
public sealed class AddUserClaimEndpoint : IEndpoint
{
public void Map(IEndpointRouteBuilder builder)
{
builder.MapPatch("api/users/user/claims", async (AddUserClaimRequest request, HttpContext context,
IUserService userService, CancellationToken cancellationToken = default) =>
await userService.AddUserClaimAsync(request, userId: context.GetUserId(), cancellationToken) switch
{
{ IsSuccess: true } => Results.Ok(),
var r when r.HasError<ValidationError>() => Results.BadRequest(r.Errors.ToProblems()),
var r when r.HasError<NotFoundError>() => Results.NotFound(r.Errors.ToProblems()),
var r when r.HasError<CreateError>() => Results.BadRequest(r.Errors.ToProblems()),
var r => Results.InternalServerError(r.Errors.ToProblems()),
})
.WithDescription("Adds a claim to a user")
.RequireAuthorization(Constants.MainScope)
.WithName(typeof(AddUserClaimEndpoint).ToEndpointName())
.MapToApiVersion(new ApiVersion(1))
.Produces(StatusCodes.Status200OK)
.Produces(StatusCodes.Status401Unauthorized)
.Produces<Problems>(StatusCodes.Status404NotFound)
.Produces<Problems>(StatusCodes.Status400BadRequest)
.Produces<Problems>(StatusCodes.Status500InternalServerError)
.WithTags(EndpointTags.Users);
}
}
PostFundManagement.Api/Endpoints/Users/AddUserRoleEndpoint.cs
+32 -2
View File
@@ -1,5 +1,35 @@
namespace PostFundManagement.Api.Endpoints.Users;
using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;
public class AddUserRoleEndpoint
namespace PostFundManagement.Api.Endpoints.Users;
[ApiVersionTarget(1)]
public sealed class AddUserRoleEndpoint : IEndpoint
{
public void Map(IEndpointRouteBuilder builder)
{
builder.MapPatch("api/users/{userId:Guid}/roles/{roleId}", async (Guid userId, string roleId, HttpContext context,
IUserService userService, CancellationToken cancellationToken = default) =>
await userService.AddUserRoleAsync(userId, roleId, context.GetUserId(), cancellationToken) switch
{
{ IsSuccess: true } => Results.Ok(),
var r when r.HasError<ValidationError>() => Results.BadRequest(r.Errors.ToProblems()),
var r when r.HasError<NotFoundError>() => Results.NotFound(r.Errors.ToProblems()),
var r when r.HasError<CreateError>() => Results.BadRequest(r.Errors.ToProblems()),
var r => Results.InternalServerError(r.Errors.ToProblems()),
})
.WithDescription("Adds a role to a user")
.RequireAuthorization(Constants.MainScope)
.WithName(typeof(AddUserRoleEndpoint).ToEndpointName())
.MapToApiVersion(new ApiVersion(1))
.Produces(StatusCodes.Status200OK)
.Produces(StatusCodes.Status401Unauthorized)
.Produces<Problems>(StatusCodes.Status404NotFound)
.Produces<Problems>(StatusCodes.Status400BadRequest)
.Produces<Problems>(StatusCodes.Status500InternalServerError)
.WithTags(EndpointTags.Users);
}
}
PostFundManagement.Api/Endpoints/Users/CreateUserEndpoint.cs
+27 -2
View File
@@ -1,4 +1,9 @@
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;
using PostFundManagement.Domain.Models.Security;
namespace PostFundManagement.Api.Endpoints.Users;
@@ -7,6 +12,26 @@ public sealed class CreateUserEndpoint : IEndpoint
{
public void Map(IEndpointRouteBuilder builder)
{
throw new NotImplementedException();
builder.MapPost("/api/users/{tenantId}/{idNumber}", async (string tenantId, string idNumber, CreateUserRequest request, HttpContext context, IUserService userService,
CancellationToken cancellationToken = default) =>
await userService.CreateUserAsync(tenantId, idNumber, request, context.GetUserId(), cancellationToken) switch
{
{ IsSuccess: true } => Results.Ok(),
var r when r.HasError<IdDecodeError>() => Results.Forbid(),
