Added user management endpoints
This commit is contained in:
@@ -1,14 +1,18 @@
|
||||
using PostFundManagement.Application.Abstractions.Services;
|
||||
using PostFundManagement.Application.Services.Shared;
|
||||
using PostFundManagement.Domain;
|
||||
using PostFundManagement.Domain.Abstractions;
|
||||
using PostFundManagement.Domain.Errors;
|
||||
using PostFundManagement.Domain.Extensions;
|
||||
using PostFundManagement.Domain.Models;
|
||||
using PostFundManagement.Domain.Models.Security;
|
||||
using PostFundManagement.Infrastructure.Database;
|
||||
using Claim = PostFundManagement.Domain.Models.Security.Claim;
|
||||
|
||||
namespace PostFundManagement.Application.Services.Users;
|
||||
|
||||
public sealed class UserService(IDbContextFactory<ApplicationDbContext> contextFactory, ITenantContextService tenantContext) : IUserService
|
||||
public sealed class UserService(IDbContextFactory<ApplicationDbContext> contextFactory, ITenantContextService tenantContext,
|
||||
ISkorubaUserService skorubaService, HashService hashService) : IUserService
|
||||
{
|
||||
public async Task<Result> SyncUserAsync(Guid userId, string email, string role, CancellationToken cancellationToken = default) =>
|
||||
await Result.Try((Func<Task<Result>>)(async () =>
|
||||
@@ -113,4 +117,208 @@ public sealed class UserService(IDbContextFactory<ApplicationDbContext> contextF
|
||||
return Result.FailIf(tenantUser == null, NotFoundError.Create("User not found."))
|
||||
.ToResult(tenantUser!.User?.Map()!);
|
||||
}));
|
||||
|
||||
public async Task<Result> CreateUserAsync(string tenantIdHash, string idNumberHash, CreateUserRequest request, Guid userId, CancellationToken cancellationToken = default) =>
|
||||
await Result.Try((Func<Task<Result>>)(async () =>
|
||||
{
|
||||
var tenantIdHashDecode = hashService.DecodeLongIdHash(tenantIdHash);
|
||||
|
||||
if (tenantIdHashDecode.IsFailed)
|
||||
return Result.Fail(IdDecodeError.Create()
|
||||
.CausedBy(tenantIdHashDecode.Errors));
|
||||
|
||||
var tenantId = tenantIdHashDecode.Value;
|
||||
|
||||
var idNumberHashDecode = await hashService.DecodeHexHash(idNumberHash);
|
||||
|
||||
if (idNumberHashDecode.IsFailed)
|
||||
return Result.Fail(IdDecodeError.Create()
|
||||
.CausedBy(idNumberHashDecode.Errors));
|
||||
|
||||
var idNumber = idNumberHashDecode.Value.Trim();
|
||||
|
||||
var email = request.Email?.Trim().ToLowerInvariant();
|
||||
|
||||
if (string.IsNullOrWhiteSpace(email))
|
||||
return Result.Fail(ValidationError.Create("Email is required."));
|
||||
|
||||
await using var context = await contextFactory.CreateDbContextAsync(cancellationToken);
|
||||
|
||||
if (await context.Users.AnyAsync(u => u.Email == email, cancellationToken))
|
||||
return Result.Fail(ValidationError.Create("User with this email already exists."));
|
||||
|
||||
var createUserResult = await skorubaService.CreateUserAsync(request, userId, cancellationToken);
|
||||
|
||||
if (createUserResult.IsFailed)
|
||||
return Result.Fail(CreateError.Create("Failed to create user."));
|
||||
|
||||
var newUserId = Guid.Parse(createUserResult.Value.Trim());
|
||||
|
||||
var availableRolesResult = await skorubaService.GetAvailableRolesAsync(cancellationToken: cancellationToken);
|
||||
|
||||
if (availableRolesResult.IsFailed)
|
||||
return Result.Fail(NotFoundError.Create("Failed to retrieve available roles."));
|
||||
|
||||
var defaultRole = availableRolesResult.Value.FirstOrDefault(r => r.Name == "Contributor");
|
||||
|
||||
if (defaultRole == null)
|
||||
return Result.Fail(NotFoundError.Create("Role 'Contributor' not found."));
|
||||
|
||||
