Refactored endpoints to use services

PostFundManagement.Api/Endpoints/Evidence/UploadEvidenceFilesEndpoint.cs

@@ -1,4 +1,5 @@
 using PostFundManagement.Application.Evidence;
+using PostFundManagement.Application.Extensions;
 using PostFundManagement.Domain.Abstractions;
 using PostFundManagement.Domain.Api;
 using PostFundManagement.Domain.Extensions;
@@ -10,12 +11,10 @@ public class UploadEvidenceFilesEndpoint : IEndpoint
 {
     public void Map(IEndpointRouteBuilder builder)
     {
-        builder.MapPost("api/evidence/files", async (HttpRequest request, ClaimsPrincipal principal, EvidenceService service, CancellationToken cancellationToken = default) =>
+        builder.MapPost("api/evidence/files", async (HttpRequest request, EvidenceService service, 
+            CancellationToken cancellationToken = default) =>
         {
-            var sidClaim = principal.FindFirst("sid")?.Value ?? principal.FindFirst(ClaimTypes.Sid)?.Value;
-
-            if (!Guid.TryParse(sidClaim, out var userId))
-                return Results.BadRequest("Missing or invalid 'sid' claim.");
+            var userId = request.HttpContext.GetUserId();
 
             if (!request.HasFormContentType)
                 return Results.BadRequest("Request must be a multipart form.");
@@ -29,8 +28,8 @@ public class UploadEvidenceFilesEndpoint : IEndpoint
             var result = await service.UploadEvidenceFileAsync(userId, form, file, cancellationToken);
 
             return result.IsSuccess
-                ? Results.Created()
-                : Results.BadRequest("Evidence upload failed");
+                ? Results.Ok()
+                : Results.BadRequest(result.Errors.ToProblems());
         })
         .RequireAuthorization()
         .DisableAntiforgery()
@@ -38,7 +37,7 @@ public class UploadEvidenceFilesEndpoint : IEndpoint
         .WithName(typeof(UploadEvidenceFilesEndpoint).ToEndpointName())
         .MapToApiVersion(new ApiVersion(1))
         .Produces(StatusCodes.Status200OK)
-        .Produces(StatusCodes.Status400BadRequest)
+        .Produces<Microsoft.AspNetCore.Mvc.ProblemDetails>(StatusCodes.Status400BadRequest)
         .Produces(StatusCodes.Status401Unauthorized)
         .WithTags(EndpointTags.Evidence);
     }