var r when r.HasError<ValidationError>() => Results.BadRequest(r.Errors.ToProblems()),
var r when r.HasError<CreateError>() => Results.BadRequest(r.Errors.ToProblems()),
var r => Results.InternalServerError(r.Errors.ToProblems()),
})
.WithDescription("Creates a new user in the system")
.RequireAuthorization(Constants.MainScope)
.WithName(typeof(CreateUserEndpoint).ToEndpointName())
.MapToApiVersion(new ApiVersion(1))
.Produces(StatusCodes.Status200OK)
.Produces(StatusCodes.Status404NotFound)
.Produces(StatusCodes.Status401Unauthorized)
.Produces(StatusCodes.Status403Forbidden)
.Produces<Problems>(StatusCodes.Status400BadRequest)
.Produces<Problems>(StatusCodes.Status500InternalServerError)
.WithTags(EndpointTags.Users);
}
}
PostFundManagement.Api/Endpoints/Users/DeleteUserClaimEndpoint.cs
+32 -3
View File
@@ -1,6 +1,35 @@
namespace PostFundManagement.Api.Endpoints.Users;
using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;
public class DeleteUserClaimEndpoint
namespace PostFundManagement.Api.Endpoints.Users;
[ApiVersionTarget(1)]
public sealed class DeleteUserClaimEndpoint : IEndpoint
{
public void Map(IEndpointRouteBuilder builder)
{
builder.MapDelete("api/users/{targetUserId:Guid}/claims/{claimId}", async (string claimId, Guid targetUserId, HttpContext context,
IUserService service, CancellationToken cancellationToken = default) =>
await service.DeleteUserClaimAsync(claimIdHash: claimId, targetUserId: targetUserId, userId: context.GetUserId(), cancellationToken) switch
{
{ IsSuccess: true } => Results.Ok(),
var r when r.HasError<IdDecodeError>() => Results.Forbid(),
var r when r.HasError<ValidationError>() => Results.BadRequest(r.Errors.ToProblems()),
var r when r.HasError<NotFoundError>() => Results.NotFound(r.Errors.ToProblems()),
var r => Results.InternalServerError(r.Errors.ToProblems()),
})
.WithDescription("Deletes a claim from a user")
.RequireAuthorization(Constants.MainScope)
.WithName(typeof(DeleteUserClaimEndpoint).ToEndpointName())
.MapToApiVersion(new ApiVersion(1))
.Produces(StatusCodes.Status200OK)
.Produces(StatusCodes.Status401Unauthorized)
.Produces<Problems>(StatusCodes.Status404NotFound)
.Produces<Problems>(StatusCodes.Status400BadRequest)
.Produces<Problems>(StatusCodes.Status500InternalServerError)
.WithTags(EndpointTags.Users);
}
}
PostFundManagement.Api/Endpoints/Users/DeleteUserRoleEndpoint.cs
+31 -2
View File
@@ -1,5 +1,34 @@
namespace PostFundManagement.Api.Endpoints.Users;
using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;
public class DeleteUserRoleEndpoint
namespace PostFundManagement.Api.Endpoints.Users;
[ApiVersionTarget(1)]
public sealed class DeleteUserRoleEndpoint : IEndpoint
{
public void Map(IEndpointRouteBuilder builder)
{
builder.MapDelete("api/users/{userId:Guid}/roles/{roleId}", async (Guid userId, string roleId, HttpContext context,
IUserService service, CancellationToken cancellationToken = default) =>
await service.DeleteUserRoleAsync(userId, roleId, context.GetUserId(), cancellationToken) switch
{
{ IsSuccess: true } => Results.Ok(),
var r when r.HasError<NotFoundError>() => Results.NotFound(r.Errors.ToProblems()),
var r when r.HasError<UpdateError>() => Results.BadRequest(r.Errors.ToProblems()),
var r => Results.InternalServerError(r.Errors.ToProblems())
})
.WithDescription("Delete user role")
.RequireAuthorization(Constants.MainScope)
.WithName(typeof(DeleteUserRoleEndpoint).ToEndpointName())
.MapToApiVersion(new ApiVersion(1))
.Produces(StatusCodes.Status200OK)
.Produces(StatusCodes.Status401Unauthorized)
.Produces<Problems>(StatusCodes.Status404NotFound)
.Produces<Problems>(StatusCodes.Status400BadRequest)