var roleAssignmentResult = await skorubaService.AddRoleAsync(newUserId, defaultRole.Id, cancellationToken);
|
||||
|
||||
if (roleAssignmentResult.IsFailed)
|
||||
return Result.Fail(UpdateError.Create("Failed to assign role to user."));
|
||||
|
||||
var newUser = context.Users.Add(new Domain.Entities.User
|
||||
{
|
||||
Id = newUserId,
|
||||
Email = email,
|
||||
Status = ActivityStatus.Active,
|
||||
LastLoginAt = DateTime.UtcNow,
|
||||
IdNumber = idNumber,
|
||||
Role = defaultRole.Name,
|
||||
});
|
||||
|
||||
context.TenantUsers.Add(new Domain.Entities.TenantUser
|
||||
{
|
||||
CreatedAt = DateTime.UtcNow,
|
||||
CreatedBy = userId,
|
||||
Status = ActivityStatus.Active,
|
||||
TenantId = tenantId,
|
||||
UserId = newUserId,
|
||||
});
|
||||
|
||||
return Result.OkIf(await context.SaveChangesAsync(cancellationToken) > 0, CreateError.Create("Failed to create user, contact support"));
|
||||
}));
|
||||
|
||||
public async Task<Result> DeleteUserClaimAsync(string claimIdHash, Guid targetUserId, Guid userId, CancellationToken cancellationToken = default) =>
|
||||
await Result.Try((Func<Task<Result>>)(async () =>
|
||||
{
|
||||
var claimIdHashDecode = hashService.DecodeIntIdHash(claimIdHash);
|
||||
|
||||
if (claimIdHashDecode.IsFailed)
|
||||
return Result.Fail(IdDecodeError.Create()
|
||||
.CausedBy(claimIdHashDecode.Errors));
|
||||
|
||||
var claimId = claimIdHashDecode.Value;
|
||||
|
||||
await using var context = await contextFactory.CreateDbContextAsync(cancellationToken);
|
||||
|
||||
if (!await context.Users.AnyAsync(u => u.Id == targetUserId, cancellationToken))
|
||||
return Result.Fail(NotFoundError.Create("User not found."));
|
||||
|
||||
var claimDeleteResult = await skorubaService.RemoveClaimAsync(targetUserId, claimId, cancellationToken);
|
||||
|
||||
return Result.OkIf(claimDeleteResult.IsSuccess, ValidationError.Create("Failed to delete user claim.")
|
||||
.CausedBy(claimDeleteResult.Errors));
|
||||
}));
|
||||
|
||||
public async Task<Result> SetUserLockoutAsync(Guid targetUserId, Guid userId, bool disable, CancellationToken cancellationToken = default) =>
|
||||
await Result.Try((Func<Task<Result>>)(async () =>
|
||||
{
|
||||
await using var context = await contextFactory.CreateDbContextAsync(cancellationToken);
|
||||
|
||||
var lockoutResult = await skorubaService.SetUserLockoutAsync(targetUserId, disable, cancellationToken);
|
||||
|
||||
if(lockoutResult.IsFailed)
|
||||
return Result.Fail(UpdateError.Create("Failed to set user lockout.")
|
||||
.CausedBy(lockoutResult.Errors));
|
||||
|
||||
var changedTotal = await context.Users.Where(f => f.Id == targetUserId)
|
||||
.ExecuteUpdateAsync(f => f.SetProperty(u => u.Status, disable ? ActivityStatus.Disabled : ActivityStatus.Active), cancellationToken);
|
||||
|
||||
changedTotal += await context.TenantUsers.Where(f => f.UserId == targetUserId)
|
||||
.ExecuteUpdateAsync(f => f.SetProperty(u => u.Status, disable ? ActivityStatus.Disabled : ActivityStatus.Active), cancellationToken);
|
||||
|
||||
return Result.OkIf(lockoutResult.IsSuccess && changedTotal > 0, ValidationError.Create("Failed to set user lockout.")
|
||||
.CausedBy(lockoutResult.Errors));
|
||||
}));
|
||||
|
||||
public async Task<Result> LogoutUserAsync(Guid targetUserId, Guid userId, CancellationToken cancellationToken = default) =>
|
||||
await Result.Try((Func<Task<Result>>)(async () =>
|
||||
{
|
||||
var logoutResult = await skorubaService.InvalidateUserSessionAsync(targetUserId, cancellationToken);
|
||||
|
||||
return Result.OkIf(logoutResult.IsSuccess, ValidationError.Create("Failed to logout user.")
