Reogranised API and Security assets

2026-08-30 15:08:58 +02:00
parent c204cbb1c2
commit 4827cb5795
57 changed files with 88 additions and 89 deletions
@@ -0,0 +1,34 @@
+using PostFundManagement.Application.Services.Shared;
+using static PostFundManagement.Application.Extensions.General;
+using static PostFundManagement.Domain.Extensions.Constants;
+
+namespace PostFundManagement.Application.Filters;
+
+public sealed class ActiveUserFilter(IdentityService identityService) : IEndpointFilter
+{
+    public async ValueTask<object?> InvokeAsync(EndpointFilterInvocationContext context, EndpointFilterDelegate next)
+    {
+        var principal = context.HttpContext.User;
+
+        if (principal.Identity is null || !principal.Identity.IsAuthenticated)
+            return Results.Unauthorized();
+
+        var (decoded, userId) = principal.GetUserId();
+        var (emailDecoded, email) = principal.GetUserEmail();
+
+        if (!decoded)
+            return Results.Json(new { message = "Invalid user identifier in token." }, statusCode: StatusCodes.Status400BadRequest);
+
+        if (!emailDecoded)
+            return Results.Json(new { message = "Invalid/missing user email in token." }, statusCode: StatusCodes.Status400BadRequest);
+
+        if ((await identityService.UserIsAuthorisedAsync(userId, context.HttpContext.RequestAborted)).IsFailed)
+            return (object?)Results.Json(new { message = "Account approval is pending or inactive." }, statusCode: StatusCodes.Status403Forbidden);
+
+        context.HttpContext.Items[UserIdItemKey] = userId;
+        context.HttpContext.Items[EmaiItemKey] = email;
+
+        return await next(context);
+
+    }
+}