.Produces<Problems>(StatusCodes.Status500InternalServerError)
.WithTags(EndpointTags.Users);
}
}
PostFundManagement.Api/Endpoints/Users/GetSystemRolesEndpoint.cs
+32 -2
View File
@@ -1,5 +1,35 @@
namespace PostFundManagement.Api.Endpoints.Users;
using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;
using PostFundManagement.Domain.Models.Security;
public class GetSystemRolesEndpoint
namespace PostFundManagement.Api.Endpoints.Users;
[ApiVersionTarget(1)]
public sealed class GetSystemRolesEndpoint : IEndpoint
{
public void Map(IEndpointRouteBuilder builder)
{
builder.MapGet("api/users/system/roles", async (HttpContext context,
IUserService service, CancellationToken cancellationToken = default) =>
await service.GetSystemRolesAsync(context.GetUserId(), cancellationToken) switch
{
{ IsSuccess: true, Value: var roles } => Results.Ok(roles),
var r when r.HasError<NotFoundError>() => Results.NotFound(r.Errors.ToProblems()),
var r when r.HasError<UpdateError>() => Results.BadRequest(r.Errors.ToProblems()),
var r => Results.InternalServerError(r.Errors.ToProblems())
})
.WithDescription("Get system roles")
.RequireAuthorization(Constants.MainScope)
.WithName(typeof(GetSystemRolesEndpoint).ToEndpointName())
.MapToApiVersion(new ApiVersion(1))
.Produces<Role[]>(StatusCodes.Status200OK)
.Produces(StatusCodes.Status401Unauthorized)
.Produces<Problems>(StatusCodes.Status404NotFound)
.Produces<Problems>(StatusCodes.Status400BadRequest)
.Produces<Problems>(StatusCodes.Status500InternalServerError)
.WithTags(EndpointTags.Users);
}
}
PostFundManagement.Api/Endpoints/Users/GetUserClaimsEndpoint.cs
+32 -3
View File
@@ -1,6 +1,35 @@
namespace PostFundManagement.Api.Endpoints.Users;
using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;
using Claim = PostFundManagement.Domain.Models.Security.Claim;
public class GetUserClaimsEndpoint
namespace PostFundManagement.Api.Endpoints.Users;
[ApiVersionTarget(1)]
public sealed class GetUserClaimsEndpoint : IEndpoint
{
public void Map(IEndpointRouteBuilder builder)
{
builder.MapGet("api/users/{userId:Guid}/claims", async (Guid userId, HttpContext context,
IUserService service, CancellationToken cancellationToken = default) =>
await service.GetUserClaimsAsync(userId, context.GetUserId(), cancellationToken) switch
{
{ IsSuccess: true, Value: var claims } => Results.Ok(claims),
var r when r.HasError<NotFoundError>() => Results.NotFound(r.Errors.ToProblems()),
var r when r.HasError<UpdateError>() => Results.BadRequest(r.Errors.ToProblems()),
var r => Results.InternalServerError(r.Errors.ToProblems())
})
.WithDescription("Get user claims")
.RequireAuthorization(Constants.MainScope)
.WithName(typeof(GetUserClaimsEndpoint).ToEndpointName())
.MapToApiVersion(new ApiVersion(1))
.Produces<Claim[]>(StatusCodes.Status200OK)
.Produces(StatusCodes.Status401Unauthorized)
.Produces<Problems>(StatusCodes.Status404NotFound)
.Produces<Problems>(StatusCodes.Status400BadRequest)
.Produces<Problems>(StatusCodes.Status500InternalServerError)
.WithTags(EndpointTags.Users);
}
}
PostFundManagement.Api/Endpoints/Users/GetUserEndpoint.cs
+2 -2
View File
@@ -17,7 +17,7 @@ public sealed class GetUserEndpoint : IEndpoint
await service.GetUserAsync(userId, cancellationToken) switch
{
{ IsSuccess: true, Value: var user } => Results.Ok(user),
var r when r.HasError<NotFoundError>() => Results.NotFound(),
var r when r.HasError<NotFoundError>() => Results.NotFound(r.Errors.ToProblems()),
var r => Results.InternalServerError(r.Errors.ToProblems())
})
.WithDescription("Gets the metadata of a single user.")