|
||||
.CausedBy(logoutResult.Errors));
|
||||
}));
|
||||
|
||||
public async Task<Result<Role[]>> GetUserRolesAsync(Guid targetUserId, Guid userId, CancellationToken cancellationToken = default) =>
|
||||
await Result.Try((Func<Task<Result<Role[]>>>)(async () =>
|
||||
await skorubaService.GetUserRolesAsync(targetUserId, cancellationToken: cancellationToken)));
|
||||
|
||||
public async Task<Result<Claim[]>> GetUserClaimsAsync(Guid targetUserId, Guid userId, CancellationToken cancellationToken = default) =>
|
||||
await Result.Try((Func<Task<Result<Claim[]>>>)(async () =>
|
||||
await skorubaService.GetUserClaimsAsync(targetUserId, cancellationToken: cancellationToken)));
|
||||
|
||||
public async Task<Result<Role[]>> GetSystemRolesAsync(Guid userId, CancellationToken cancellationToken = default) =>
|
||||
await Result.Try((Func<Task<Result<Role[]>>>)(async () =>
|
||||
await skorubaService.GetAvailableRolesAsync(cancellationToken: cancellationToken)));
|
||||
|
||||
public async Task<Result> DeleteUserRoleAsync(Guid targetUserId, string roleId, Guid userId, CancellationToken cancellationToken = default) =>
|
||||
await Result.Try((Func<Task<Result>>)(async () =>
|
||||
{
|
||||
await using var context = await contextFactory.CreateDbContextAsync(cancellationToken);
|
||||
|
||||
var changedTotal = await context.Users.Where(f => f.Id == targetUserId)
|
||||
.ExecuteUpdateAsync(f => f.SetProperty(u => u.Role, string.Empty), cancellationToken);
|
||||
|
||||
var roleDeleteResult = await skorubaService.RemoveRoleAsync(targetUserId, roleId, cancellationToken);
|
||||
|
||||
return Result.OkIf(roleDeleteResult.IsSuccess && changedTotal > 0, ValidationError.Create("Failed to delete user role.")
|
||||
.CausedBy(roleDeleteResult.Errors));
|
||||
}));
|
||||
|
||||
public async Task<Result> AddUserClaimAsync(AddUserClaimRequest request, Guid userId, CancellationToken cancellationToken = default) =>
|
||||
await Result.Try((Func<Task<Result>>)(async () =>
|
||||
{
|
||||
var addClaimResult = await skorubaService.AddClaimAsync(request.UserId, request.ClaimType, request.ClaimValue, cancellationToken);
|
||||
|
||||
return Result.OkIf(addClaimResult.IsSuccess, ValidationError.Create("Failed to add user claim.")
|
||||
.CausedBy(addClaimResult.Errors));
|
||||
}));
|
||||
|
||||
public async Task<Result> AddUserRoleAsync(Guid targetUserId, string roleId, Guid userId, CancellationToken cancellationToken = default) =>
|
||||
await Result.Try((Func<Task<Result>>)(async () =>
|
||||
{
|
||||
var userRolesResult = await skorubaService.GetUserRolesAsync(targetUserId, cancellationToken: cancellationToken);
|
||||
|
||||
if (userRolesResult.IsFailed)
|
||||
return Result.Fail(NotFoundError.Create("Failed to retrieve user roles.")
|
||||
.CausedBy(userRolesResult.Errors));
|
||||
|
||||
foreach (var role in userRolesResult.Value)
|
||||
{
|
||||
var deleteRoleResult = await skorubaService.RemoveRoleAsync(targetUserId, role.Id, cancellationToken);
|
||||
|
||||
if (deleteRoleResult.IsFailed)
|
||||
return Result.Fail(UpdateError.Create("Failed to remove existing user role.")
|
||||
.CausedBy(deleteRoleResult.Errors));
|
||||
}
|
||||
|
||||
var roleAddResult = await skorubaService.AddRoleAsync(targetUserId, roleId, cancellationToken);
|
||||
|
||||
if(roleAddResult.IsFailed)
|
||||
return Result.Fail(UpdateError.Create("Failed to add user role.")
|
||||
.CausedBy(roleAddResult.Errors));
|
||||
|
||||
var systemRoles = await skorubaService.GetAvailableRolesAsync(cancellationToken: cancellationToken);
|
||||
|
||||
if (systemRoles.IsFailed)
|
||||
return Result.Fail(NotFoundError.Create("Failed to retrieve system roles.")
|
||||
.CausedBy(systemRoles.Errors));
|
||||
|
||||
var targetRole = systemRoles.Value.FirstOrDefault(r => r.Id == roleId);
|
||||
|
||||
if (targetRole == null)
|
||||
return Result.Fail(NotFoundError.Create("Role not found."));
|
||||
|
||||
await using var context = await contextFactory.CreateDbContextAsync(cancellationToken);
|
||||
|
||||
var changedTotal = await context.Users.Where(f => f.Id == targetUserId)
|
||||
.ExecuteUpdateAsync(f => f.SetProperty(u => u.Role, targetRole.Name), cancellationToken);
|
||||
|
||||
return Result.OkIf(roleAddResult.IsSuccess && changedTotal > 0, ValidationError.Create("Failed to add user role.")
|
||||
.CausedBy(roleAddResult.Errors));
|
||||
}));
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user