@@ -25,8 +25,8 @@ public sealed class GetUserEndpoint : IEndpoint
.WithName(typeof(GetUserEndpoint).ToEndpointName())
.MapToApiVersion(new ApiVersion(1))
.Produces<User>(StatusCodes.Status200OK)
.Produces(StatusCodes.Status404NotFound)
.Produces(StatusCodes.Status401Unauthorized)
.Produces<Problems>(StatusCodes.Status404NotFound)
.Produces<Problems>(StatusCodes.Status500InternalServerError)
.WithTags(EndpointTags.Users)
.CacheOutput();
PostFundManagement.Api/Endpoints/Users/GetUserRolesEndpoint.cs
+32 -2
View File
@@ -1,5 +1,35 @@
namespace PostFundManagement.Api.Endpoints.Users;
using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;
using PostFundManagement.Domain.Models.Security;
public class GetUserRolesEndpoint
namespace PostFundManagement.Api.Endpoints.Users;
[ApiVersionTarget(1)]
public sealed class GetUserRolesEndpoint : IEndpoint
{
public void Map(IEndpointRouteBuilder builder)
{
builder.MapGet("api/users/{userId:Guid}/roles", async (Guid userId, HttpContext context,
IUserService service, CancellationToken cancellationToken = default) =>
await service.GetUserRolesAsync(userId, context.GetUserId(), cancellationToken) switch
{
{ IsSuccess: true, Value: var roles } => Results.Ok(roles),
var r when r.HasError<NotFoundError>() => Results.NotFound(r.Errors.ToProblems()),
var r when r.HasError<UpdateError>() => Results.BadRequest(r.Errors.ToProblems()),
var r => Results.InternalServerError(r.Errors.ToProblems())
})
.WithDescription("Get user roles")
.RequireAuthorization(Constants.MainScope)
.WithName(typeof(GetUserRolesEndpoint).ToEndpointName())
.MapToApiVersion(new ApiVersion(1))
.Produces<Role[]>(StatusCodes.Status200OK)
.Produces(StatusCodes.Status401Unauthorized)
.Produces<Problems>(StatusCodes.Status404NotFound)
.Produces<Problems>(StatusCodes.Status400BadRequest)
.Produces<Problems>(StatusCodes.Status500InternalServerError)
.WithTags(EndpointTags.Users);
}
}
PostFundManagement.Api/Endpoints/Users/LogUserOutEndpoint.cs
+31 -2
View File
@@ -1,5 +1,34 @@
namespace PostFundManagement.Api.Endpoints.Users;
using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;
public class LogUserOutEndpoint
namespace PostFundManagement.Api.Endpoints.Users;
[ApiVersionTarget(1)]
public sealed class LogUserOutEndpoint : IEndpoint
{
public void Map(IEndpointRouteBuilder builder)
{
builder.MapPut("api/users/{userId:Guid}/session/logout", async (Guid userId, HttpContext context,
IUserService service, CancellationToken cancellationToken = default) =>
await service.LogoutUserAsync(userId, context.GetUserId(), cancellationToken) switch
{
{ IsSuccess: true } => Results.Ok(),
var r when r.HasError<NotFoundError>() => Results.NotFound(r.Errors.ToProblems()),
var r when r.HasError<UpdateError>() => Results.BadRequest(r.Errors.ToProblems()),
var r => Results.InternalServerError(r.Errors.ToProblems())
})
.WithDescription("Logout user session")
.RequireAuthorization(Constants.MainScope)
.WithName(typeof(LogUserOutEndpoint).ToEndpointName())
.MapToApiVersion(new ApiVersion(1))
.Produces(StatusCodes.Status200OK)
.Produces(StatusCodes.Status401Unauthorized)
.Produces<Problems>(StatusCodes.Status404NotFound)
.Produces<Problems>(StatusCodes.Status400BadRequest)
.Produces<Problems>(StatusCodes.Status500InternalServerError)
.WithTags(EndpointTags.Users);
}
}
PostFundManagement.Api/Endpoints/Users/SetUserLockoutEndpoint.cs
+31 -2
View File
@@ -1,5 +1,34 @@
namespace PostFundManagement.Api.Endpoints.Users;
using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;
public class SetUserLockoutEndpoint
namespace PostFundManagement.Api.Endpoints.Users;
[ApiVersionTarget(1)]
public sealed class SetUserLockoutEndpoint : IEndpoint
{
public void Map(IEndpointRouteBuilder builder)
{
builder.MapPut("api/users/{userId:Guid}/session/lockout/{disable:bool}", async (Guid userId, bool disable, HttpContext context,
IUserService service, CancellationToken cancellationToken = default) =>
await service.SetUserLockoutAsync(userId, context.GetUserId(), disable, cancellationToken) switch
{
{ IsSuccess: true } => Results.Ok(),
var r when r.HasError<NotFoundError>() => Results.NotFound(r.Errors.ToProblems()),
var r when r.HasError<UpdateError>() => Results.BadRequest(r.Errors.ToProblems()),
var r => Results.InternalServerError(r.Errors.ToProblems())
})
.WithDescription("Lock user session")
.RequireAuthorization(Constants.MainScope)
.WithName(typeof(SetUserLockoutEndpoint).ToEndpointName())
.MapToApiVersion(new ApiVersion(1))
.Produces(StatusCodes.Status200OK)
.Produces(StatusCodes.Status401Unauthorized)
.Produces<Problems>(StatusCodes.Status404NotFound)
.Produces<Problems>(StatusCodes.Status400BadRequest)
.Produces<Problems>(StatusCodes.Status500InternalServerError)
.WithTags(EndpointTags.Users);
}
}